SHARE
TWEET

Exes_15c69380b7cf8feaa6f7a7033f10b4aa_dat_2019-08-13_14_30.txt

paladin316 Aug 13th, 2019 109 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2. * MalFamily: ""
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat"
  7. * File Size: 3678208
  8. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. * SHA256: "ddcbf8e3742691aafda428a017093e6669384114277612adbcfa53b4ff2dfcd1"
  10. * MD5: "15c69380b7cf8feaa6f7a7033f10b4aa"
  11. * SHA1: "b38c61a435497cac63d481263f879773c14c3ce5"
  12. * SHA512: "e545859e1f4c2ada01ef9882ba6fb08b79a19366ccdf0cad35b35d6276ef4f7e3cf7a85a3cfd1f5c22ea2a67ee0765c7246afa0646dcb5c9dec6feb22afa21b3"
  13. * CRC32: "CA9CD83A"
  14. * SSDEEP: "49152:OLcfG4kBKPqEoCO3AdTEWP5aJNKl8mfBqeoEvRLSJRlshktcoXQWwAPmZXP8ONR:HSBKrLylzNKhToEgJcaPmZ/fNR"
  15.  
  16. * Process Execution:
  17.     "Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  18.     "EDD86EDC.EXE",
  19.     "C8B5715E.EXE",
  20.     "VC2008.EXE",
  21.     "install.exe",
  22.     "services.exe",
  23.     "svchost.exe",
  24.     "WmiPrvSE.exe",
  25.     "svchost.exe",
  26.     "msiexec.exe"
  27.  
  28.  
  29. * Executed Commands:
  30.     "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE C:\\Users\\user\\AppData\\Local\\Temp\\Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  31.     "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding",
  32.     "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE ",
  33.     "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE /Q",
  34.     "c:\\323029f5b1c45432f6a6f0\\.\\install.exe /Q",
  35.     "C:\\Windows\\system32\\msiexec.exe /V"
  36.  
  37.  
  38. * Signatures Detected:
  39.    
  40.         "Description": "Attempts to connect to a dead IP:Port (3 unique times)",
  41.         "Details":
  42.            
  43.                 "IP": "184.28.188.250:80"
  44.            
  45.            
  46.                 "IP": "23.208.142.202:443"
  47.            
  48.            
  49.                 "IP": "72.21.91.29:80"
  50.            
  51.        
  52.    
  53.    
  54.         "Description": "Creates RWX memory",
  55.         "Details":
  56.    
  57.    
  58.         "Description": "A process attempted to delay the analysis task.",
  59.         "Details":
  60.            
  61.                 "Process": "WmiPrvSE.exe tried to sleep 363 seconds, actually delayed analysis time by 0 seconds"
  62.            
  63.        
  64.    
  65.    
  66.         "Description": "At least one IP Address, Domain, or File Name was found in a crypto call",
  67.         "Details":
  68.            
  69.                 "ioc": "3.1b"
  70.            
  71.            
  72.                 "ioc": "9.zq"
  73.            
  74.            
  75.                 "ioc": "0.yk"
  76.            
  77.            
  78.                 "ioc": "r.bn"
  79.            
  80.            
  81.                 "ioc": "b.c8"
  82.            
  83.            
  84.                 "ioc": "t.31"
  85.            
  86.            
  87.                 "ioc": "x.x7V"
  88.            
  89.            
  90.                 "ioc": "6.va0"
  91.            
  92.            
  93.                 "ioc": "l.53"
  94.            
  95.            
  96.                 "ioc": "-.4a"
  97.            
  98.            
  99.                 "ioc": "q.za"
  100.            
  101.            
  102.                 "ioc": "32.dll"
  103.            
  104.        
  105.    
  106.    
  107.         "Description": "Expresses interest in specific running processes",
  108.         "Details":
  109.            
  110.                 "process": "System"
  111.            
  112.        
  113.    
  114.    
  115.         "Description": "Reads data out of its own binary image",
  116.         "Details":
  117.            
  118.                 "self_read": "process: Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat, pid: 1532, offset: 0x00000000, length: 0x00380000"
  119.            
  120.            
  121.                 "self_read": "process: EDD86EDC.EXE, pid: 1200, offset: 0x00000000, length: 0x00380000"
  122.            
  123.            
