Technical Information
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'taskhostw' = '<Full path to file>'
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
- %CommonProgramFiles%\microsoft shared\smart tag\fdate.dll
- %CommonProgramFiles%\microsoft shared\smart tag\fbiblio.dll
- %CommonProgramFiles%\microsoft shared\proof\mslid.dll
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppwmi.dll
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\ospprearm.exe
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppobjs.dll
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppcext.dll
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppc.dll
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\osetupui.dll
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\branding.dll
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\osetup.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\oarpmanr.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\mssoapr3.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.rest.idx_dll
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.dll.idx_dll
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\alrtintl.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\acewstr.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\acerecr.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\aceodbci.dll
- %CommonProgramFiles%\microsoft shared\office14\1033\aceintl.dll
- %CommonProgramFiles%\microsoft shared\office14\wisc30.dll
- %CommonProgramFiles%\microsoft shared\smart tag\fperson.dll
- %CommonProgramFiles%\microsoft shared\smart tag\fplace.dll
- %CommonProgramFiles%\microsoft shared\smart tag\fstock.dll
- %CommonProgramFiles%\microsoft shared\smart tag\ietag.dll
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\fpsrvutl.dll
- %CommonProgramFiles%\microsoft shared\web folders\1033\msosvint.dll
- %CommonProgramFiles%\microsoft shared\web folders\msosv.dll
- %CommonProgramFiles%\microsoft shared\vsto\vstoee90.tlb
- %CommonProgramFiles%\microsoft shared\vsto\vstoee100.tlb
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\vbe7intl.dll
- %CommonProgramFiles%\microsoft shared\vba\vba7\vbe7.dll
- %CommonProgramFiles%\microsoft shared\translat\fren\msb1fren.dll
- %CommonProgramFiles%\microsoft shared\translat\esen\msb1esen.dll
- %CommonProgramFiles%\microsoft shared\translat\wtsp61ms.dll
- %CommonProgramFiles%\microsoft shared\translat\msb1xtor.dll
- %CommonProgramFiles%\microsoft shared\translat\msb1core.dll
- %CommonProgramFiles%\microsoft shared\translat\msb1star.dll
- %CommonProgramFiles%\microsoft shared\textconv\wpft632.cnv
- %CommonProgramFiles%\microsoft shared\textconv\wpft532.cnv
- %CommonProgramFiles%\microsoft shared\textconv\wks9pxy.cnv
- %CommonProgramFiles%\microsoft shared\textconv\recovr32.cnv
- %CommonProgramFiles%\microsoft shared\textconv\msconv97.dll
- %CommonProgramFiles%\microsoft shared\source engine\ose.exe
- %CommonProgramFiles%\microsoft shared\smart tag\1033\stintl.dll.idx_dll
- %CommonProgramFiles%\microsoft shared\smart tag\1033\stintl.dll
- %CommonProgramFiles%\microsoft shared\smart tag\mofl.dll
- %CommonProgramFiles%\microsoft shared\smart tag\metconv.dll
- %CommonProgramFiles%\microsoft shared\smart tag\imcontact.dll
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\fpwec.dll
- %CommonProgramFiles%\microsoft shared\office14\vbajet32.dll
- %CommonProgramFiles%\microsoft shared\office14\usp10.dll
- %CommonProgramFiles%\microsoft shared\office14\riched20.dll
- %CommonProgramFiles%\microsoft shared\office14\aceodbc.dll
- %CommonProgramFiles%\microsoft shared\office14\aceexcl.dll
- %CommonProgramFiles%\microsoft shared\office14\aceexch.dll
- %CommonProgramFiles%\microsoft shared\office14\acees.dll
- %CommonProgramFiles%\microsoft shared\office14\aceerr.dll
- %CommonProgramFiles%\microsoft shared\office14\acedao.dll
- %CommonProgramFiles%\microsoft shared\office14\acecore.dll
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\mscdm.dll
- %CommonProgramFiles%\microsoft shared\help\itircl55.dll
- %CommonProgramFiles%\microsoft shared\grphflt\wpgimp32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\png32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\pictim32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\jpegim32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\gifimp32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\epsimp32.flt
- %CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.flt
- %CommonProgramFiles%\microsoft shared\euro\msoeuro.dll
- %CommonProgramFiles%\microsoft shared\equation\1033\eeintl.dll
- %CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe
- %CommonProgramFiles%\microsoft shared\dw\dwtrig20.exe
- %CommonProgramFiles%\microsoft shared\dw\dw20.exe
- %CommonProgramFiles%\microsoft shared\dw\dbghelp.dll
- %CommonProgramFiles%\designer\msaddndr.dll
- %CommonProgramFiles%\microsoft shared\office14\aceoddbs.dll
- %CommonProgramFiles%\microsoft shared\office14\aceodexl.dll
- %CommonProgramFiles%\microsoft shared\office14\aceodtxt.dll
- %CommonProgramFiles%\microsoft shared\office14\aceoledb.dll
- %CommonProgramFiles%\microsoft shared\office14\ophproxy.dll
- %CommonProgramFiles%\microsoft shared\office14\offrel.dll
- %CommonProgramFiles%\microsoft shared\office14\muoptin.dll
- %CommonProgramFiles%\microsoft shared\office14\mssoap30.dll
- %CommonProgramFiles%\microsoft shared\office14\msptls.dll
- %CommonProgramFiles%\microsoft shared\office14\msoxmlmf.dll
- %CommonProgramFiles%\microsoft shared\office14\msoxmled.exe
- %CommonProgramFiles%\microsoft shared\office14\msoxev.dll
- %CommonProgramFiles%\microsoft shared\office14\msores.dll
- %CommonProgramFiles%\microsoft shared\office14\msoicons.exe
- %CommonProgramFiles%\microsoft shared\office14\mso.dll
- %CommonProgramFiles%\microsoft shared\office14\iacom2.dll
- %CommonProgramFiles%\microsoft shared\office14\liclua.exe
- %CommonProgramFiles%\microsoft shared\office14\fltldr.exe
- %CommonProgramFiles%\microsoft shared\office14\exp_xps.dll
- %CommonProgramFiles%\microsoft shared\office14\exp_pdf.dll
- %CommonProgramFiles%\microsoft shared\office14\expsrv.dll
- %CommonProgramFiles%\microsoft shared\office14\acexbe.dll
- %CommonProgramFiles%\microsoft shared\office14\acewss.dll
- %CommonProgramFiles%\microsoft shared\office14\acewdat.dll
- %CommonProgramFiles%\microsoft shared\office14\acetxt.dll
- %CommonProgramFiles%\microsoft shared\office14\acerep.dll
- %CommonProgramFiles%\microsoft shared\office14\acerclr.dll
- %CommonProgramFiles%\microsoft shared\office14\acer3x.dll
- %CommonProgramFiles%\microsoft shared\office14\optinps.dll
- %CommonProgramFiles%\system\msmapi\1033\msmapi32.dll
- <Drive name for removable media>:\readme.txt
- C:\lockbit\systemid
- C:\readme.txt
- D:\readme.txt
- %HOMEPATH%\desktop\readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab.wingransomware@test.com.zb6upztdqzdd.wing
- <Full path to file>
- from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\outlook.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\outlook.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\outlook.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\outlook.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.hol to %ProgramFiles%\microsoft office\office14\1033\outlook.hol.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.hxs to %ProgramFiles%\microsoft office\office14\1033\outlook.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook_col.hxc to %ProgramFiles%\microsoft office\office14\1033\outlook_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook_col.hxt to %ProgramFiles%\microsoft office\office14\1033\outlook_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\outlook_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\outlook_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlperf.h to %ProgramFiles%\microsoft office\office14\1033\outlperf.h.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outllibr.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\outllibr.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlperf.ini to %ProgramFiles%\microsoft office\office14\1033\outlperf.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlook.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\outlook.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlwvw.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\outlwvw.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.hxs to %ProgramFiles%\microsoft office\office14\1033\powerpnt.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt_col.hxc to %ProgramFiles%\microsoft office\office14\1033\powerpnt_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt_col.hxt to %ProgramFiles%\microsoft office\office14\1033\powerpnt_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\powerpnt_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\powerpnt_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ppintl.dll to %ProgramFiles%\microsoft office\office14\1033\ppintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ppintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\ppintl.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlwvw.dll to %ProgramFiles%\microsoft office\office14\1033\outlwvw.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ppintl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\ppintl.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\powerpnt.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outllibr.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\outllibr.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outllibr.dll to %ProgramFiles%\microsoft office\office14\1033\outllibr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outlbar.inf to %ProgramFiles%\microsoft office\office14\1033\outlbar.inf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mspub_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msqry32.chm to %ProgramFiles%\microsoft office\office14\1033\msqry32.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstintl.dll to %ProgramFiles%\microsoft office\office14\1033\mstintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstore.hxs to %ProgramFiles%\microsoft office\office14\1033\mstore.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstore_col.hxc to %ProgramFiles%\microsoft office\office14\1033\mstore_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstore_col.hxt to %ProgramFiles%\microsoft office\office14\1033\mstore_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstore_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mstore_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mstore_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mstore_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\offowci.dll to %ProgramFiles%\microsoft office\office14\1033\offowci.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ois.hxs to %ProgramFiles%\microsoft office\office14\1033\ois.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\oisintl.dll to %ProgramFiles%\microsoft office\office14\1033\oisintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ois_col.hxc to %ProgramFiles%\microsoft office\office14\1033\ois_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub_col.hxt to %ProgramFiles%\microsoft office\office14\1033\mspub_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ois_col.hxt to %ProgramFiles%\microsoft office\office14\1033\ois_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ois_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\ois_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\omsintl.dll to %ProgramFiles%\microsoft office\office14\1033\omsintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\omsintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\omsintl.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onelev.exe to %ProgramFiles%\microsoft office\office14\1033\onelev.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onenote.hxs to %ProgramFiles%\microsoft office\office14\1033\onenote.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onenote_col.hxc to %ProgramFiles%\microsoft office\office14\1033\onenote_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onenote_col.hxt to %ProgramFiles%\microsoft office\office14\1033\onenote_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onenote_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\onenote_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onenote_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\onenote_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onguide.onepkg to %ProgramFiles%\microsoft office\office14\1033\onguide.onepkg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onintl.dll to %ProgramFiles%\microsoft office\office14\1033\onintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\onintl.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\onintl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\onintl.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ois_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\ois_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\outform.dat to %ProgramFiles%\microsoft office\office14\1033\outform.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_greentea.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mspub_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub_col.hxc to %ProgramFiles%\microsoft office\office14\1033\mspub_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottplv.ppt to %ProgramFiles%\microsoft office\office14\1033\prottplv.ppt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\wwintl.dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm to %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm to %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm to %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\bibliography\bibform.xml to %ProgramFiles%\microsoft office\office14\1033\bibliography\bibform.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\desktop.ini to %ProgramFiles%\microsoft office\office14\1033\dataservices\desktop.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico to %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_adobe.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_casual.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_casual.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_country.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_country.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_earthy.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xllex.dll to %ProgramFiles%\microsoft office\office14\1033\xllex.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottpln.doc to %ProgramFiles%\microsoft office\office14\1033\prottpln.doc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll to %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.hxs to %ProgramFiles%\microsoft office\office14\1033\winword.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottplv.xls to %ProgramFiles%\microsoft office\office14\1033\prottplv.xls.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\psrchkey.dat to %ProgramFiles%\microsoft office\office14\1033\psrchkey.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\psrchlex.dat to %ProgramFiles%\microsoft office\office14\1033\psrchlex.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\psrchlts.dat to %ProgramFiles%\microsoft office\office14\1033\psrchlts.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\psrchphn.dat to %ProgramFiles%\microsoft office\office14\1033\psrchphn.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat to %ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pub6intl.dll to %ProgramFiles%\microsoft office\office14\1033\pub6intl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pub6intl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\pub6intl.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pub6intl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\pub6intl.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubcolor.scm to %ProgramFiles%\microsoft office\office14\1033\pubcolor.scm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubwzint.dll to %ProgramFiles%\microsoft office\office14\1033\pubwzint.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottplv.doc to %ProgramFiles%\microsoft office\office14\1033\prottplv.doc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\qryint32.dll to %ProgramFiles%\microsoft office\office14\1033\qryint32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm to %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\setlang.hxs to %ProgramFiles%\microsoft office\office14\1033\setlang.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\slintl.dll to %ProgramFiles%\microsoft office\office14\1033\slintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\socialconnectorres.dll to %ProgramFiles%\microsoft office\office14\1033\socialconnectorres.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\stslist.chm to %ProgramFiles%\microsoft office\office14\1033\stslist.chm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\stslisti.dll to %ProgramFiles%\microsoft office\office14\1033\stslisti.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\vviewres.dll to %ProgramFiles%\microsoft office\office14\1033\vviewres.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\winword.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottpln.xls to %ProgramFiles%\microsoft office\office14\1033\prottpln.xls.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml to %ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\prottpln.ppt to %ProgramFiles%\microsoft office\office14\1033\prottpln.ppt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel_col.hxt to %ProgramFiles%\microsoft office\office14\1033\excel_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xocr3.psp to %ProgramFiles%\microsoft office\office14\xocr3.psp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xpage3c.dll to %ProgramFiles%\microsoft office\office14\xpage3c.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\accddsui.dll to %ProgramFiles%\microsoft office\office14\1033\accddsui.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\access12.acc to %ProgramFiles%\microsoft office\office14\1033\access12.acc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\accolki.dll to %ProgramFiles%\microsoft office\office14\1033\accolki.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\accvdtui.dll to %ProgramFiles%\microsoft office\office14\1033\accvdtui.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\actip10.hlp to %ProgramFiles%\microsoft office\office14\1033\actip10.hlp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\acwizrc.dll to %ProgramFiles%\microsoft office\office14\1033\acwizrc.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\bhointl.dll to %ProgramFiles%\microsoft office\office14\1033\bhointl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\certintl.dll to %ProgramFiles%\microsoft office\office14\1033\certintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\clvwintl.dll to %ProgramFiles%\microsoft office\office14\1033\clvwintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xlcprtid.xml to %ProgramFiles%\microsoft office\office14\xlcprtid.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xml2word.xsl to %ProgramFiles%\microsoft office\office14\xml2word.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ct_roots.xml to %ProgramFiles%\microsoft office\office14\1033\ct_roots.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\discussion14.gta to %ProgramFiles%\microsoft office\office14\1033\discussion14.gta.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\eawfintl.dll to %ProgramFiles%\microsoft office\office14\1033\eawfintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\envelopr.dll to %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\excel.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\excel.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\excel.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\excel.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\excel.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel.hxs to %ProgramFiles%\microsoft office\office14\1033\excel.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\discussion.gta to %ProgramFiles%\microsoft office\office14\1033\discussion.gta.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xlicons.exe to %ProgramFiles%\microsoft office\office14\xlicons.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\xlcall32.dll to %ProgramFiles%\microsoft office\office14\xlcall32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ximage3b.dll to %ProgramFiles%\microsoft office\office14\ximage3b.