Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Encoder.37988

Added to the Dr.Web virus database: 2023-09-15

Virus description added:

Technical Information

To ensure autorun and distribution
Creates or modifies the following files
  • %APPDATA%\microsoft\windows\start menu\programs\startup\r2n0lhxxk4rtijdrczzsvdquce.exe
  • %APPDATA%\microsoft\windows\start menu\programs\startup\r2n0lhxxk4rtijdrczzsvdquce.hta
Creates the following files on removable media
  • <Drive name for removable media>:\correct.avi
  • <Drive name for removable media>:\middaugh_keynote.pptx
  • <Drive name for removable media>:\asaprojectcompetition.pptx
  • <Drive name for removable media>:\stoc13_ml_quoc_le.pptx
  • <Drive name for removable media>:\file1.ppt
  • <Drive name for removable media>:\sim_gametheory_to_finance.ppt
  • <Drive name for removable media>:\mappingconcepthubberlin.ppt
  • <Drive name for removable media>:\sacs_presentation_sacs_qep_improving_rt_education_final.ppt
  • <Drive name for removable media>:\ksearch_esa_talk.ppt
  • <Drive name for removable media>:\writingcompletesarnarrative_1103.ppt
  • <Drive name for removable media>:\accountsreceivable.ppt
  • <Drive name for removable media>:\bg_search_box.png
  • <Drive name for removable media>:\arrow-down.png
  • <Drive name for removable media>:\dissolveanother.png
  • <Drive name for removable media>:\calibre.png
  • <Drive name for removable media>:\tunpersonalca1.pem
  • <Drive name for removable media>:\cert.pem
  • <Drive name for removable media>:\systisoft.pem
  • <Drive name for removable media>:\irgeek.pem
  • <Drive name for removable media>:\hhhlcert.pem
  • <Drive name for removable media>:\delongcacert.pem
  • <Drive name for removable media>:\lom602.pdf
  • <Drive name for removable media>:\spib_pima.pdf
  • <Drive name for removable media>:\7790_preview.pdf
  • <Drive name for removable media>:\ff_ot_user_guide.pdf
  • <Drive name for removable media>:\video_1.mp4
  • <Drive name for removable media>:\waterresourcesag.pptx
  • <Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
  • <Drive name for removable media>:\hypothyroidism_slides.pptx
  • <Drive name for removable media>:\foaf.rdf
  • <Drive name for removable media>:\calculatorworksheet.zip
  • <Drive name for removable media>:\removedtitles_records.zip
  • <Drive name for removable media>:\fiche_inscription_2015.zip
  • <Drive name for removable media>:\al.xlsx
  • <Drive name for removable media>:\trtf_matrix2012_oct.xlsx
  • <Drive name for removable media>:\applicant.xlsx
  • <Drive name for removable media>:\2013_smccc_competition_points_jul2013.xlsx
  • <Drive name for removable media>:\disclosuredetails.xlsx
  • <Drive name for removable media>:\removedtitles_records.xls
  • <Drive name for removable media>:\guide_reorganization_mapping.xls
  • <Drive name for removable media>:\price030215.xls
  • <Drive name for removable media>:\calculatorworksheet.xls
  • <Drive name for removable media>:\1sm_price.xls
  • <Drive name for removable media>:\subjectclassification.xls
  • <Drive name for removable media>:\testwmv.wmv
  • <Drive name for removable media>:\babyboymaintoscenesbackground.wmv
  • <Drive name for removable media>:\babyboymaintonotesbackground_pal.wmv
  • <Drive name for removable media>:\krsweden.rtf
  • <Drive name for removable media>:\pandp.rtf
  • <Drive name for removable media>:\military_callsigns_0311.rtf
  • <Drive name for removable media>:\waterlandhealthkano.rtf
  • <Drive name for removable media>:\schema.rdf
  • <Drive name for removable media>:\contenttypes.rdf