  124.                 "self_read": "process: C8B5715E.EXE, pid: 896, offset: 0x00000000, length: 0x001a0000"
  125.            
  126.            
  127.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00000000, length: 0x000000f8"
  128.            
  129.            
  130.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000000c8, length: 0x000000f8"
  131.            
  132.            
  133.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009600, length: 0x0000013c"
  134.            
  135.            
  136.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009647, length: 0x00000110"
  137.            
  138.            
  139.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009662, length: 0x00000110"
  140.            
  141.            
  142.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009680, length: 0x00000110"
  143.            
  144.            
  145.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096a7, length: 0x00000110"
  146.            
  147.            
  148.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096ce, length: 0x00000110"
  149.            
  150.            
  151.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096f5, length: 0x00000110"
  152.            
  153.            
  154.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x0000971c, length: 0x00000110"
  155.            
  156.            
  157.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009743, length: 0x00000110"
  158.            
  159.            
  160.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x0000976a, length: 0x00000110"
  161.            
  162.            
  163.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009791, length: 0x00000110"
  164.            
  165.            
  166.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000097b8, length: 0x00000110"
  167.            
  168.            
  169.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000097df, length: 0x00000110"
  170.            
  171.            
  172.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009806, length: 0x00000110"
  173.            
  174.            
  175.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009826, length: 0x00000110"
  176.            
  177.            
  178.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009846, length: 0x00000110"
  179.            
  180.            
  181.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009866, length: 0x00000110"
  182.            
  183.            
  184.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009886, length: 0x00000110"
  185.            
  186.            
  187.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098a6, length: 0x00000110"
  188.            
  189.            
  190.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098c6, length: 0x00000110"
  191.            
  192.            
  193.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098e6, length: 0x00000110"
  194.            
  195.            
  196.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009906, length: 0x00000110"
  197.            
  198.            
  199.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009926, length: 0x00000110"
  200.            
  201.            
  202.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009946, length: 0x00000110"
  203.            
  204.            
  205.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009965, length: 0x00000010"
  206.            
  207.            
  208.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000099a2, length: 0x003f99d2"
  209.            
  210.            
  211.                 "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00403400, length: 0x00002408"
  212.            
  213.        
  214.    
  215.    
  216.         "Description": "Drops a binary and executes it",
  217.         "Details":
  218.            
  219.                 "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE"
  220.            
  221.            
  222.                 "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE"
  223.            
  224.            
  225.                 "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE"
  226.            
  227.            
  228.                 "binary": "C:\\323029f5b1c45432f6a6f0\\install.exe"
  229.            
  230.        
  231.    
  232.    
  233.         "Description": "Performs some HTTP requests",
  234.         "Details":
  235.            
  236.                 "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D"
  237.            
  238.        
  239.    
  240.    
  241.         "Description": "The binary likely contains encrypted or compressed data.",
  242.         "Details":
  243.            
  244.                 "section": "name:    \\x00    , entropy: 7.88, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00010000, virtual_size: 0x00058000"
  245.            
  246.            
  247.                 "section": "name: .rsrc, entropy: 7.99, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x001a8000, virtual_size: 0x001c397c"
  248.            
  249.            
  250.                 "section": "name: eozvwjpz, entropy: 7.85, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x001c3000, virtual_size: 0x001c3000"
  251.            
  252.            
  253.                 "section": "name: anxggeuo, entropy: 7.71, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00001000, virtual_size: 0x00001000"
  254.            
  255.        
  256.    
  257.    
  258.         "Description": "Detects Sandboxie through the presence of a library",
  259.         "Details":
  260.    
  261.    
  262.         "Description": "Deletes its original binary from disk",
  263.         "Details":
  264.    
  265.    
  266.         "Description": "Tries to suspend Cuckoo threads to prevent logging of malicious activity",
  267.         "Details":
  268.            
  269.                 "Process": "C8B5715E.EXE (896)"
  270.            
  271.        
  272.    
  273.    
  274.         "Description": "Checks for the presence of known windows from debuggers and forensic tools",
  275.         "Details":
  276.            
  277.                 "Window": "OLLYDBG"
  278.            
  279.            
  280.                 "Window": "GBDYLLO"
  281.            
  282.            
  283.                 "Window": "pediy06"
  284.            
  285.            
  286.                 "Window": "FilemonClass"
  287.            
  288.            