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\socialconnector.dll to %ProgramFiles%\microsoft office\office14\socialconnector.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\socialprovider.dll to %ProgramFiles%\microsoft office\office14\socialprovider.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\spanish.lng to %ProgramFiles%\microsoft office\office14\spanish.lng.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\splashscreen.bmp to %ProgramFiles%\microsoft office\office14\splashscreen.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ssgen.dll to %ProgramFiles%\microsoft office\office14\ssgen.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\stslist.dll to %ProgramFiles%\microsoft office\office14\stslist.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\subscription.xsd to %ProgramFiles%\microsoft office\office14\subscription.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\thocr.psp to %ProgramFiles%\microsoft office\office14\thocr.psp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\thocrapi.dll to %ProgramFiles%\microsoft office\office14\thocrapi.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twcutchr.dll to %ProgramFiles%\microsoft office\office14\twcutchr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twcutlin.dll to %ProgramFiles%\microsoft office\office14\twcutlin.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twlay32.dll to %ProgramFiles%\microsoft office\office14\twlay32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\slerror.xml to %ProgramFiles%\microsoft office\office14\slerror.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\tworient.dll to %ProgramFiles%\microsoft office\office14\tworient.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twrece.dll to %ProgramFiles%\microsoft office\office14\twrece.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twrecs.dll to %ProgramFiles%\microsoft office\office14\twrecs.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twstruct.dll to %ProgramFiles%\microsoft office\office14\twstruct.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\urlredir.dll to %ProgramFiles%\microsoft office\office14\urlredir.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\visshe.dll to %ProgramFiles%\microsoft office\office14\visshe.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\vpreview.exe to %ProgramFiles%\microsoft office\office14\vpreview.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\vviewdwg.dll to %ProgramFiles%\microsoft office\office14\vviewdwg.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\vviewer.dll to %ProgramFiles%\microsoft office\office14\vviewer.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\winword.exe to %ProgramFiles%\microsoft office\office14\winword.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv to %ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\wordicon.exe to %ProgramFiles%\microsoft office\office14\wordicon.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\wordirm.xml to %ProgramFiles%\microsoft office\office14\wordirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\wordirmv.xml to %ProgramFiles%\microsoft office\office14\wordirmv.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\twrecc.dll to %ProgramFiles%\microsoft office\office14\twrecc.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\wwlib.dll to %ProgramFiles%\microsoft office\office14\wwlib.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mspub.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.opg to %ProgramFiles%\microsoft office\office14\1033\mspub.opg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.hxs to %ProgramFiles%\microsoft office\office14\1033\mspub.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\exptoows.dll to %ProgramFiles%\microsoft office\office14\1033\exptoows.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mapir.dll to %ProgramFiles%\microsoft office\office14\1033\mapir.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mapir.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\mapir.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mapishellr.dll to %ProgramFiles%\microsoft office\office14\1033\mapishellr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mor6int.dll to %ProgramFiles%\microsoft office\office14\1033\mor6int.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mor6int.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\mor6int.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\msaccess.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msaccess.dev_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess.hxs to %ProgramFiles%\microsoft office\office14\1033\msaccess.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ipedintl.dll to %ProgramFiles%\microsoft office\office14\1033\ipedintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxc to %ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\issue tracking.gta to %ProgramFiles%\microsoft office\office14\1033\issue tracking.gta.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msaccess_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msain.dll to %ProgramFiles%\microsoft office\office14\1033\msain.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mso.acl to %ProgramFiles%\microsoft office\office14\1033\mso.acl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msouc.hxs to %ProgramFiles%\microsoft office\office14\1033\msouc.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msouc_col.hxc to %ProgramFiles%\microsoft office\office14\1033\msouc_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msouc_col.hxt to %ProgramFiles%\microsoft office\office14\1033\msouc_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msouc_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msouc_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msouc_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msouc_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.dev.hxs to %ProgramFiles%\microsoft office\office14\1033\mspub.dev.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\mspub.dev_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\mspub.dev_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\mspub.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\mspub.dev_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxt to %ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel_col.hxc to %ProgramFiles%\microsoft office\office14\1033\excel_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\msaccess_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\msaccess_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ipolkintl.dll to %ProgramFiles%\microsoft office\office14\1033\ipolkintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\ipdsintl.dll to %ProgramFiles%\microsoft office\office14\1033\ipdsintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\invite or link.one to %ProgramFiles%\microsoft office\office14\1033\invite or link.one.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\exptoows.xla to %ProgramFiles%\microsoft office\office14\1033\exptoows.xla.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\gr8galry.gra to %ProgramFiles%\microsoft office\office14\1033\gr8galry.gra.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\graph.hxs to %ProgramFiles%\microsoft office\office14\1033\graph.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\graph_col.hxc to %ProgramFiles%\microsoft office\office14\1033\graph_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\graph_col.hxt to %ProgramFiles%\microsoft office\office14\1033\graph_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\graph_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\graph_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\graph_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\graph_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grintl32.dll to %ProgramFiles%\microsoft office\office14\1033\grintl32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grintl32.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\grintl32.dll.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grintl32.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\grintl32.rest.idx_dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grlex.dll to %ProgramFiles%\microsoft office\office14\1033\grlex.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove starter template.xsn to %ProgramFiles%\microsoft office\office14\1033\groove starter template.xsn.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\excel_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove.hxs to %ProgramFiles%\microsoft office\office14\1033\groove.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove_col.hxt to %ProgramFiles%\microsoft office\office14\1033\groove_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\groove_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\groove_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infintl.dll to %ProgramFiles%\microsoft office\office14\1033\infintl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopath.hxs to %ProgramFiles%\microsoft office\office14\1033\infopath.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopatheditor.hxs to %ProgramFiles%\microsoft office\office14\1033\infopatheditor.hxs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopatheditor_col.hxc to %ProgramFiles%\microsoft office\office14\1033\infopatheditor_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopatheditor_col.hxt to %ProgramFiles%\microsoft office\office14\1033\infopatheditor_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopatheditor_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\infopatheditor_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopatheditor_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\infopatheditor_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopath_col.hxc to %ProgramFiles%\microsoft office\office14\1033\infopath_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopath_col.hxt to %ProgramFiles%\microsoft office\office14\1033\infopath_col.hxt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopath_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\infopath_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\groove_col.hxc to %ProgramFiles%\microsoft office\office14\1033\groove_col.hxc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\infopath_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\infopath_k_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\excel_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\excel_f_col.hxk.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\soa.dll to %ProgramFiles%\microsoft office\office14\soa.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_groove.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_groove.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_texturedblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir24f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir24f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir25f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir25f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir26f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir26f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir27f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir27f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir2b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir2b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir2f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir2f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir30b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir30b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir21f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir21f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir30f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir30f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir23f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir23f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir31f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir31f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir32f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir32f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir33b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir33b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir33f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir33f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir34b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir34b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir34f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir34f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir37f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir37f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir38f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir38f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir31b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir31b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir39f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir39f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir32b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir32b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir22f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir22f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir20f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir20f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir1f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir1f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\papers.ini to %ProgramFiles%\microsoft office\office14\1033\pubspapr\papers.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir10f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir10f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir11f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir11f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir12f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir12f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir13f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir13f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir14f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir14f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir15f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir15f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir16f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir16f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir17f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir17f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir18f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir18f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir19f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir19f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir1b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir1b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir3b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir3b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir42f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir42f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir10f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir10f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir11f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir11f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir12f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir12f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir13f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir13f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir14f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir14f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir15f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir15f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir16f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir16f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir17f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir17f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir18f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir18f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir19f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir19f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir1b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir1b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir1f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir1f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpapers.ini to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpapers.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir00.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir00.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir20f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir20f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir23f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir23f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir24f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir24f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir25f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir25f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir26f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir26f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir27f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir27f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir28f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir28f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir29f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir29f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir30f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir30f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir31f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir31f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir32f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir32f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir21f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir21f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir22f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir22f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir9f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir9f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir8f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir8f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\dbghelp.dll to %ProgramFiles%\microsoft office\office14\dbghelp.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir43b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir43b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir43f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir43f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir44b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir44b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir44f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir44f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir47b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir47b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir47f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir47f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir48b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir48b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir48f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir48f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir49b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir49b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir49f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir49f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir4b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir4b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir4f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir4f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir50b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir50b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir50f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir50f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir51b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir51b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir51f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir51f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir7b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir7b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir7f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir7f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir8b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir8b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir3f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir3f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir41f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir41f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir40f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir40f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_olivegreen.