  • <Drive name for removable media>:\20140114.rdf
  • <Drive name for removable media>:\taxus_baccata.rdf
  • <Drive name for removable media>:\swc_2009-03-02.rdf
  • <Drive name for removable media>:\productos.zip
  • <Drive name for removable media>:\d0068197bb5a41fea16a220c45390606.mp4
  • <Drive name for removable media>:\51.mp4
  • <Drive name for removable media>:\clip_1080_5sec_10mbps_h264.mp4
  • <Drive name for removable media>:\sdszfo.docx
  • <Drive name for removable media>:\adhd_and_obesity.docx
  • <Drive name for removable media>:\thlps_keeper_mayer_1965.docx
  • <Drive name for removable media>:\file_p_00000000_1371597592.docx
  • <Drive name for removable media>:\issi2013_template_for_posters.docx
  • <Drive name for removable media>:\fi51.doc
  • <Drive name for removable media>:\weeklysheet1215.doc
  • <Drive name for removable media>:\cveuropeo.doc
  • <Drive name for removable media>:\ovp25012015.doc
  • <Drive name for removable media>:\508softwareandos.doc
  • <Drive name for removable media>:\testee.cer
  • <Drive name for removable media>:\contosoroot_1.cer
  • <Drive name for removable media>:\contoso.cer
  • <Drive name for removable media>:\sdkfailsafeemulator.cer
  • <Drive name for removable media>:\testcertificate.cer
  • <Drive name for removable media>:\pmd.cer
  • <Drive name for removable media>:\default.bmp
  • <Drive name for removable media>:\dashborder_120.bmp
  • <Drive name for removable media>:\dialmap.bmp
  • <Drive name for removable media>:\dial.bmp
  • <Drive name for removable media>:\dashborder_192.bmp
  • <Drive name for removable media>:\dashborder_144.bmp
  • <Drive name for removable media>:\archer.avi
  • <Drive name for removable media>:\split.avi
  • <Drive name for removable media>:\join.avi
  • <Drive name for removable media>:\wrar520.exe
  • <Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
  • <Drive name for removable media>:\chromesetup.exe
  • <Drive name for removable media>:\notepad.exe
  • <Drive name for removable media>:\firefly1.mov
  • <Drive name for removable media>:\pushkin.jpg
  • <Drive name for removable media>:\168.jpg
  • <Drive name for removable media>:\3.jpg
  • <Drive name for removable media>:\1189.jpg
  • <Drive name for removable media>:\13.jpg
  • <Drive name for removable media>:\4f0bf7ff71f28.jpg
  • <Drive name for removable media>:\3.jpeg
  • <Drive name for removable media>:\4f0bf7ff71f28.jpeg
  • <Drive name for removable media>:\210252809.jpeg
  • <Drive name for removable media>:\1189.jpeg
  • <Drive name for removable media>:\trivial-merge.html
  • <Drive name for removable media>:\api-hashmap.html
  • <Drive name for removable media>:\adadsi.html
  • <Drive name for removable media>:\browse.html
  • <Drive name for removable media>:\ituneshelpunavailable.html
  • <Drive name for removable media>:\about.htm
  • <Drive name for removable media>:\browse.htm
  • <Drive name for removable media>:\ituneshelpunavailable.htm
  • <Drive name for removable media>:\64bit_notes.htm
  • <Drive name for removable media>:\alert.htm
  • <Drive name for removable media>:\advice_process.htm
  • <Drive name for removable media>:\tree_view.htm
  • <Drive name for removable media>:\garden.htm
  • <Drive name for removable media>:\trivial-merge.htm
  • <Drive name for removable media>:\dotnetfx45_full_setup.exe
  • <Drive name for removable media>:\scan.mov
  • <Drive name for removable media>:\-=###_info_you_file_###=-.txt
Malicious functions
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Defender
deletes volume shadow copies.