  289.                 "Window": "File Monitor - Sysinternals: www.sysinternals.com"
  290.            
  291.            
  292.                 "Window": "PROCMON_WINDOW_CLASS"
  293.            
  294.            
  295.                 "Window": "Process Monitor - Sysinternals: www.sysinternals.com"
  296.            
  297.            
  298.                 "Window": "RegmonClass"
  299.            
  300.            
  301.                 "Window": "Registry Monitor - Sysinternals: www.sysinternals.com"
  302.            
  303.            
  304.                 "Window": "18467-41"
  305.            
  306.            
  307.                 "Window": "OLLYDBG"
  308.            
  309.            
  310.                 "Window": "GBDYLLO"
  311.            
  312.            
  313.                 "Window": "pediy06"
  314.            
  315.            
  316.                 "Window": "FilemonClass"
  317.            
  318.            
  319.                 "Window": "File Monitor - Sysinternals: www.sysinternals.com"
  320.            
  321.            
  322.                 "Window": "PROCMON_WINDOW_CLASS"
  323.            
  324.            
  325.                 "Window": "Process Monitor - Sysinternals: www.sysinternals.com"
  326.            
  327.            
  328.                 "Window": "RegmonClass"
  329.            
  330.            
  331.                 "Window": "Registry Monitor - Sysinternals: www.sysinternals.com"
  332.            
  333.            
  334.                 "Window": "18467-41"
  335.            
  336.        
  337.    
  338.    
  339.         "Description": "Attempts to repeatedly call a single API many times in order to delay analysis time",
  340.         "Details":
  341.            
  342.                 "Spam": "services.exe (504) called API GetSystemTimeAsFileTime 18087090 times"
  343.            
  344.        
  345.    
  346.    
  347.         "Description": "The following process appear to have been packed with Themida: Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat, EDD86EDC.EXE",
  348.         "Details":
  349.    
  350.    
  351.         "Description": "Creates a hidden or system file",
  352.         "Details":
  353.            
  354.                 "file": "C:\\323029f5b1c45432f6a6f0\\$shtdwn$.req"
  355.            
  356.            
  357.                 "file": "C:\\Windows\\Installer\\"
  358.            
  359.            
  360.                 "file": "C:\\Config.Msi\\"
  361.            
  362.        
  363.    
  364.    
  365.         "Description": "Checks for the presence of known devices from debuggers and forensic tools",
  366.         "Details":
  367.    
  368.    
  369.         "Description": "Detects the presence of Wine emulator via registry key",
  370.         "Details":
  371.    
  372.    
  373.         "Description": "File has been identified by 49 Antiviruses on VirusTotal as malicious",
  374.         "Details":
  375.            
  376.                 "MicroWorld-eScan": "Gen:Variant.Ursu.374900"
  377.            
  378.            
  379.                 "CAT-QuickHeal": "Trojan.VBKrypt"
  380.            
  381.            
  382.                 "McAfee": "Artemis!15C69380B7CF"
  383.            
  384.            
  385.                 "Cylance": "Unsafe"
  386.            
  387.            
  388.                 "K7AntiVirus": "Riskware ( 0040eff71 )"
  389.            
  390.            
  391.                 "Alibaba": "Trojan:Win32/VBKrypt.80f489d8"
  392.            
  393.            
  394.                 "K7GW": "Riskware ( 0040eff71 )"
  395.            
  396.            
  397.                 "Cybereason": "malicious.0b7cf8"
  398.            
  399.            
  400.                 "Arcabit": "Trojan.Ursu.D5B874"
  401.            
  402.            
  403.                 "TrendMicro": "TROJ_GEN.R011C0WH319"
  404.            
  405.            
  406.                 "Symantec": "ML.Attribute.HighConfidence"
  407.            
  408.            
  409.                 "ESET-NOD32": "a variant of Win32/Packed.Themida.AJJ"
  410.            
  411.            
  412.                 "APEX": "Malicious"
  413.            
  414.            
  415.                 "Paloalto": "generic.ml"
  416.            
  417.            
  418.                 "Kaspersky": "Trojan.Win32.VBKrypt.aaexg"
  419.            
  420.            
  421.                 "BitDefender": "Gen:Variant.Ursu.374900"
  422.            
  423.            
  424.                 "NANO-Antivirus": "Trojan.Win32.VBKrypt.fuuodt"
  425.            