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_lightspirit.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\button.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\background.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\button.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_velvetrose.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_slateblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_bold.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_bold.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_choosefont.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_choosefont.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_italic.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_italic.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_spellcheck.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_spellcheck.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_underline.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\rtf_underline.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_premium.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_premium.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\background.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\document.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\document.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\generic.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\generic.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\main.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\main.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\person.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\person.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\response.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\response.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\background.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\background.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\header.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\tab_off.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\fontschm.ini to %ProgramFiles%\microsoft office\office14\1033\pubftscm\fontschm.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\button.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime\tab_on.gif to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\sharepointprovider.dll to %ProgramFiles%\microsoft office\office14\sharepointprovider.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\setlang.exe to %ProgramFiles%\microsoft office\office14\setlang.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\seqchk10.dll to %ProgramFiles%\microsoft office\office14\seqchk10.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bullets.dll to %ProgramFiles%\microsoft office\media\office14\bullets\bullets.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml to %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\office10.dll to %ProgramFiles%\microsoft office\media\office14\office10.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\office10.mmw to %ProgramFiles%\microsoft office\media\office14\office10.mmw.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\1033\office10.mml to %ProgramFiles%\microsoft office\media\office14\1033\office10.mml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\autoshap.dll to %ProgramFiles%\microsoft office\media\office14\autoshap\autoshap.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msocf.dll to %ProgramFiles%\microsoft office\office14\msocf.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msodcw.dll to %ProgramFiles%\microsoft office\office14\msodcw.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msohev.dll to %ProgramFiles%\microsoft office\office14\msohev.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msohevi.dll to %ProgramFiles%\microsoft office\office14\msohevi.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msohtmed.exe to %ProgramFiles%\microsoft office\office14\msohtmed.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msostyle.dll to %ProgramFiles%\microsoft office\office14\msostyle.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msosync.exe to %ProgramFiles%\microsoft office\office14\msosync.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msouc.exe to %ProgramFiles%\microsoft office\office14\msouc.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msoutl.olb to %ProgramFiles%\microsoft office\office14\msoutl.olb.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msppt.olb to %ProgramFiles%\microsoft office\office14\msppt.olb.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mspst32.dll to %ProgramFiles%\microsoft office\office14\mspst32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mso0127.acl to %ProgramFiles%\microsoft office\office14\mso0127.acl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mspub.exe to %ProgramFiles%\microsoft office\office14\mspub.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msqry32.exe to %ProgramFiles%\microsoft office\office14\msqry32.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msocfuiutilitiesdll.dll to %ProgramFiles%\microsoft office\office14\msocfuiutilitiesdll.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msrtedit.dll to %ProgramFiles%\microsoft office\office14\msrtedit.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mstore.exe to %ProgramFiles%\microsoft office\office14\mstore.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mstores.dll to %ProgramFiles%\microsoft office\office14\mstores.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msword.olb to %ProgramFiles%\microsoft office\office14\msword.olb.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msyubin7.dll to %ProgramFiles%\microsoft office\office14\msyubin7.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mysl.ico to %ProgramFiles%\microsoft office\office14\mysl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\name.dll to %ProgramFiles%\microsoft office\office14\name.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\namecontrolproxy.dll to %ProgramFiles%\microsoft office\office14\namecontrolproxy.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\namecontrolserver.exe to %ProgramFiles%\microsoft office\office14\namecontrolserver.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\nl7data0011.dll to %ProgramFiles%\microsoft office\office14\nl7data0011.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\nl7lexicons0011.dll to %ProgramFiles%\microsoft office\office14\nl7lexicons0011.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mspub.tlb to %ProgramFiles%\microsoft office\office14\mspub.tlb.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msn.ico to %ProgramFiles%\microsoft office\office14\msn.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mapishell.dll to %ProgramFiles%\microsoft office\office14\mapishell.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mstordb.exe to %ProgramFiles%\microsoft office\office14\mstordb.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msocfu.dll to %ProgramFiles%\microsoft office\office14\msocfu.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7jp.kic to %ProgramFiles%\microsoft office\office14\mset7jp.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7ge.kic to %ProgramFiles%\microsoft office\office14\mset7ge.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml to %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml to %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml to %ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml to %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml to %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml to %ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mimedir.dll to %ProgramFiles%\microsoft office\office14\mimedir.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mlcfg32.cpl to %ProgramFiles%\microsoft office\office14\mlcfg32.cpl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mlshext.dll to %ProgramFiles%\microsoft office\office14\mlshext.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mml2omml.xsl to %ProgramFiles%\microsoft office\office14\mml2omml.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\morph9.dll to %ProgramFiles%\microsoft office\office14\morph9.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msacc.olb to %ProgramFiles%\microsoft office\office14\msacc.olb.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\medcat.dll to %ProgramFiles%\microsoft office\office14\medcat.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msaccess.exe to %ProgramFiles%\microsoft office\office14\msaccess.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscol11.inf to %ProgramFiles%\microsoft office\office14\mscol11.inf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscol11.ppd to %ProgramFiles%\microsoft office\office14\mscol11.ppd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7cm_en.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_en.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7cm_es.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_es.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7wre_en.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_en.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7wre_es.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_es.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7db.kic to %ProgramFiles%\microsoft office\office14\mset7db.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7en.kic to %ProgramFiles%\microsoft office\office14\mset7en.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7es.kic to %ProgramFiles%\microsoft office\office14\mset7es.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mset7fr.kic to %ProgramFiles%\microsoft office\office14\mset7fr.kic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\nl7models0011.dll to %ProgramFiles%\microsoft office\office14\nl7models0011.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\msaexp30.dll to %ProgramFiles%\microsoft office\office14\msaexp30.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mcps.dll to %ProgramFiles%\microsoft office\office14\mcps.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\lookup.dat to %ProgramFiles%\microsoft office\office14\lookup.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml to %ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\npauthz.dll to %ProgramFiles%\microsoft office\office14\npauthz.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oemprint.cat to %ProgramFiles%\microsoft office\office14\oemprint.cat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\peopledatahandler.dll to %ProgramFiles%\microsoft office\office14\peopledatahandler.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\powerpnt.exe to %ProgramFiles%\microsoft office\office14\powerpnt.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ppcore.dll to %ProgramFiles%\microsoft office\office14\ppcore.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ppslax.dll to %ProgramFiles%\microsoft office\office14\ppslax.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pptico.exe to %ProgramFiles%\microsoft office\office14\pptico.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pptirm.xml to %ProgramFiles%\microsoft office\office14\pptirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pptirmv.xml to %ProgramFiles%\microsoft office\office14\pptirmv.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\prtf9.dll to %ProgramFiles%\microsoft office\office14\prtf9.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pstprx32.dll to %ProgramFiles%\microsoft office\office14\pstprx32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ptxt9.dll to %ProgramFiles%\microsoft office\office14\ptxt9.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlook.exe.manifest to %ProgramFiles%\microsoft office\office14\outlook.exe.manifest.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubconv.dll to %ProgramFiles%\microsoft office\office14\pubconv.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\recall.dll to %ProgramFiles%\microsoft office\office14\recall.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlvbs.dll to %ProgramFiles%\microsoft office\office14\outlvbs.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\refedit.dll to %ProgramFiles%\microsoft office\office14\refedit.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\reverse.dll to %ProgramFiles%\microsoft office\office14\reverse.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\rswop.icm to %ProgramFiles%\microsoft office\office14\rswop.icm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\rtfhtml.dll to %ProgramFiles%\microsoft office\office14\rtfhtml.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\saext.dll to %ProgramFiles%\microsoft office\office14\saext.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\scanpst.exe to %ProgramFiles%\microsoft office\office14\scanpst.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\scnpst32.dll to %ProgramFiles%\microsoft office\office14\scnpst32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\scnpst64.dll to %ProgramFiles%\microsoft office\office14\scnpst64.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\segoechess.ttf to %ProgramFiles%\microsoft office\office14\segoechess.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\selfcert.exe to %ProgramFiles%\microsoft office\office14\selfcert.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\sendto.dll to %ProgramFiles%\microsoft office\office14\sendto.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubtrap.dll to %ProgramFiles%\microsoft office\office14\pubtrap.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlook.exe to %ProgramFiles%\microsoft office\office14\outlook.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oartconv.dll to %ProgramFiles%\microsoft office\office14\oartconv.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\reminder.wav to %ProgramFiles%\microsoft office\office14\reminder.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlrpc.dll to %ProgramFiles%\microsoft office\office14\outlrpc.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlmime.dll to %ProgramFiles%\microsoft office\office14\outlmime.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlfltr.dll to %ProgramFiles%\microsoft office\office14\outlfltr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\offowc.dll to %ProgramFiles%\microsoft office\office14\offowc.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\offrhd.dll to %ProgramFiles%\microsoft office\office14\offrhd.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\offxml.dll to %ProgramFiles%\microsoft office\office14\offxml.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oimg.dll to %ProgramFiles%\microsoft office\office14\oimg.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ois.exe to %ProgramFiles%\microsoft office\office14\ois.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oisapp.dll to %ProgramFiles%\microsoft office\office14\oisapp.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oisgraph.dll to %ProgramFiles%\microsoft office\office14\oisgraph.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\olkfstub.dll to %ProgramFiles%\microsoft office\office14\olkfstub.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\olkirm.xml to %ProgramFiles%\microsoft office\office14\olkirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\olkirmv.xml to %ProgramFiles%\microsoft office\office14\olkirmv.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\olmapi32.dll to %ProgramFiles%\microsoft office\office14\olmapi32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\omml2mml.xsl to %ProgramFiles%\microsoft office\office14\omml2mml.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ocrvc.dat to %ProgramFiles%\microsoft office\office14\ocrvc.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\omsmain.dll to %ProgramFiles%\microsoft office\office14\omsmain.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote.exe to %ProgramFiles%\microsoft office\office14\onenote.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenoteirm.xml to %ProgramFiles%\microsoft office\office14\onenoteirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenotem.exe to %ProgramFiles%\microsoft office\office14\onenotem.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenotemanaged.dll to %ProgramFiles%\microsoft office\office14\onenotemanaged.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onfilter.dll to %ProgramFiles%\microsoft office\office14\onfilter.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onlntcomlib.dll to %ProgramFiles%\microsoft office\office14\onlntcomlib.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onmain.dll to %ProgramFiles%\microsoft office\office14\onmain.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ospp.htm to %ProgramFiles%\microsoft office\office14\ospp.htm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ospp.vbs to %ProgramFiles%\microsoft office\office14\ospp.vbs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlacct.dll to %ProgramFiles%\microsoft office\office14\outlacct.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlctl.dll to %ProgramFiles%\microsoft office\office14\outlctl.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlfltr.dat to %ProgramFiles%\microsoft office\office14\outlfltr.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\oart.dll to %ProgramFiles%\microsoft office\office14\oart.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\omsxp32.dll to %ProgramFiles%\microsoft office\office14\omsxp32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ocrhc.dat to %ProgramFiles%\microsoft office\office14\ocrhc.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlph.dll to %ProgramFiles%\microsoft office\office14\outlph.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\mapiph.dll to %ProgramFiles%\microsoft office\office14\mapiph.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\latin1.shp to %ProgramFiles%\microsoft office\office14\latin1.shp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\emsmdb32.dll to %ProgramFiles%\microsoft office\office14\emsmdb32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\engidx.dat to %ProgramFiles%\microsoft office\office14\engidx.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\english.lng to %ProgramFiles%\microsoft office\office14\english.lng.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\envelope.dll to %ProgramFiles%\microsoft office\office14\envelope.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\excel.exe to %ProgramFiles%\microsoft office\office14\excel.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\exlirm.xml to %ProgramFiles%\microsoft office\office14\exlirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\exlirmv.xml to %ProgramFiles%\microsoft office\office14\exlirmv.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\exsec32.dll to %ProgramFiles%\microsoft office\office14\exsec32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\form.dll to %ProgramFiles%\microsoft office\office14\form.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\french.lng to %ProgramFiles%\microsoft office\office14\french.lng.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\gfx.dll to %ProgramFiles%\microsoft office\office14\gfx.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\graph.exe to %ProgramFiles%\microsoft office\office14\graph.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\graph.ico to %ProgramFiles%\microsoft office\office14\graph.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove.exe to %ProgramFiles%\microsoft office\office14\groove.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groovemn.exe to %ProgramFiles%\microsoft office\office14\groovemn.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ieawsdc.dll to %ProgramFiles%\microsoft office\office14\ieawsdc.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\impmail.dll to %ProgramFiles%\microsoft office\office14\impmail.