Technical Information
- <Drive name for removable media>:\whathappened.txt
- System Restore (SR)
- firefox.exe
- C:\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\29\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\3\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\30\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\31\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\32\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\33\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\34\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\35\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\36\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\37\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\38\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\10\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\39\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\41\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\40\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\42\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\44\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\45\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\47\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\46\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\48\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\49\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\5\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\50\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\51\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\26\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\4\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\28\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\27\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\25\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\24\whathappened.txt
- %LOCALAPPDATA%low\whathappened.txt
- %LOCALAPPDATA%low\oracle\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\startupcache\whathappened.txt
- %LOCALAPPDATA%low\oracle\java\whathappened.txt
- %LOCALAPPDATA%low\sun\whathappened.txt
- %LOCALAPPDATA%low\sun\java\whathappened.txt
- %LOCALAPPDATA%low\oracle\java\au\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\0\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\52\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\1\whathappened.txt
- %LOCALAPPDATA%\thunderbird\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\11\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\13\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\14\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\15\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\16\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\17\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\18\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\19\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\2\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\20\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\21\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\22\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\safebrowsing\google4\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\23\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\12\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\hmz1jddi.default\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\43\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\57\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\minidumps\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\default\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\idb\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\whathappened.txt
- %APPDATA%\thunderbird\profiles\hmz1jddi.default\whathappened.txt
- %HOMEPATH%\contacts\whathappened.txt
- %HOMEPATH%\desktop\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\events\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\whathappened.txt
- %HOMEPATH%\downloads\whathappened.txt
- %HOMEPATH%\favorites\whathappened.txt
- %HOMEPATH%\favorites\links\whathappened.txt
- %HOMEPATH%\favorites\links for united states\whathappened.txt
- %HOMEPATH%\favorites\microsoft websites\whathappened.txt
- %HOMEPATH%\favorites\msn websites\whathappened.txt
- %HOMEPATH%\favorites\windows live\whathappened.txt
- %HOMEPATH%\links\whathappened.txt
- %HOMEPATH%\music\whathappened.txt
- %HOMEPATH%\pictures\whathappened.txt
- %HOMEPATH%\saved games\whathappened.txt
- %HOMEPATH%\searches\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extensions\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\whathappened.txt
- C:\users\default\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\58\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\56\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\59\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\6\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\60\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\62\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\63\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\7\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\61\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\8\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\9\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\53\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\55\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\54\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\muffin\whathappened.txt
- %LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\whathappened.txt
- %APPDATA%\identities\whathappened.txt
- %APPDATA%\identities\{1bc91121-7903-48ee-bf78-1bc7ca4b5761}\whathappened.txt
- %APPDATA%\thunderbird\whathappened.txt
- %APPDATA%\thunderbird\crash reports\events\whathappened.txt
- %APPDATA%\thunderbird\pending pings\whathappened.txt
- %APPDATA%\thunderbird\crash reports\whathappened.txt
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\whathappened.txt
- %APPDATA%\thunderbird\profiles\whathappened.txt
- %APPDATA%\media center programs\whathappened.txt
- %APPDATA%\telegram desktop\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\host\whathappened.txt
- %LOCALAPPDATA%low\sun\java\deployment\security\whathappened.txt
- %APPDATA%\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\safebrowsing\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\cache2\entries\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\cache2\doomed\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\vcruntimeadditional_x86\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\vcruntimeminimum_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\vcruntimeadditional_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\whathappened.txt
- C:\kms\whathappened.txt
- C:\perflogs\whathappened.txt
- %ALLUSERSPROFILE%\whathappened.txt
- C:\perflogs\admin\whathappened.txt
- %ALLUSERSPROFILE%\adobe\whathappened.txt
- %ALLUSERSPROFILE%\adobe\arm\whathappened.txt
- %ALLUSERSPROFILE%\adobe\arm\s\whathappened.txt
- %ALLUSERSPROFILE%\adobe\setup\whathappened.txt
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\whathappened.txt
- %ALLUSERSPROFILE%\adobe\arm\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\whathappened.txt
- %ALLUSERSPROFILE%\microsoft help\whathappened.txt
- %ALLUSERSPROFILE%\oracle\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\whathappened.txt