  426.            
  427.                 "AegisLab": "Trojan.Win32.VBKrypt.4!c"
  428.            
  429.            
  430.                 "Endgame": "malicious (high confidence)"
  431.            
  432.            
  433.                 "Sophos": "Mal/Generic-S"
  434.            
  435.            
  436.                 "F-Secure": "Heuristic.HEUR/AGEN.1039155"
  437.            
  438.            
  439.                 "DrWeb": "Trojan.MulDrop9.40252"
  440.            
  441.            
  442.                 "Invincea": "heuristic"
  443.            
  444.            
  445.                 "McAfee-GW-Edition": "BehavesLike.Win32.Packed.wc"
  446.            
  447.            
  448.                 "Trapmine": "malicious.high.ml.score"
  449.            
  450.            
  451.                 "FireEye": "Generic.mg.15c69380b7cf8fea"
  452.            
  453.            
  454.                 "Emsisoft": "Gen:Variant.Ursu.374900 (B)"
  455.            
  456.            
  457.                 "SentinelOne": "DFI - Malicious PE"
  458.            
  459.            
  460.                 "Cyren": "W32/Trojan.TDSD-8291"
  461.            
  462.            
  463.                 "Jiangmin": "Trojan.VBKrypt.dvqk"
  464.            
  465.            
  466.                 "Webroot": "W32.Trojan.Gen"
  467.            
  468.            
  469.                 "Avira": "HEUR/AGEN.1039155"
  470.            
  471.            
  472.                 "Antiy-AVL": "Trojan/Win32.VBKrypt"
  473.            
  474.            
  475.                 "Microsoft": "Trojan:Win32/Occamy.C"
  476.            
  477.            
  478.                 "ZoneAlarm": "Trojan.Win32.VBKrypt.aaexg"
  479.            
  480.            
  481.                 "GData": "Gen:Variant.Ursu.374900"
  482.            
  483.            
  484.                 "AhnLab-V3": "Malware/Win32.Generic.C3368820"
  485.            
  486.            
  487.                 "Acronis": "suspicious"
  488.            
  489.            
  490.                 "ALYac": "Gen:Variant.Ursu.374900"
  491.            
  492.            
  493.                 "MAX": "malware (ai score=100)"
  494.            
  495.            
  496.                 "Ad-Aware": "Gen:Variant.Ursu.374900"
  497.            
  498.            
  499.                 "Panda": "Trj/Genetic.gen"
  500.            
  501.            
  502.                 "TrendMicro-HouseCall": "TROJ_GEN.R011C0WH319"
  503.            
  504.            
  505.                 "Ikarus": "Trojan.Win32.Themida"
  506.            
  507.            
  508.                 "Fortinet": "W32/PossibleThreat"
  509.            
  510.            
  511.                 "AVG": "Win32:Trojan-gen"
  512.            
  513.            
  514.                 "Avast": "Win32:Trojan-gen"
  515.            
  516.            
  517.                 "CrowdStrike": "win/malicious_confidence_100% (W)"
  518.            
  519.            
  520.                 "Qihoo-360": "Win32/Trojan.ee7"
  521.            
  522.        
  523.    
  524.    
  525.         "Description": "Checks the version of Bios, possibly for anti-virtualization",
  526.         "Details":
  527.    
  528.    
  529.         "Description": "Checks the CPU name from registry, possibly for anti-virtualization",
  530.         "Details":
  531.    
  532.    
  533.         "Description": "Detects VirtualBox using ACPI tricks",
  534.         "Details":
  535.    
  536.    
  537.         "Description": "Detects VirtualBox through the presence of a registry key",
  538.         "Details":
  539.    
  540.    
  541.         "Description": "Attempts to modify proxy settings",
  542.         "Details":
  543.    
  544.    
  545.         "Description": "Creates a copy of itself",
  546.         "Details":
  547.            
  548.                 "copy": "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE"
  549.            
  550.        
  551.    
  552.    
  553.         "Description": "Anomalous binary characteristics",
  554.         "Details":
  555.            
  556.                 "anomaly": "Unprintable characters found in section name"
  557.            
  558.            
  559.                 "anomaly": "Actual checksum does not match that reported in PE header"
  560.            
  561.        
  562.    
  563.    
  564.         "Description": "Clears web history",
  565.         "Details":
  566.            