Reads files which store third party applications passwords
  • %LOCALAPPDATA%\google\chrome\user data\default\cookies
  • %LOCALAPPDATA%\google\chrome\user data\default\login data
  • %LOCALAPPDATA%\google\chrome\user data\default\web data
Modifies file system
Creates the following files
  • %APPDATA%\taridd
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_tw\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_cn\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_pt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_br\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows media\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\session storage\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0003b056\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\media player\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\active\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\office\groove\system\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\office\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows mail\backup\new\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows mail\backup\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows mail\stationery\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows mail\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows media\12.0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\office\groove\user\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\office\groove\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\q2xofo16\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\id3ykpjl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\evwhitelist\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\pepperflash\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\pnacl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\swiftshader\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\widevinecdm\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds\feeds for united states~\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\1zlrvj28\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\5uzys9tz\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\credentials\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_gb\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\uk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\vi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_cn\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_tw\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\th\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\tr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\id\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\it\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ja\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ko\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\no\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_br\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_pt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ro\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ru\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\nl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_us\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_tw\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_cn\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_pt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_br\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\startupcache\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extensions\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\52\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\53\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\54\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\55\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\56\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\57\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\50\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\51\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\58\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\60\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\61\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\62\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\63\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\7\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\8\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\59\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\6\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\5\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\49\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\48\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\33\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\34\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\35\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\36\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\37\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\38\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\39\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\32\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\4\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\41\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\42\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\43\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\44\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\45\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\46\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\47\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\40\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\9\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\muffin\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows sidebar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\systemcertificates\my\crls\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\systemcertificates\my\ctls\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\systemcertificates\my\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\systemcertificates\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\extensions\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\protect\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\systemcertificates\my\certificates\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\crash reports\events\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\events\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\crash reports\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\pending pings\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\internet explorer\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\security\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\-=###_info_you_file_###=-.txt
  • %APPDATA%\identities\{d59a8b31-5854-4768-ba01-cd66beadf546}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\-=###_info_you_file_###=-.txt
  • %APPDATA%\identities\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\credentials\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\crypto\rsa\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\crypto\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\-=###_info_you_file_###=-.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\-=###_info_you_file_###=-.txt
  • %APPDATA%\media center programs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\31\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\he\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\30\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\safebrowsing\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\programs\common\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\programs\-=###_info_you_file_###=-.txt
  • %TEMP%\hsperfdata_user\-=###_info_you_file_###=-.txt
  • %TEMP%\low\-=###_info_you_file_###=-.txt
  • %TEMP%\microsoft .net framework 4 setup_4.0.30319\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\-=###_info_you_file_###=-.txt
  • %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_10.0.30319\-=###_info_you_file_###=-.txt
  • %TEMP%\wpdnse\-=###_info_you_file_###=-.txt
  • %TEMP%\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\49zr3fqa.default\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\doomed\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\entries\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\-=###_info_you_file_###=-.txt
  • %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\-=###_info_you_file_###=-.txt