- %ALLUSERSPROFILE%\oracle\java\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\whathappened.txt
- %ALLUSERSPROFILE%\oracle\java\installcache_x64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\whathappened.txt
- %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\whathappened.txt
- %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\whathappened.txt
- %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\whathappened.txt
- m:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\desktop.ini
- <Current directory>\whathappened.txt
- %ALLUSERSPROFILE%\oracle\java\javapath\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\vcruntimeadditional_amd64\whathappened.txt
- C:\users\public\downloads\whathappened.txt
- C:\users\public\libraries\whathappened.txt
- C:\users\public\music\whathappened.txt
- C:\users\public\music\sample music\whathappened.txt
- C:\users\public\pictures\whathappened.txt
- C:\users\public\pictures\sample pictures\whathappened.txt
- C:\users\public\recorded tv\whathappened.txt
- C:\users\public\recorded tv\sample media\whathappened.txt
- C:\users\public\videos\whathappened.txt
- C:\users\public\videos\sample videos\whathappened.txt
- %HOMEPATH%\whathappened.txt
- %HOMEPATH%\appdata\whathappened.txt
- C:\users\public\documents\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\whathappened.txt
- C:\users\public\favorites\whathappened.txt
- %LOCALAPPDATA%\whathappened.txt
- %TEMP%\whathappened.txt
- %TEMP%\hsperfdata_user\whathappened.txt
- %TEMP%\low\whathappened.txt
- %TEMP%\microsoft .net framework 4 setup_4.0.30319\whathappened.txt
- %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_10.0.30319\whathappened.txt
- %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\whathappened.txt
- %TEMP%\opera installer\whathappened.txt
- %TEMP%\wpdnse\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\whathappened.txt
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\cache2\whathappened.txt
- %LOCALAPPDATA%\microsoft help\whathappened.txt
- %LOCALAPPDATA%\programs\whathappened.txt
- %LOCALAPPDATA%\programs\common\whathappened.txt
- %HOMEPATH%\documents\whathappened.txt
- D:\whathappened.txt
- C:\users\default\videos\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\vcruntimeminimum_amd64\whathappened.txt
- %ALLUSERSPROFILE%\sun\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\whathappened.txt
- %ALLUSERSPROFILE%\sun\java\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\whathappened.txt
- %ALLUSERSPROFILE%\sun\java\java update\whathappened.txt
- C:\recovery\whathappened.txt
- C:\recovery\4cc8e8a4-51d2-11ee-b826-9a90d4dcffb5\whathappened.txt
- C:\users\public\whathappened.txt
- C:\users\public\desktop\whathappened.txt
- C:\users\whathappened.txt
- C:\users\default\appdata\local\whathappened.txt
- C:\users\default\appdata\local\temp\whathappened.txt
- C:\users\default\appdata\roaming\whathappened.txt
- C:\users\default\appdata\roaming\media center programs\whathappened.txt
- C:\users\default\desktop\whathappened.txt
- C:\users\default\documents\whathappened.txt
- C:\users\default\downloads\whathappened.txt
- C:\users\default\favorites\whathappened.txt
- C:\users\default\links\whathappened.txt
- C:\users\default\music\whathappened.txt
- C:\users\default\pictures\whathappened.txt
- C:\users\default\saved games\whathappened.txt
- %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\vcruntimeminimum_x86\whathappened.txt
- C:\users\default\appdata\whathappened.txt
- %HOMEPATH%\videos\whathappened.txt
- from %TEMP%\adobearm.log to %TEMP%\adobearm.log.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extension-preferences.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extension-preferences.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\enigmail.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\enigmail.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cookies.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cookies.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\directorytree.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\directorytree.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\blist.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\blist.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addonstartup.json.lz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addonstartup.json.lz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addons.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addons.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\abook.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\abook.sqlite.misr9
- from %APPDATA%\thunderbird\crash reports\installtime20210406220621 to %APPDATA%\thunderbird\crash reports\installtime20210406220621.misr9
- from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.misr9
- from %TEMP%\setupexe(202309121734336dc).log to %TEMP%\setupexe(202309121734336dc).log.misr9
- from %TEMP%\tmpaddon to %TEMP%\tmpaddon.misr9
- from %TEMP%\rgia609.tmp to %TEMP%\rgia609.tmp.misr9
- from %TEMP%\rgia609.tmp-tmp to %TEMP%\rgia609.tmp-tmp.misr9
- from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997.html to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997.html.misr9
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793.html to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793.html.misr9
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt.misr9
- from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt.misr9
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt.misr9
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215.html to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215.html.misr9
- from %TEMP%\microsoft .net framework 4.8 setup_20230912_173103134.html to %TEMP%\microsoft .net framework 4.8 setup_20230912_173103134.html.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extensions.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extensions.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\favicons.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\favicons.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\formhistory.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\formhistory.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\global-messages-db.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\.metadata-v2.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\d8154144-ac52-40e8-b685-b640783b2c0d to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\d8154144-ac52-40e8-b685-b640783b2c0d.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\state.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\state.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\session-state.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\session-state.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\199a0618-6d48-4205-858d-6b9a8ba9e913 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\199a0618-6d48-4205-858d-6b9a8ba9e913.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\22a456d0-5d02-445b-9603-4fe4b9e5c45c to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\22a456d0-5d02-445b-9603-4fe4b9e5c45c.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729925.d8154144-ac52-40e8-b685-b640783b2c0d.main.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729925.d8154144-ac52-40e8-b685-b640783b2c0d.main.jsonlz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729926.199a0618-6d48-4205-858d-6b9a8ba9e913.first-shutdown.