  567.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@doubleclick1.txt"
  568.            
  569.            
  570.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@advertising1.txt"
  571.            
  572.            
  573.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.bing2.txt"
  574.            
  575.            
  576.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.google1.txt"
  577.            
  578.            
  579.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google5.txt"
  580.            
  581.            
  582.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google4.txt"
  583.            
  584.            
  585.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@msn1.txt"
  586.            
  587.            
  588.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google1.txt"
  589.            
  590.            
  591.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.msn2.txt"
  592.            
  593.            
  594.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.msn2.txt"
  595.            
  596.            
  597.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@media2.txt"
  598.            
  599.            
  600.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@3lift1.txt"
  601.            
  602.            
  603.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google3.txt"
  604.            
  605.            
  606.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@bing2.txt"
  607.            
  608.            
  609.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@atwola2.txt"
  610.            
  611.            
  612.                 "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@scorecardresearch2.txt"
  613.            
  614.        
  615.    
  616.  
  617.  
  618. * Started Service:
  619.     "msiserver"
  620.  
  621.  
  622. * Mutexes:
  623.     "DBWinMutex",
  624.     "CicLoadWinStaWinSta0",
  625.     "Local\\MSCTF.CtfMonitorInstMutexDefault1",
  626.     "Local\\_!MSFTHISTORY!_",
  627.     "Local\\c:!users!user!appdata!local!microsoft!windows!temporary internet files!content.ie5!",
  628.     "Local\\c:!users!user!appdata!roaming!microsoft!windows!cookies!",
  629.     "Local\\c:!users!user!appdata!local!microsoft!windows!history!history.ie5!",
  630.     "Local\\ZonesCounterMutex",
  631.     "Local\\ZoneAttributeCacheCounterMutex",
  632.     "Local\\ZonesCacheCounterMutex",
  633.     "Local\\ZonesLockedCacheCounterMutex",
  634.     "Local\\WininetStartupMutex",
  635.     "Local\\WininetConnectionMutex",
  636.     "Local\\WininetProxyRegistryMutex",
  637.     "Local\\!IETld!Mutex",
  638.     "SetupWatson_Mutex_Name",
  639.     "Global\\MSILOG_50cd82201d551dftxt.3F42ISMtsidercv_dd_pmeT_lacoL_ataDppA_ubs_sresU_:C",
  640.     "Global\\_MSIExecute",
  641.     "Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511",
  642.     "Local\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000"
  643.  
  644.  
  645. * Modified Files:
  646.     "\\??\\SICE",
  647.     "\\??\\SIWVID",
  648.     "\\??\\NTICE",
  649.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DF560BAB02A4B45C6C.TMP",
  650.     "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE",
  651.     "\\??\\PIPE\\samr",
  652.     "C:\\Windows\\sysnative\\wbem\\repository\\WRITABLE.TST",
  653.     "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING1.MAP",
  654.     "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING2.MAP",
  655.     "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING3.MAP",
  656.     "C:\\Windows\\sysnative\\wbem\\repository\\OBJECTS.DATA",
  657.     "C:\\Windows\\sysnative\\wbem\\repository\\INDEX.BTR",
  658.     "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER",
  659.     "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2PROVIDERSUBSYSTEM",
  660.     "\\??\\WMIDataDevice",
  661.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DF302B61B80449B774.TMP",
  662.     "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE",
  663.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DFAC6AAA63189082AC.TMP",
  664.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
  665.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
  666.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
  667.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl1",
  668.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl2",
  669.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate1",
  670.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\errorPageStrings1",
  671.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate2",
  672.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\errorPageStrings1",
  673.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts1",
  674.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts2",
  675.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\background_gradient1",
  676.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\info_481",
  677.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\background_gradient1",
  678.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\info_481",