  • %TEMP%\opera installer\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\thumbnails\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\startupcache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\doomed\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\entries\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\offlinecache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\safebrowsing\google4\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\safebrowsing\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\startupcache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft help\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\thumbnails\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\bcjnbgva.default\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\doomed\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\entries\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\offlinecache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\safebrowsing\google4\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\safebrowsing\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\safebrowsing\google4\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\microsoft\windows sidebar\gadgets\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\29\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\15\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\16\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\17\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\18\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\19\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\2\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\13\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\14\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\20\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\23\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\24\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\25\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\26\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\27\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\28\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\21\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\22\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\12\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\11\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\10\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\microsoft\internet explorer\services\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\microsoft\internet explorer\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\microsoft\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\temp-{10ec5a16-76a1-4966-833c-89c100352a7c}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\temp-{6caf41d3-d3bc-4111-be0f-6767486b42d5}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\thunderbird\profiles\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\temp-{74a94761-d090-449f-b0e6-cb7d26a06c26}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\temp-{c524df81-3d66-47d3-a687-5ed5a39c6588}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\oracle\java\au\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\oracle\java\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\oracle\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\1\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\mozilla\temp-{9cda0b19-0440-4e70-9631-93e7041926aa}\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\3\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\host\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msscan\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\wpd\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\wwansvc\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft help\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\mozilla\updates\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\mozilla\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\oracle\java\javapath\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\oracle\java\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\oracle\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\mozilla\updates\d78bf5dd33499ec2\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\mozilla\updates\e7cf176e110c211b\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\sentitems\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\queue\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\localcopy\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\quarantine\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\cachemanager\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\results\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\service\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\updates\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\store\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\support\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\activitylog\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\en-us\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\inbox\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\vcruntimeadditional_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\vcruntimeadditional_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\vcruntimeadditional_x86\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\vcruntimeminimum_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\backup\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\vault\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\-=###_info_you_file_###=-.txt
  • C:\perflogs\admin\-=###_info_you_file_###=-.txt
  • C:\perflogs\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\arm\s\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\arm\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\arm\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\-=###_info_you_file_###=-.txt
  • C:\msocache\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\setup\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\machinekeys\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\keys\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\adobe\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\kms\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • D:\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\-=###_info_you_file_###=-.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\3082\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\office\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\cache\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\network\downloader\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\network\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\rac\outbound\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\rac\temp\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\rac\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\search\data\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\search\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\rac\publisheddata\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\rac\statedata\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\network\connections\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\8.0\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\drm\server\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\drm\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\ehome\logs\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\ehome\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\identitycrl\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\media player\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\mf\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\devicesync\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\microsoft\user account pictures\-=###_info_you_file_###=-.txt
  • C:\users\public\music\sample music\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fi\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\uk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\vi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_cn\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_tw\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\th\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\tr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\id\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\it\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ja\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ko\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ms\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\no\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_br\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_pt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ro\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ru\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\nl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_cn\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_tw\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\cs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\da\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\de\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\el\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\en\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\es\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\bg\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ca\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_br\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_pt\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fil\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\he\-=###_info_you_file_###=-.txt
  • C:\users\public\libraries\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\roaming\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\-=###_info_you_file_###=-.txt
  • C:\users\default\desktop\-=###_info_you_file_###=-.txt
  • C:\users\default\documents\-=###_info_you_file_###=-.txt
  • C:\users\default\downloads\-=###_info_you_file_###=-.txt
  • C:\users\default\favorites\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\roaming\microsoft\internet explorer\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\roaming\microsoft\-=###_info_you_file_###=-.txt
  • C:\users\default\links\-=###_info_you_file_###=-.txt