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\infopath.exe to %ProgramFiles%\microsoft office\office14\infopath.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\inlaunch.dll to %ProgramFiles%\microsoft office\office14\inlaunch.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\installed_resources14.xss to %ProgramFiles%\microsoft office\office14\installed_resources14.xss.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\installed_schemas14.xss to %ProgramFiles%\microsoft office\office14\installed_schemas14.xss.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\intldate.dll to %ProgramFiles%\microsoft office\office14\intldate.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ipdesign.dll to %ProgramFiles%\microsoft office\office14\ipdesign.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ipeditor.dll to %ProgramFiles%\microsoft office\office14\ipeditor.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ipirm.xml to %ProgramFiles%\microsoft office\office14\ipirm.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ipirmv.xml to %ProgramFiles%\microsoft office\office14\ipirmv.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\ipolk.dll to %ProgramFiles%\microsoft office\office14\ipolk.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\jfont.dat to %ProgramFiles%\microsoft office\office14\jfont.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\emablt32.dll to %ProgramFiles%\microsoft office\office14\emablt32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\engdic.dat to %ProgramFiles%\microsoft office\office14\engdic.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir9b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir9b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir33f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir33f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\custom.propdesc to %ProgramFiles%\microsoft office\office14\custom.propdesc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accdds.dll to %ProgramFiles%\microsoft office\office14\accdds.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accddsf.dll to %ProgramFiles%\microsoft office\office14\accddsf.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accddslm.dll to %ProgramFiles%\microsoft office\office14\accddslm.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accicons.exe to %ProgramFiles%\microsoft office\office14\accicons.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accvdt.dll to %ProgramFiles%\microsoft office\office14\accvdt.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz.dll to %ProgramFiles%\microsoft office\office14\accwiz.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\acedao.dll to %ProgramFiles%\microsoft office\office14\acedao.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\advcmp.dic to %ProgramFiles%\microsoft office\office14\advcmp.dic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\advtel.dic to %ProgramFiles%\microsoft office\office14\advtel.dic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\advzip.dic to %ProgramFiles%\microsoft office\office14\advzip.dic.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\asciieng.lng to %ProgramFiles%\microsoft office\office14\asciieng.lng.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\audiosearchlts.dll to %ProgramFiles%\microsoft office\office14\audiosearchlts.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\audiosearchmain.dll to %ProgramFiles%\microsoft office\office14\audiosearchmain.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\office14\lines\lines.dll to %ProgramFiles%\microsoft office\media\office14\lines\lines.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\audiosearchsapife.dll to %ProgramFiles%\microsoft office\office14\audiosearchsapife.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man to %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bcsevents.man to %ProgramFiles%\microsoft office\office14\bcsevents.man.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\cdlmso.dll to %ProgramFiles%\microsoft office\office14\cdlmso.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\cgmimp32.hlp to %ProgramFiles%\microsoft office\office14\cgmimp32.hlp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\charsettable.chr to %ProgramFiles%\microsoft office\office14\charsettable.chr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\clview.exe to %ProgramFiles%\microsoft office\office14\clview.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\cnfnot32.exe to %ProgramFiles%\microsoft office\office14\cnfnot32.exe.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\contab32.dll to %ProgramFiles%\microsoft office\office14\contab32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\css7data0009.dll to %ProgramFiles%\microsoft office\office14\css7data0009.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\css7data000a.dll to %ProgramFiles%\microsoft office\office14\css7data000a.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\css7data000c.dll to %ProgramFiles%\microsoft office\office14\css7data000c.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\authzax.dll to %ProgramFiles%\microsoft office\office14\authzax.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\dlgsetp.dll to %ProgramFiles%\microsoft office\office14\dlgsetp.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir34f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir34f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir35f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir35f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir36f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir36f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\country.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\country.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\earthy.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\greentea.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\maroon.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\olivegreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\premium.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\casual.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slateblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\teal.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\texturedblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\velvetrose.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form_edit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\launch.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\launch.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\macroprogress.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\macroprogress.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\publicfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignleft.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignleft.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignright.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignright.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_bold.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_bold.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_bullets.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_bullets.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_center.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_center.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_choosecolor.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_choosecolor.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_choosefont.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_choosefont.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_decreaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_decreaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_hyperlink.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_hyperlink.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_increaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_increaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_justify.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_justify.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_pressed.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_pressed.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_spellcheck.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_spellcheck.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_underline.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_underline.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\save.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\save.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\submit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\validation.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_italic.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_italic.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_decreaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_decreaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\calendar.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\calendar.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\delete.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\delete.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\error.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\error.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsblankpage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsblankpage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsbrowserupgrade.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsbrowserupgrade.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formscolorchart.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formscolorchart.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsformtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsformtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsformtemplatertl.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsformtemplatertl.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsimagetemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsimagetemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsmacrotemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsmacrotemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formspreviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formspreviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\add.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\attention.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formspreviewtemplatertl.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formspreviewtemplatertl.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticonsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form_edit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\launch.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\launch.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\macroprogress.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\macroprogress.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\publicfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_alignleft.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_alignleft.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_alignright.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_alignright.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_bullets.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_bullets.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_center.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_center.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_choosecolor.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_choosecolor.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsprinttemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsprinttemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsprinttemplatertl.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsprinttemplatertl.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewframe.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewframe.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\teal.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\texturedblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\velvetrose.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slateblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\premium.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\olivegreen.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_decreaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_decreaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_increaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_increaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_italic.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_italic.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_justify.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_justify.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_pressed.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_pressed.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_underline.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_underline.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\save.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\save.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\utilityfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\validation.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_choosefont.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_choosefont.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\casual.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\country.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\country.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\earthy.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\greentea.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lightspirit.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\maroon.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_premium.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_premium.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_slateblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_texturedblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_velvetrose.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_left.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_left.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_left_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_left_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_mid.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_mid.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_mid_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_mid_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_right.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_right.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_right_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\button_right_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\calendar.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\calendar.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\delete.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\delete.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_lightspirit.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_olivegreen.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\error.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\error.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsblankpage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsblankpage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsbrowserupgrade.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsbrowserupgrade.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formscolorchart.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formscolorchart.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsformtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsformtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagescript.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagestyle.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsimagetemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsimagetemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsmacrotemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsmacrotemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formspreviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formspreviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsprinttemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsprinttemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsversion1warning.htm to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsversion1warning.htm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_groove.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_groove.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_greentea.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageslice.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageslice.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\button.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\button.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\header.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\header.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\tab_off.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\tab_off.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\tab_on.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\tab_on.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\add.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\attention.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_adobe.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_casual.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_casual.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_country.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_country.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_earthy.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepage.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepage.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageblank.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageblank.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\background.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\background.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticonsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_hyperlink.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_hyperlink.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_increaseindent.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_increaseindent.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_justify.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_justify.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl065.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl065.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl075.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl075.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl077.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl077.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl078.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl078.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl081.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl081.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl082.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl082.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl083.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl083.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl086.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl086.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl087.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl087.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl089.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl089.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl090.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl090.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl048.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl048.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl092.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl092.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl058.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl058.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl095.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl095.