  679.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\bullet1",
  680.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\bullet1",
  681.     "C:\\Users\\user\\AppData\\Local\\Temp\\D0EE.tmp",
  682.     "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04",
  683.     "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04",
  684.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\vcredist_x861.exe",
  685.     "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE",
  686.     "C:\\323029f5b1c45432f6a6f0\\vc_red.cab",
  687.     "C:\\323029f5b1c45432f6a6f0\\vc_red.msi",
  688.     "C:\\323029f5b1c45432f6a6f0\\install.exe",
  689.     "C:\\323029f5b1c45432f6a6f0\\install.res.1033.dll",
  690.     "C:\\323029f5b1c45432f6a6f0\\install.res.1042.dll",
  691.     "C:\\323029f5b1c45432f6a6f0\\install.res.1041.dll",
  692.     "C:\\323029f5b1c45432f6a6f0\\install.res.1049.dll",
  693.     "C:\\323029f5b1c45432f6a6f0\\install.res.1040.dll",
  694.     "C:\\323029f5b1c45432f6a6f0\\install.res.1036.dll",
  695.     "C:\\323029f5b1c45432f6a6f0\\install.res.3082.dll",
  696.     "C:\\323029f5b1c45432f6a6f0\\install.res.1031.dll",
  697.     "C:\\323029f5b1c45432f6a6f0\\install.res.1028.dll",
  698.     "C:\\323029f5b1c45432f6a6f0\\install.res.2052.dll",
  699.     "C:\\323029f5b1c45432f6a6f0\\eula.1033.txt",
  700.     "C:\\323029f5b1c45432f6a6f0\\eula.1042.txt",
  701.     "C:\\323029f5b1c45432f6a6f0\\eula.1041.txt",
  702.     "C:\\323029f5b1c45432f6a6f0\\eula.1049.txt",
  703.     "C:\\323029f5b1c45432f6a6f0\\eula.1040.txt",
  704.     "C:\\323029f5b1c45432f6a6f0\\eula.1036.txt",
  705.     "C:\\323029f5b1c45432f6a6f0\\eula.3082.txt",
  706.     "C:\\323029f5b1c45432f6a6f0\\eula.1031.txt",
  707.     "C:\\323029f5b1c45432f6a6f0\\eula.1028.txt",
  708.     "C:\\323029f5b1c45432f6a6f0\\eula.2052.txt",
  709.     "C:\\323029f5b1c45432f6a6f0\\globdata.ini",
  710.     "C:\\323029f5b1c45432f6a6f0\\install.ini",
  711.     "C:\\323029f5b1c45432f6a6f0\\vcredist.bmp",
  712.     "C:\\323029f5b1c45432f6a6f0\\$shtdwn$.req",
  713.     "C:\\Users\\user\\AppData\\Local\\Temp\\dd_vcredistUI24F3.txt",
  714.     "C:\\Users\\user\\AppData\\Local\\Temp\\dd_vcredistMSI24F3.txt",
  715.     "C:\\Windows\\Installer\\ad8bf6.msi",
  716.     "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9",
  717.     "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9",
  718.     "C:\\Windows\\Installer\\ad8bf8.ipi",
  719.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DFB59EF6A74D0A5A30.TMP",
  720.     "C:\\Windows\\Installer\\MSIFD21.tmp",
  721.     "C:\\Config.Msi\\ad8bf9.rbs",
  722.     "C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll",
  723.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\atl90.dll",
  724.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1.cat",
  725.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095450873.0\\9.0.21022.8.cat",
  726.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2.cat",
  727.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943.cat",
  728.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03.cat",
  729.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095522942.0\\9.0.30729.1.cat",
  730.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095527705.0\\9.0.30729.1.cat",
  731.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095533085.0\\9.0.30729.1.cat",
  732.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1.manifest",
  733.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2.manifest",
  734.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943.manifest",
  735.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03.manifest",
  736.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfc90.dll",
  737.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90chs.dll",
  738.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90cht.dll",
  739.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90deu.dll",
  740.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90enu.dll",
  741.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90esn.dll",
  742.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90esp.dll",
  743.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90fra.dll",
  744.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90ita.dll",
  745.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90jpn.dll",
  746.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90kor.dll",
  747.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90rus.dll",
  748.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfc90u.dll",
  749.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfcm90.dll",
  750.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfcm90u.dll",
  751.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095522942.0\\9.0.30729.1.policy",
  752.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095527705.0\\9.0.30729.1.policy",
  753.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095533085.0\\9.0.30729.1.policy",
  754.     "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\vcomp90.dll",
  755.     "C:\\Windows\\Installer\\ad8bfa.msi"
  756.  
  757.  