  • C:\users\default\saved games\-=###_info_you_file_###=-.txt
  • C:\users\default\videos\-=###_info_you_file_###=-.txt
  • C:\users\default\-=###_info_you_file_###=-.txt
  • C:\users\public\desktop\-=###_info_you_file_###=-.txt
  • C:\users\public\documents\-=###_info_you_file_###=-.txt
  • C:\users\public\downloads\-=###_info_you_file_###=-.txt
  • C:\users\default\music\-=###_info_you_file_###=-.txt
  • C:\users\default\pictures\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\roaming\media center programs\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\local\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\vcruntimeminimum_amd64\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\sun\java\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\sun\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\-=###_info_you_file_###=-.txt
  • C:\recovery\fc7d0508-3f8d-11ed-bf82-c9aa0b5639b5\-=###_info_you_file_###=-.txt
  • C:\recovery\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\local\microsoft\-=###_info_you_file_###=-.txt
  • C:\users\default\appdata\local\temp\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\sun\java\java update\-=###_info_you_file_###=-.txt
  • C:\users\public\favorites\-=###_info_you_file_###=-.txt
  • %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\vcruntimeminimum_x86\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fil\-=###_info_you_file_###=-.txt
  • C:\users\public\music\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ar\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\bg\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ca\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\cs\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\da\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\__macosx\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\de\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_us\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es_419\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\et\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\eu\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fi\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\el\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_gb\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\databases\-=###_info_you_file_###=-.txt
  • C:\users\public\pictures\-=###_info_you_file_###=-.txt
  • C:\users\public\recorded tv\sample media\-=###_info_you_file_###=-.txt
  • C:\users\public\recorded tv\-=###_info_you_file_###=-.txt
  • C:\users\public\videos\sample videos\-=###_info_you_file_###=-.txt
  • C:\users\public\videos\-=###_info_you_file_###=-.txt
  • C:\users\public\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\-=###_info_you_file_###=-.txt
  • C:\users\public\pictures\sample pictures\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\extensions\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\pepperflash\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\caps\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\cache\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\-=###_info_you_file_###=-.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fr\-=###_info_you_file_###=-.txt
  • %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\minidumps\-=###_info_you_file_###=-.txt
Moves the following files
  • from %TEMP%\adobearm.log to %TEMP%\adobearm.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\handlers.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\handlers.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\pkcs11.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\pkcs11.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\pluginreg.dat to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\pluginreg.dat_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\prefs.js to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\prefs.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\0186ea91-e835-4919-9366-c7e15b92110b to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\0186ea91-e835-4919-9366-c7e15b92110b_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\0bfb99e9-0e75-47d0-b739-94e23d793342 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\0bfb99e9-0e75-47d0-b739-94e23d793342_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\1f6a84f6-29b5-43da-aa85-b8cf32dd80d0 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\1f6a84f6-29b5-43da-aa85-b8cf32dd80d0_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\a847dc89-db3d-4896-9bef-b610ec76e43d to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\a847dc89-db3d-4896-9bef-b610ec76e43d_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\d9d62ad7-4327-4aa9-97e7-aeb5486c45ee to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\d9d62ad7-4327-4aa9-97e7-aeb5486c45ee_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\ee43e28f-610b-4229-a7d7-171f6ed032bd to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\ee43e28f-610b-4229-a7d7-171f6ed032bd_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.lib to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.lib_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.sig to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.sig_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\search.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\search.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\previous.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\previous.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\recovery.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\recovery.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\upgrade.jsonlz4-20200708170202 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\upgrade.jsonlz4-20200708170202_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\shield-preference-experiments.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\shield-preference-experiments.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sitesecurityservicestate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2_sbksd3_{corebitp@cock.li...
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s... to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s...
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\.metadata-v2_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\securitypreloadstate.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\securitypreloadstate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessioncheckpoints.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\manifest.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\manifest.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\license.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\license.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\times.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\times.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\trrblacklist.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\trrblacklist.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\user.js to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\user.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\webappsstore.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\webappsstore.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\times.json to %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\times.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\user.js to %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\user.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addons.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addons.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\alternateservices.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\alternateservices.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\bookmarkbackups\bookmarks-2023-08-28_11_wowu13vthwkcthdlkwm-la==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\bookmarkbackups\bookmarks-2023-08-28_11_wowu13vthwkcthdlkwm-la==.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\broadcast-listeners.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\broadcast-listeners.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\compatibility.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\crashes\store.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\crashes\store.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160101.d9d62ad7-4327-4aa9-97e7-aeb5486c45ee.new-profile.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160101.d9d62ad7-4327-4aa9-97e7-aeb5486c45ee.new-profile.jsonlz4_sbksd3_{corebitp@cock.li}.bit...
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160111.ee43e28f-610b-4229-a7d7-171f6ed032bd.health.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160111.ee43e28f-610b-4229-a7d7-171f6ed032bd.health.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160174.0bfb99e9-0e75-47d0-b739-94e23d793342.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160174.0bfb99e9-0e75-47d0-b739-94e23d793342.event.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160236.a847dc89-db3d-4896-9bef-b610ec76e43d.health.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160236.a847dc89-db3d-4896-9bef-b610ec76e43d.health.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160262.1f6a84f6-29b5-43da-aa85-b8cf32dd80d0.main.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160262.1f6a84f6-29b5-43da-aa85-b8cf32dd80d0.main.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4_sbksd3_{corebitp@cock.li}....