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl097.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl097.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl102.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl102.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl103.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl103.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl104.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl104.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl105.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl105.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl106.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl106.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl107.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl107.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl108.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl108.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl109.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl109.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl110.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl110.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl111.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl111.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl093.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl093.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn001.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn001.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl096.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl096.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl054.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl054.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl044.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl044.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl027.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl027.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.cn.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.cn.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.hk.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.hk.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.mx.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.mx.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.my.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.my.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.ph.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.ph.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.sg.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.sg.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.tw.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.tw.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.vn.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.vn.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.de.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.de.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.es.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.es.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.fr.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.fr.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.au.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.au.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.hk.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.hk.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.it.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.it.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.jp.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.jp.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.no.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.no.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.pl.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.pl.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.se.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.se.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl001.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl001.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl002.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl002.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl010.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl010.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl011.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl011.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl012.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl012.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl016.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl016.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl020.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl020.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl022.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl022.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.ie.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.ie.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pglbl026.xml to %ProgramFiles%\microsoft office\office14\pagesize\pglbl026.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.ar.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.ar.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.br.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.com.br.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn002.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn002.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn022.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn022.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7es.lex to %ProgramFiles%\microsoft office\office14\proof\mshy7es.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7fr.dll to %ProgramFiles%\microsoft office\office14\proof\mshy7fr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7fr.lex to %ProgramFiles%\microsoft office\office14\proof\mshy7fr.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7en.dll to %ProgramFiles%\microsoft office\office14\proof\mssp7en.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7en.dub to %ProgramFiles%\microsoft office\office14\proof\mssp7en.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7en.lex to %ProgramFiles%\microsoft office\office14\proof\mssp7en.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7es.dll to %ProgramFiles%\microsoft office\office14\proof\mssp7es.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7es.dub to %ProgramFiles%\microsoft office\office14\proof\mssp7es.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7es.lex to %ProgramFiles%\microsoft office\office14\proof\mssp7es.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7fr.dll to %ProgramFiles%\microsoft office\office14\proof\mssp7fr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7fr.dub to %ProgramFiles%\microsoft office\office14\proof\mssp7fr.dub.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mssp7fr.lex to %ProgramFiles%\microsoft office\office14\proof\mssp7fr.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7en.lex to %ProgramFiles%\microsoft office\office14\proof\mshy7en.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7es.dll to %ProgramFiles%\microsoft office\office14\proof\mshy7es.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7en.dll to %ProgramFiles%\microsoft office\office14\proof\msth7en.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7es.lex to %ProgramFiles%\microsoft office\office14\proof\msth7es.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7fr.dll to %ProgramFiles%\microsoft office\office14\proof\msth7fr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7fr.lex to %ProgramFiles%\microsoft office\office14\proof\msth7fr.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\1033\msgr3en.dll to %ProgramFiles%\microsoft office\office14\proof\1033\msgr3en.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\1036\msgr3fr.dll to %ProgramFiles%\microsoft office\office14\proof\1036\msgr3fr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\3082\msgr3es.dll to %ProgramFiles%\microsoft office\office14\proof\3082\msgr3es.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub10.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub10.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub11.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub11.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub1a.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub1a.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub1b.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub1b.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub2a.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub2a.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub2b.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub2b.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7en.lex to %ProgramFiles%\microsoft office\office14\proof\msth7en.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msth7es.dll to %ProgramFiles%\microsoft office\office14\proof\msth7es.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\mshy7en.dll to %ProgramFiles%\microsoft office\office14\proof\mshy7en.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msgr3es.lex to %ProgramFiles%\microsoft office\office14\proof\msgr3es.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn026.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn026.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn027.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn027.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn044.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn044.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn048.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn048.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn054.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn054.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn058.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn058.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn065.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn065.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn075.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn075.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn081.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn081.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn082.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn082.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn086.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn086.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn089.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn089.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn090.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn090.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn092.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn092.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn095.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn095.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn096.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn096.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn097.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn097.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn102.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn102.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn103.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn103.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn105.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn105.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn107.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn107.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn108.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn108.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn109.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn109.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn110.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn110.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn111.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn111.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pg_index.xml to %ProgramFiles%\microsoft office\office14\pagesize\pg_index.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msgr3en.lex to %ProgramFiles%\microsoft office\office14\proof\msgr3en.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn010.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn010.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn020.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn020.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pagesize\pgmn011.xml to %ProgramFiles%\microsoft office\office14\pagesize\pgmn011.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.uk.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.uk.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.th.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.th.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.nz.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.nz.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\chevron.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\chevron.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\computer.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\computer.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\contactselector.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\contactselector.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\gfserrorfromgroove.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\gfserrorfromgroove.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\gfserrortogroove.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\gfserrortogroove.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\gwe.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\gwe.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\incoming.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\incoming.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\indomain.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\indomain.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\mail.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\mail.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\manual.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\manual.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxalert.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxalert.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxerror.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxerror.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\alert.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\alert.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\modifiedtelespace.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\modifiedtelespace.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\online.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\online.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\onlinebusy.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\onlinebusy.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\onlineidle.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\onlineidle.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\outdomain.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\outdomain.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\outgoing.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\outgoing.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\outsyncpc.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\outsyncpc.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\personalcontact.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\personalcontact.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\sessionmember.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\sessionmember.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\sessionowner.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\sessionowner.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\spaceselector.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\spaceselector.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\statusaway.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\statusaway.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxinfo.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\messageboxinfo.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\spacer.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\spacer.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\offline.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\offline.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\plus.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\plus.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\minus.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\minus.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_pressed.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_pressed.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\submit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\utilityfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\validation.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingiconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskiconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\save.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\save.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\tabmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\tabmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\taboff.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\taboff.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\tabon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\tabon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whitebox.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whitebox.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomiconsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\basic\default.xsl to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\basic\default.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.xsl to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\statusdonotdisturb.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\statusdonotdisturb.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\statusonline.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\statusonline.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\toolicon.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\toolicon.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\suction.wav to %ProgramFiles%\microsoft office\office14\media\suction.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\voltage.wav to %ProgramFiles%\microsoft office\office14\media\voltage.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\whoosh.wav to %ProgramFiles%\microsoft office\office14\media\whoosh.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\wind.wav to %ProgramFiles%\microsoft office\office14\media\wind.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote-pipelineconfig.xml to %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote-pipelineconfig.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote.gpd to %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote.gpd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote.ini to %ProgramFiles%\microsoft office\office14\onenote\sendtoonenote.ini.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote\sendtoonenotefilter.gpd to %ProgramFiles%\microsoft office\office14\onenote\sendtoonenotefilter.gpd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\onenote\sendtoonenotenames.gpd to %ProgramFiles%\microsoft office\office14\onenote\sendtoonenotenames.gpd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\ameritech.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\ameritech.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\btinternet.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\btinternet.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\btopenworld.com.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\btopenworld.com.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\flash.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\flash.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\nl.rogers.com.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\nl.rogers.com.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\nvbell.