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729926.199a0618-6d48-4205-858d-6b9a8ba9e913.first-shutdown.jsonlz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729880.22a456d0-5d02-445b-9603-4fe4b9e5c45c.new-profile.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729880.22a456d0-5d02-445b-9603-4fe4b9e5c45c.new-profile.jsonlz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\store.json.mozlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\store.json.mozlz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\sessioncheckpoints.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\webappsstore.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\xulstore.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\xulstore.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\times.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\times.json.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\search.json.mozlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\search.json.mozlz4.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\prefs.js to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\prefs.js.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\places.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\places.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\pkcs11.txt to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\pkcs11.txt.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\permissions.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\permissions.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\history.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\history.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\openpgp.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\openpgp.sqlite.misr9
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.misr9
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt.misr9
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823.html to %TEMP%\microsoft .net framework 4 setup_20230912_172639823.html.misr9
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172247.log to %TEMP%\dd_vcredist_amd64_20230912172247.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171824.log to %TEMP%\dd_vcredist_amd64_20230912171824.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171735.log to %TEMP%\dd_vcredist_amd64_20230912171735.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171641.log to %TEMP%\dd_vcredist_amd64_20230912171641.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log.misr9
- from %TEMP%\dd_vcredistui12db.txt to %TEMP%\dd_vcredistui12db.txt.misr9
- from %TEMP%\dd_vcredistmsi12db.txt to %TEMP%\dd_vcredistmsi12db.txt.misr9
- from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.misr9
- from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.misr9
- from %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt.misr9
- from %TEMP%\chrome_installer.log to %TEMP%\chrome_installer.log.misr9
- from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.misr9
- from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.misr9
- from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172134.log to %TEMP%\dd_vcredist_amd64_20230912172134.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172034.log to %TEMP%\dd_vcredist_amd64_20230912172034.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171710.log to %TEMP%\dd_vcredist_x86_20230912171710.log.misr9
- from %TEMP%\jawshtml.html to %TEMP%\jawshtml.html.misr9
- from %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt to %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt.misr9
- from %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt to %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt.misr9
- from %TEMP%\dd_vcredist_x86_20230912172350.log to %TEMP%\dd_vcredist_x86_20230912172350.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log.misr9
- from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172322.log to %TEMP%\dd_vcredist_x86_20230912172322.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172224.log to %TEMP%\dd_vcredist_x86_20230912172224.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172157.log to %TEMP%\dd_vcredist_x86_20230912172157.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171936.log to %TEMP%\dd_vcredist_x86_20230912171936.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log.misr9
- from %TEMP%\dd_vcredist_amd64_20230912172315.log to %TEMP%\dd_vcredist_amd64_20230912172315.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171759.log to %TEMP%\dd_vcredist_x86_20230912171759.log.misr9
- from %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log.misr9
- from %TEMP%\jusched.log to %TEMP%\jusched.log.misr9
- from %APPDATA%\thunderbird\profiles\hmz1jddi.default\times.json to %APPDATA%\thunderbird\profiles\hmz1jddi.default\times.json.misr9
- C:\kms\kms_vl_all_aio_debug.log.misr9
- %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\cab1.cab.misr9
- %ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\state.rsm.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.winword.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\nslist.hxl.misr9
- %ALLUSERSPROFILE%\oracle\java\installcache_x64\baseimagefam8.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.winword.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.setlang.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.powerpnt.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.powerpnt.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.outlook.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.onenote.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.outlook.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.ois.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.mstore.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.mspub.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.msouc.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.mspub.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.msaccess.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.msaccess.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.infopath.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.excel.dev.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.excel.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.infopatheditor.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.graph.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\ms.groove.14.1033.hxn.misr9
- %ALLUSERSPROFILE%\microsoft help\hx.hxn.misr9
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.misr9
- %ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.misr9
- %ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\state.rsm.misr9
- '<SYSTEM32>\cmd.exe' /c vssadmin.exe delete shadows /all /quiet' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c wmic SHADOWCOPY DELETE' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c bcdedit / set{ default } recoveryenabled No' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c bcdedit / set{ default } bootstatuspolicy ignoreallfailures' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c vssadmin.exe delete shadows /all /quiet
- '<SYSTEM32>\cmd.exe' /c wmic SHADOWCOPY DELETE
- '<SYSTEM32>\cmd.exe' /c bcdedit / set{ default } recoveryenabled No
- '<SYSTEM32>\cmd.exe' /c bcdedit / set{ default } bootstatuspolicy ignoreallfailures
- '<SYSTEM32>\bcdedit.exe' / set{ default } bootstatuspolicy ignoreallfailures