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\session-state.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\session-state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extension-preferences.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extension-preferences.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extensions.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extensions.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\containers.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\containers.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\extensions.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\extensions.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\favicons.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\favicons.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\formhistory.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\formhistory.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\global-messages-db.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\history.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\history.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\key4.db to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\key4.db_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\mailviews.dat to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\mailviews.dat_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\openpgp.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\openpgp.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\parent.lock to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\parent.lock_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\permissions.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\permissions.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\pkcs11.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\pkcs11.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\places.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\places.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\prefs.js to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\prefs.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\a6077284-6dcc-4781-9fb7-7f9d7b5132bf to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\a6077284-6dcc-4781-9fb7-7f9d7b5132bf_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\d092fa80-6cc0-49cc-9da4-f67b3d6cdc55 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\d092fa80-6cc0-49cc-9da4-f67b3d6cdc55_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\e60182f3-3480-48d0-bc12-b3b897042a6b to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\e60182f3-3480-48d0-bc12-b3b897042a6b_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\search.json.mozlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\search.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\securitypreloadstate.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\securitypreloadstate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sessioncheckpoints.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sitesecurityservicestate.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sitesecurityservicestate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\times.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\times.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\webappsstore.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\extension-preferences.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\extension-preferences.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\directorytree.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\directorytree.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\enigmail.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\enigmail.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\state.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\times.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\times.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\trrblacklist.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\trrblacklist.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\user.js to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\user.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\xulstore.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\xulstore.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles.ini to %APPDATA%\mozilla\firefox\profiles.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\telegram desktop\telegram.exe to %APPDATA%\telegram desktop\telegram.exe_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\telegram desktop\unins000.dat to %APPDATA%\telegram desktop\unins000.dat_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\telegram desktop\unins000.exe to %APPDATA%\telegram desktop\unins000.exe_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\telegram desktop\updater.exe to %APPDATA%\telegram desktop\updater.exe_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\crash reports\installtime20210406220621 to %APPDATA%\thunderbird\crash reports\installtime20210406220621_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\installs.ini to %APPDATA%\thunderbird\installs.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\49zr3fqa.default\times.json to %APPDATA%\thunderbird\profiles\49zr3fqa.default\times.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\abook.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\abook.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addons.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addons.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addonstartup.json.lz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addonstartup.json.lz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\alternateservices.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\alternateservices.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\blist.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\blist.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cert9.db to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cert9.db_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\compatibility.ini to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\compatibility.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cookies.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cookies.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\crashes\store.json.mozlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\crashes\store.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411763506.e60182f3-3480-48d0-bc12-b3b897042a6b.new-profile.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411763506.e60182f3-3480-48d0-bc12-b3b897042a6b.new-profile.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764034.d092fa80-6cc0-49cc-9da4-f67b3d6cdc55.main.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764034.d092fa80-6cc0-49cc-9da4-f67b3d6cdc55.main.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764036.a6077284-6dcc-4781-9fb7-7f9d7b5132bf.first-shutdown.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764036.a6077284-6dcc-4781-9fb7-7f9d7b5132bf.first-shutdown.jsonlz4_sbksd3_{corebitp@cock.li}.bitcor...