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\nvbell.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\pacbell.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\pacbell.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\prodigy.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\prodigy.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\rogers.com.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\rogers.com.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\sbcglobal.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\sbcglobal.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\snet.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\snet.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\swbell.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\swbell.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\talk21.com.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\talk21.com.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\wans.net.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\wans.net.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.ca.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.ca.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.id.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.id.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.in.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.in.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.jp.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.jp.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.kr.xml to %ProgramFiles%\microsoft office\office14\outlookautodiscover\yahoo.co.kr.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\push.wav to %ProgramFiles%\microsoft office\office14\media\push.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\wss.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\wss.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\type.wav to %ProgramFiles%\microsoft office\office14\media\type.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\hammer.wav to %ProgramFiles%\microsoft office\office14\media\hammer.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_choosecolor.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_choosecolor.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\explode.wav to %ProgramFiles%\microsoft office\office14\media\explode.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\builtincontrolsschema.xsd to %ProgramFiles%\microsoft office\office14\groove\xml files\builtincontrolsschema.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\grvschema.xsd to %ProgramFiles%\microsoft office\office14\groove\xml files\grvschema.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\messenger.xml to %ProgramFiles%\microsoft office\office14\groove\xml files\messenger.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\spwaddin.xsd to %ProgramFiles%\microsoft office\office14\groove\xml files\spwaddin.xsd.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\starterapplicationdescriptors.xml to %ProgramFiles%\microsoft office\office14\groove\xml files\starterapplicationdescriptors.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\starternotificationdescriptors.xml to %ProgramFiles%\microsoft office\office14\groove\xml files\starternotificationdescriptors.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\xml files\startertooltemplates.xml to %ProgramFiles%\microsoft office\office14\groove\xml files\startertooltemplates.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\infopathom\microsoft.office.infopath.xml to %ProgramFiles%\microsoft office\office14\infopathom\microsoft.office.infopath.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\microsoft.office.infopath.xml to %ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\microsoft.office.infopath.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\infopathomformservicesv12\microsoft.office.infopath.xml to %ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\infopathomformservicesv12\microsoft.office.infopath.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\infopathom\infopathomv12\microsoft.office.infopath.xml to %ProgramFiles%\microsoft office\office14\infopathom\infopathomv12\microsoft.office.infopath.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\eurotool.xlam to %ProgramFiles%\microsoft office\office14\library\eurotool.xlam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\analysis\analys32.xll to %ProgramFiles%\microsoft office\office14\library\analysis\analys32.xll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolicons\wss_doclib.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\wss_doclib.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\analysis\atpvbaen.xlam to %ProgramFiles%\microsoft office\office14\library\analysis\atpvbaen.xlam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\analysis\procdb.xlam to %ProgramFiles%\microsoft office\office14\library\analysis\procdb.xlam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\solver\solver.xlam to %ProgramFiles%\microsoft office\office14\library\solver\solver.xlam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\solver\solver32.dll to %ProgramFiles%\microsoft office\office14\library\solver\solver32.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\applause.wav to %ProgramFiles%\microsoft office\office14\media\applause.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\arrow.wav to %ProgramFiles%\microsoft office\office14\media\arrow.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\bomb.wav to %ProgramFiles%\microsoft office\office14\media\bomb.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\breeze.wav to %ProgramFiles%\microsoft office\office14\media\breeze.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\camera.wav to %ProgramFiles%\microsoft office\office14\media\camera.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\cashreg.wav to %ProgramFiles%\microsoft office\office14\media\cashreg.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\chimes.wav to %ProgramFiles%\microsoft office\office14\media\chimes.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\click.wav to %ProgramFiles%\microsoft office\office14\media\click.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\coin.wav to %ProgramFiles%\microsoft office\office14\media\coin.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\drumroll.wav to %ProgramFiles%\microsoft office\office14\media\drumroll.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\library\analysis\funcres.xlam to %ProgramFiles%\microsoft office\office14\library\analysis\funcres.xlam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\media\laser.wav to %ProgramFiles%\microsoft office\office14\media\laser.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_center.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_center.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_mid_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_mid_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\note.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\note.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\omsmms.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\omsmms.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\omssms.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\omssms.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\ooftmpl.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\ooftmpl.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\ipm.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\ipm.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\post.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\post.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\rclrpt.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\rclrpt.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\rec.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\rec.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\remote.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\remote.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\repltmpl.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\repltmpl.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\report.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\report.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\postit.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\postit.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\infomail.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\infomail.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\transmrr.dll to %ProgramFiles%\microsoft office\office14\convert\1033\transmrr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx to %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\activity.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\activity.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\appt.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\appt.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\cnfres.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\cnfres.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico to %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\contact.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\contact.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\distlist.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\distlist.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\doc.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\doc.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\exitem.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\exitem.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico to %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\resend.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\resend.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskacc.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\taskacc.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskdec.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\taskdec.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskreq.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\taskreq.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico to %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\taskupd.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\taskupd.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\task.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\task.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\components\signedcomponents.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\components\signedcomponents.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\servers\relay.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\servers\relay.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\verisign_class_3_code_signing_2001-4_ca.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\verisign_class_3_code_signing_2001-4_ca.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\verisign_class_3_public_primary_ca.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\verisign_class_3_public_primary_ca.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\vs_componentsigningintermediate.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\vs_componentsigningintermediate.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\managedobjects\signedmanagedobjects.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\managedobjects\signedmanagedobjects.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\servers\management.cer to %ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\servers\management.cer.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\smimes.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\smimes.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\smimee.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\smimee.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\rssitem.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\rssitem.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\schdcncl.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\schdcncl.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\schdresn.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\schdresn.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\schdresp.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\schdresp.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\schdrest.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\schdrest.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\secrec.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\secrec.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\secure.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\secure.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\sharing.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\sharing.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\sign.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\sign.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\schdreq.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\schdreq.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\utility.accda to %ProgramFiles%\microsoft office\office14\accwiz\utility.accda.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1036\mso.acl to %ProgramFiles%\microsoft office\office14\1036\mso.acl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\3082\mso.acl to %ProgramFiles%\microsoft office\office14\3082\mso.acl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accessweb\clntwrap.htm to %ProgramFiles%\microsoft office\office14\accessweb\clntwrap.htm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl to %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp to %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir38f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir38f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir39f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir39f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir3b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir3b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir3f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir3f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir40f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir40f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir41f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir41f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir42f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir42f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir37f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir37f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\accolk.dll to %ProgramFiles%\microsoft office\office14\addins\accolk.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\faxext.ecf to %ProgramFiles%\microsoft office\office14\addins\faxext.ecf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart2.bdr to %ProgramFiles%\microsoft office\office14\borders\msart2.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart3.bdr to %ProgramFiles%\microsoft office\office14\borders\msart3.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart4.bdr to %ProgramFiles%\microsoft office\office14\borders\msart4.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart5.bdr to %ProgramFiles%\microsoft office\office14\borders\msart5.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart6.bdr to %ProgramFiles%\microsoft office\office14\borders\msart6.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart7.bdr to %ProgramFiles%\microsoft office\office14\borders\msart7.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart8.bdr to %ProgramFiles%\microsoft office\office14\borders\msart8.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart9.bdr to %ProgramFiles%\microsoft office\office14\borders\msart9.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\act3.sam to %ProgramFiles%\microsoft office\office14\convert\act3.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\delimdos.fae to %ProgramFiles%\microsoft office\office14\convert\delimdos.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\delimwin.fae to %ProgramFiles%\microsoft office\office14\convert\delimwin.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\desksam.sam to %ProgramFiles%\microsoft office\office14\convert\desksam.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart14.bdr to %ProgramFiles%\microsoft office\office14\borders\msart14.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart15.bdr to %ProgramFiles%\microsoft office\office14\borders\msart15.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\odbc.sam to %ProgramFiles%\microsoft office\office14\convert\odbc.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\olappt.fae to %ProgramFiles%\microsoft office\office14\convert\olappt.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae to %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\olmail.fae to %ProgramFiles%\microsoft office\office14\convert\olmail.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\olnote.fae to %ProgramFiles%\microsoft office\office14\convert\olnote.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\oltask.fae to %ProgramFiles%\microsoft office\office14\convert\oltask.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\org97.sam to %ProgramFiles%\microsoft office\office14\convert\org97.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\pab.sam to %ProgramFiles%\microsoft office\office14\convert\pab.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\rm.dll to %ProgramFiles%\microsoft office\office14\convert\rm.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\transmgr.dll to %ProgramFiles%\microsoft office\office14\convert\transmgr.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\localdv.dll to %ProgramFiles%\microsoft office\office14\convert\1033\localdv.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\ol.sam to %ProgramFiles%\microsoft office\office14\convert\ol.sam.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\oladd.fae to %ProgramFiles%\microsoft office\office14\convert\oladd.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart13.bdr to %ProgramFiles%\microsoft office\office14\borders\msart13.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart12.bdr to %ProgramFiles%\microsoft office\office14\borders\msart12.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart11.bdr to %ProgramFiles%\microsoft office\office14\borders\msart11.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\msosec.xml to %ProgramFiles%\microsoft office\office14\addins\msosec.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\msspc.ecf to %ProgramFiles%\microsoft office\office14\addins\msspc.ecf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\outex.ecf to %ProgramFiles%\microsoft office\office14\addins\outex.ecf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\outex2.ecf to %ProgramFiles%\microsoft office\office14\addins\outex2.ecf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\outlvba.dll to %ProgramFiles%\microsoft office\office14\addins\outlvba.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf to %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\addins\msosec.dll to %ProgramFiles%\microsoft office\office14\addins\msosec.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart1.bdr to %ProgramFiles%\microsoft office\office14\borders\msart1.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\borders\msart10.bdr to %ProgramFiles%\microsoft office\office14\borders\msart10.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewby.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewby.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewdblclick.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewdblclick.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewselectionchanged.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewselectionchanged.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\break.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\break.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\button.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\button.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\checkbox.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\checkbox.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\combobox.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\combobox.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\contact.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\contact.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\date.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\date.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\heading.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\heading.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\image.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\image.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\line.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\line.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\listbox.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\listbox.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\numeric.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\numeric.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\password.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\password.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\radio.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\radio.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\currency.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\currency.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textarea.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textarea.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\datetime.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\datetime.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\validation.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\submit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\spacer.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\spacer.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsblankpage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsblankpage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsbrowserupgrade.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsbrowserupgrade.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formspreviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formspreviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsprinttemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsprinttemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsversion1warning.htm to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsversion1warning.htm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticonsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewframe.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewframe.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\grooveformsmetadata.xml to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\grooveformsmetadata.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menus.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menus.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menu_arrow.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menu_arrow.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsdonottrust.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsdonottrust.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\search.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\search.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textbox.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textbox.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\delete.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\delete.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\error.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\error.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.ico.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsblankpage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsblankpage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsbrowserupgrade.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsbrowserupgrade.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formscolorchart.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formscolorchart.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsformtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsformtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepage.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepage.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagescript.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagestyle.css.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsimagetemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsimagetemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\calendar.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\calendar.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsmacrotemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsmacrotemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsversion1warning.htm to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsversion1warning.htm.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticonsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewframe.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewframe.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form_edit.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\launch.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\launch.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\macroprogress.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\macroprogress.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\publicfunctions.js.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_alignleft.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_alignleft.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_alignright.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_alignright.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formspreviewtemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formspreviewtemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsprinttemplate.html to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsprinttemplate.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_mid.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_mid.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_bold.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_bold.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\process library.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\process library.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\status report.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\status report.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\track issues.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\track issues.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\add.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\attention.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_adobe.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_casual.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_casual.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_country.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_country.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_earthy.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepage.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepage.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepageblank.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepageblank.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepageslice.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_formshomepageslice.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_greentea.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_groove.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_groove.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_lightspirit.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_olivegreen.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_premium.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_premium.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_slateblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_texturedblue.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_velvetrose.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_left.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_left.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_left_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_left_over.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textview.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierclosebutton.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierclosebutton.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisabledownarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisabledownarrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisableuparrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisableuparrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdownarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdownarrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifieruparrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifieruparrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupiconsmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\grip.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\grip.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\gripmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\gripmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimagesmask256colors.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimagesmask256colors.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemasksmall.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemasksmall.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\verisignlogo.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\verisignlogo.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub3a.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub3a.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_bullets.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\rtf_bullets.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemasksmall.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemasksmall.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\proof\msgr3fr.lex to %ProgramFiles%\microsoft office\office14\proof\msgr3fr.lex.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat to %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\welcome.html to %ProgramFiles%\java\jre1.8.0_45\welcome.html.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries to %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\elemental.thmx to %ProgramFiles%\microsoft office\document themes 14\elemental.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\aspect.thmx to %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\austin.thmx to %ProgramFiles%\microsoft office\document themes 14\austin.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\black tie.thmx to %ProgramFiles%\microsoft office\document themes 14\black tie.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\civic.thmx to %ProgramFiles%\microsoft office\document themes 14\civic.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\clarity.thmx to %ProgramFiles%\microsoft office\document themes 14\clarity.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\composite.thmx to %ProgramFiles%\microsoft office\document themes 14\composite.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\concourse.thmx to %ProgramFiles%\microsoft office\document themes 14\concourse.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\couture.thmx to %ProgramFiles%\microsoft office\document themes 14\couture.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\equity.thmx to %ProgramFiles%\microsoft office\document themes 14\equity.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\essential.thmx to %ProgramFiles%\microsoft office\document themes 14\essential.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\executive.thmx to %ProgramFiles%\microsoft office\document themes 14\executive.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav to %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\paper.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\paper.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\perspective.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\perspective.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\pushpin.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\pushpin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\slipstream.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\slipstream.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\solstice.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\solstice.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\technic.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\technic.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\thatch.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\thatch.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\trek.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\trek.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\urban.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\urban.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\verve.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\verve.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\waveform.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\waveform.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.dll to %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.dll.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\oriel.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\oriel.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw to %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav to %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\opulent.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\opulent.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\origin.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\origin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\office classic.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\office classic.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\office classic 2.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\office classic 2.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\office 2.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\office 2.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\elemental.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\elemental.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\equity.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\equity.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\essential.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\essential.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\executive.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\executive.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\flow.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\flow.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\foundry.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\foundry.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\grayscale.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\grayscale.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\grid.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\grid.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\hardcover.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\hardcover.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\horizon.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\horizon.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\median.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\median.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\composite.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\composite.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\metro.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\metro.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\couture.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\couture.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\newsprint.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\newsprint.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\oriel.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\oriel.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\origin.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\origin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\paper.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\paper.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\perspective.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\perspective.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\pushpin.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\pushpin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\slipstream.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\slipstream.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\solstice.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\solstice.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\technic.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\technic.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\thatch.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\thatch.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\trek.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\trek.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\urban.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\urban.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\module.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\module.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\clarity.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\clarity.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\opulent.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\opulent.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\civic.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\civic.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\black tie.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\black tie.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\flow.thmx to %ProgramFiles%\microsoft office\document themes 14\flow.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\grid.thmx to %ProgramFiles%\microsoft office\document themes 14\grid.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx to %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\horizon.thmx to %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\median.thmx to %ProgramFiles%\microsoft office\document themes 14\median.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\metro.thmx to %ProgramFiles%\microsoft office\document themes 14\metro.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\module.thmx to %ProgramFiles%\microsoft office\document themes 14\module.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx to %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\opulent.thmx to %ProgramFiles%\microsoft office\document themes 14\opulent.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\oriel.thmx to %ProgramFiles%\microsoft office\document themes 14\oriel.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\origin.thmx to %ProgramFiles%\microsoft office\document themes 14\origin.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\paper.thmx to %ProgramFiles%\microsoft office\document themes 14\paper.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\perspective.thmx to %ProgramFiles%\microsoft office\document themes 14\perspective.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx to %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\foundry.thmx to %ProgramFiles%\microsoft office\document themes 14\foundry.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx to %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\technic.thmx to %ProgramFiles%\microsoft office\document themes 14\technic.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\thatch.thmx to %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\trek.thmx to %ProgramFiles%\microsoft office\document themes 14\trek.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\urban.thmx to %ProgramFiles%\microsoft office\document themes 14\urban.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\verve.thmx to %ProgramFiles%\microsoft office\document themes 14\verve.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\waveform.thmx to %ProgramFiles%\microsoft office\document themes 14\waveform.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\adjacency.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\adjacency.