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\session-state.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\session-state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\xulstore.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\xulstore.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165710.log to %TEMP%\dd_vcredist_x86_20220928165710.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165710_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20220928165710_0_vcruntimeminimum_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165710_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928165710_1_vcruntimeadditional_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165916.log to %TEMP%\dd_vcredist_x86_20220928165916.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165916_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20220928165916_000_vcruntimeminimum_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165916_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928165916_001_vcruntimeadditional_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170143.log to %TEMP%\dd_vcredist_x86_20220928170143.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170143_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20220928170143_001_vcruntimeminimum_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170143_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928170143_002_vcruntimeadditional_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170221.log to %TEMP%\dd_vcredist_x86_20220928170221.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165536_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20220928165536_0_vcruntimeminimum_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165536_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928165536_1_vcruntimeadditional_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170335.log to %TEMP%\dd_vcredist_x86_20220928170335.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170410.log to %TEMP%\dd_vcredist_x86_20220928170410.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_wcf_ca_smci_20230531_225943_157.txt to %TEMP%\dd_wcf_ca_smci_20230531_225943_157.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_wcf_ca_smci_20230531_225945_094.txt to %TEMP%\dd_wcf_ca_smci_20230531_225945_094.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\opera installer\opera_installer_20220928171325.log to %TEMP%\opera installer\opera_installer_20220928171325.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\opera installer\opera_installer_20220928171326.log to %TEMP%\opera installer\opera_installer_20220928171326.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\opera installer\opera_installer_20220928171336.log to %TEMP%\opera installer\opera_installer_20220928171336.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\f58155b4b1d5a524ca0261c3ee99fb50_d4602615-9d50-4880-be41-678935e93eaa to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\f58155b4b1d5a524ca0261c3ee99fb50_d4602615-9d50-4880-be41-678935e93eaa_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk to %APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk to %APPDATA%\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170335_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20220928170335_001_vcruntimeminimum_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928170335_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928170335_002_vcruntimeadditional_x86.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_x86_20220928165536.log to %TEMP%\dd_vcredist_x86_20220928165536.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928170328.log to %TEMP%\dd_vcredist_amd64_20220928170328.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928170250_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20220928170250_002_vcruntimeadditional_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\armui.ini to %TEMP%\armui.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\chrome_installer.log to %TEMP%\chrome_installer.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredistmsi7a3c.txt to %TEMP%\dd_vcredistmsi7a3c.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredistui7a3c.txt to %TEMP%\dd_vcredistui7a3c.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165349.log to %TEMP%\dd_vcredist_amd64_20220928165349.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165349_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20220928165349_0_vcruntimeminimum_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165349_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20220928165349_1_vcruntimeadditional_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165628_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20220928165628_0_vcruntimeminimum_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165628_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20220928165628_1_vcruntimeadditional_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165746.log to %TEMP%\dd_vcredist_amd64_20220928165746.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165746_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20220928165746_000_vcruntimeminimum_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165746_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20220928165746_001_vcruntimeadditional_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165956.log to %TEMP%\dd_vcredist_amd64_20220928165956.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165956_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20220928165956_001_vcruntimeminimum_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165956_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20220928165956_002_vcruntimeadditional_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928170114.log to %TEMP%\dd_vcredist_amd64_20220928170114.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928170250.log to %TEMP%\dd_vcredist_amd64_20220928170250.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928170250_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20220928170250_001_vcruntimeminimum_x64.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %TEMP%\dd_vcredist_amd64_20220928165628.log to %TEMP%\dd_vcredist_amd64_20220928165628.log_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk to %APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\firefox.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\firefox.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extensions.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extensions.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\favicons.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\favicons.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\formhistory.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\formhistory.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\handlers.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\handlers.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\key4.db to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\key4.db_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\parent.lock to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\parent.lock_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\permissions.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\permissions.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\pkcs11.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\pkcs11.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\places.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\places.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\prefs.js to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\prefs.js_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\bef7f9cf-b0b1-42d8-a037-8d586d4d1e42 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\bef7f9cf-b0b1-42d8-a037-8d586d4d1e42_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\dc5a4164-f290-4a08-a5ec-0fe7810acbc6 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\dc5a4164-f290-4a08-a5ec-0fe7810acbc6_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\f9af9616-8535-4ace-8050-4454f33ad475 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\f9af9616-8535-4ace-8050-4454f33ad475_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\fbcd22a2-e53a-4131-9ef1-1935f505d9ca to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\fbcd22a2-e53a-4131-9ef1-1935f505d9ca_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\search.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\search.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\securitypreloadstate.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\securitypreloadstate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessioncheckpoints.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore-backups\recovery.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore-backups\recovery.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\shield-preference-experiments.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\shield-preference-experiments.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sitesecurityservicestate.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2_sbksd3_{corebitp@cock.li}....