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\angles.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\angles.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\apex.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\apex.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\apothecary.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\apothecary.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\aspect.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\aspect.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\austin.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\austin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\verve.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\verve.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\solstice.thmx to %ProgramFiles%\microsoft office\document themes 14\solstice.thmx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\waveform.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\waveform.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme colors\concourse.xml to %ProgramFiles%\microsoft office\document themes 14\theme colors\concourse.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\adjacency.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\adjacency.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\angles.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\angles.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\apex.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\apex.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\apothecary.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\apothecary.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\aspect.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\aspect.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\austin.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\austin.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\black tie.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\black tie.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\civic.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\civic.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\clarity.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\clarity.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\composite.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\composite.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\concourse.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\concourse.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\couture.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\couture.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\elemental.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\elemental.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\equity.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\equity.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\essential.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\essential.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\executive.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\executive.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\flow.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\flow.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\foundry.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\foundry.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\grid.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\grid.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\hardcover.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\hardcover.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\horizon.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\horizon.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\median.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\median.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\metro.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\metro.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\module.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\module.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme fonts\newsprint.xml to %ProgramFiles%\microsoft office\document themes 14\theme fonts\newsprint.xml.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\java_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\java_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\jngle_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\jngle_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\mp00021_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\mp00021_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\mp00132_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\mp00132_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\mp00646_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\mp00646_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\music_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\music_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00042_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00042_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00057_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00058_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00068_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00238_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00238_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00330_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00330_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00388_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00388_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00391_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00391_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00394_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00394_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00395_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00395_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00396_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00396_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00417_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00417_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00433_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00433_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00438_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00452_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00454_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00454_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00458_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00458_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00462_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00462_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00487_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00487_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00389_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00389_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00390_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00494_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00494_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00523_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00523_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02356_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02356_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00525_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01421_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01421_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01468_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01468_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01470_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01470_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01472_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01472_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01473_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01473_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01474_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01474_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01627_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01627_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01680_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01680_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01682_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01682_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01701_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01701_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01848_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01848_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01849_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01849_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01361_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01368_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01368_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01852_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01852_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02009_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02009_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02041_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02041_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02066_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02066_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02091_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02091_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02092_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02093_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02093_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02124_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02124_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02125_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02125_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02126_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02126_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02127_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02127_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02262_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02264_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02264_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01858_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01858_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01866_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01866_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01358_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01358_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01357_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01357_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01356_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01356_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00532_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00532_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00538_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00538_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00641_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00641_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00784_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00784_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00798_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00798_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00806_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00806_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00807_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00807_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00808_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00809_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00809_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00810_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00810_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00932_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01064_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01064_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01066_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01066_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00530_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00530_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01069_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01069_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01126_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01126_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01130_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01141_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01148_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01149_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01149_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01152_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01154_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01154_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01157_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01158_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01161_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01164_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01164_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01293_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01293_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01354_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01354_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na01123_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na01123_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na00512_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na00512_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0318804.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0318804.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0318810.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0318810.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0324694.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0324694.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0324704.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0324704.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02361_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02368_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02368_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02371_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02371_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_05.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_05.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_06.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_06.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_07.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_07.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_08.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_08.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_09.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_09.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_10.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_10.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00013_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00014_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00014_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00034_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00034_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00049_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00049_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00050_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00050_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_02.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00052_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00052_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_04.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_04.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00272_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00272_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00478_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00478_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00485_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00485_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00489_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00489_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00531_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00531_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00231_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00468_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00468_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\paper_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\paper_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\outdr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\outdr_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02373_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02373_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02386_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02386_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02388_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02388_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02389_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02389_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02390_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02398_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02398_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02400_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02400_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02404_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02404_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02405_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02407_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02413_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02417_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02417_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02423_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02423_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02424_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02424_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02384_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02426_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02435_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02439_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02441_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02443_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02444_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02446_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02446_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02448_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02450_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02450_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02451_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02451_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02453_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\nbook_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\nbook_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ocean_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\ocean_01.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\na02431_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\na02431_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_03.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\parnt_03.mid.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf.wingransomware@test.com.zb6upztdqzdd.wing
- from %ProgramFiles%\microsoft office\office14\pubba\mspub3b.bdr to %ProgramFiles%\microsoft office\office14\pubba\mspub3b.bdr.wingransomware@test.com.zb6upztdqzdd.wing
- D:\install.log
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
- C:\kms\kms_vl_all_aio_debug.log
- C:\kms\kms_vl_all_aio.cmd
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
- '<SYSTEM32>\sc.exe' config "VSS" start= demand