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql... to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql...
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extension-preferences.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extension-preferences.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\session-state.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\session-state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\state.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759551.dc5a4164-f290-4a08-a5ec-0fe7810acbc6.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759551.dc5a4164-f290-4a08-a5ec-0fe7810acbc6.first-shutdown.jsonlz4_sbksd3_{corebitp@cock.li}.bi...
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\opera.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\opera.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows explorer.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows explorer.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows media player.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows media player.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk to %APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\protect\credhist to %APPDATA%\microsoft\protect\credhist_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\6e12f8b6-e1ac-4788-8949-ac589fd4016c to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\6e12f8b6-e1ac-4788-8949-ac589fd4016c_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\71e6321a-7203-4cd6-882b-58bcea299d05 to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\71e6321a-7203-4cd6-882b-58bcea299d05_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\preferred to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\preferred_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202 to %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\installs.ini to %APPDATA%\mozilla\firefox\installs.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addons.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addons.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addonstartup.json.lz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\alternateservices.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\alternateservices.txt_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\bookmarks-2022-09-28_11_3a7quggif+d7xxwa176j2q==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\bookmarks-2022-09-28_11_3a7quggif+d7xxwa176j2q==.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\broadcast-listeners.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\broadcast-listeners.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cert9.db to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cert9.db_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\compatibility.ini_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\containers.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\containers.json_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\content-prefs.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\content-prefs.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cookies.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cookies.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\store.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\store.json.mozlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759331.f9af9616-8535-4ace-8050-4454f33ad475.new-profile.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759331.f9af9616-8535-4ace-8050-4454f33ad475.new-profile.jsonlz4_sbksd3_{corebitp@cock.li}.bitco...
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759547.bef7f9cf-b0b1-42d8-a037-8d586d4d1e42.main.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759547.bef7f9cf-b0b1-42d8-a037-8d586d4d1e42.main.jsonlz4_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite_sbksd3_{corebitp@cock.li}.bitcore
  • from %APPDATA%\thunderbird\profiles.ini to %APPDATA%\thunderbird\profiles.ini_sbksd3_{corebitp@cock.li}.bitcore
Modifies the following files
  • D:\install.log
  • C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi
  • C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.msi
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
  • <Drive name for removable media>:\testee.cer
  • <Drive name for removable media>:\contosoroot_1.cer
  • <Drive name for removable media>:\contoso.cer
  • <Drive name for removable media>:\sdkfailsafeemulator.cer
  • <Drive name for removable media>:\testcertificate.cer
  • <Drive name for removable media>:\pmd.cer
  • <Drive name for removable media>:\default.bmp
  • <Drive name for removable media>:\dashborder_120.bmp
  • <Drive name for removable media>:\dialmap.bmp
  • <Drive name for removable media>:\dial.bmp
  • <Drive name for removable media>:\dashborder_192.bmp
  • <Drive name for removable media>:\dashborder_144.bmp
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
  • <Drive name for removable media>:\archer.avi
  • <Drive name for removable media>:\split.avi
  • <Drive name for removable media>:\join.avi
  • <Drive name for removable media>:\correct.avi
  • C:\kms\kms_vl_all_aio_debug.log
  • C:\kms\kms_vl_all_aio.cmd
  • C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi
  • C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
Modifies multiple files.
Modifies user data files (Trojan.Encoder).
Miscellaneous
Creates and executes the following
  • '<SYSTEM32>\vssadmin.exe' delete shadows /all /quiet' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android