  758. * Deleted Files:
  759.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DF560BAB02A4B45C6C.TMP",
  760.     "C:\\Users\\user\\AppData\\Local\\Temp\\Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  761.     "C:\\Users\\user\\AppData\\Local\\Temp\\~DF302B61B80449B774.TMP",
  762.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUGNux1.jpg",
  763.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUOpgu1.jpg",
  764.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBMngoJ1.jpg",
  765.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBiwNf1.png",
  766.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSigw31.jpg",
  767.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\layout1",
  768.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUDFrs1.jpg",
  769.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBBFV0f1.png",
  770.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBCYr3U1.png",
  771.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BB2bztB1.png",
  772.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAkgetg1.png",
  773.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\chrome1.htm",
  774.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\noConnect1",
  775.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAaeOki2.png",
  776.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUxPW21.jpg",
  777.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURh6A1.jpg",
  778.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBJ3XCJ1.png",
  779.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOBJn1.jpg",
  780.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBULJgM1.jpg",
  781.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQzQr1.jpg",
  782.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\masthead_left1",
  783.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUgfJ21.jpg",
  784.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUGEWC1.jpg",
  785.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBz3ebk1.png",
  786.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUMHuq1.jpg",
  787.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQFzQ1.jpg",
  788.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\fallback.v2.min1.js",
  789.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\licensechange1",
  790.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBAq91.png",
  791.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA36Tom1.png",
  792.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUJIfE1.jpg",
  793.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURuCL1.jpg",
  794.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\055643067C21678412144E247D39664A1.gif",
  795.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon3.ico",
  796.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\progress_bg_right1",
  797.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUE38v1.jpg",
  798.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAyx79e1.png",
  799.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQtce1.jpg",
  800.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\google-play-download1.png",
  801.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUREuA1.jpg",
  802.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBPMoha1.png",
  803.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURaQ72.jpg",
  804.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMGEu1.jpg",
  805.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUA5Vm1.png",
  806.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURGfg1.jpg",
  807.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURFFy1.jpg",
  808.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURGb41.png",
  809.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAywOab1.png",
  810.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUnN4f1.jpg",
  811.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUN5vs1.jpg",
  812.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\googlelogo_white_background_color_272x92dp1.png",
  813.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\masthead_fill1",
  814.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\burp1.htm",
  815.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURn3B1.jpg",
  816.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AA3l39h1.png",
  817.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPTbo1.jpg",
  818.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\benefits-icon-shield1.jpg",
  819.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\app-store-download1.png",
  820.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\Java3BillDevices_EN1",
  821.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUR9or1.jpg",
  822.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\chartbeat1.js",
  823.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMJC01.jpg",
  824.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBtOBsY1.png",
  825.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAAluHw1.jpg",
  826.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\config1.js",
  827.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURCTz1.jpg",
  828.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURHbv1.jpg",
  829.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\a0348fbc1.js",
  830.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\icon-fb1.jpg",
  831.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\icon-help1.jpg",
  832.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\5a-43cadc-8a01ca321.txt",
  833.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAywufo1.png",
  834.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBTBfNg1.png",
  835.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTAEer1.jpg",
  836.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBMweEa1.jpg",
  837.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUeHe31.jpg",
  838.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress_fg_left1",
  839.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate1",
  840.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQ6UG1.jpg",
  841.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPriM1.jpg",
  842.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQSyB2.jpg",
  843.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\burp1.htm",
  844.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUP0Tp1.jpg",
  845.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBU3vgM1.jpg",
  846.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\5a-43cadc-8a01ca321.txt",
  847.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\URRYV-HX35J-LK4WZ-4TRKG-NBMKC1",
  848.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAyxfDD1.png",
  849.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\devices1.png",
  850.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\progress_bg_left1",
  851.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDSPS1.jpg",
  852.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBweSeT1.jpg",
  853.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAA8PBm1.png",
  854.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAvNCcs1.png",
  855.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSzCzH1.png",
  856.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\f1.txt",
  857.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon1.ico",
  858.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDFsN1.jpg",
  859.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUBICX1.jpg",
  860.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURs1F1.jpg",
  861.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURCTz1.jpg",
  862.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQUJ21.jpg",
  863.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\layout1",
  864.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress_en1",
  865.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAlQCaw1.jpg",
  866.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA6pevu1.png",
  867.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUwTzH1.jpg",
  868.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BB1lb5v1.png",
  869.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOiYo1.jpg",
  870.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAzME7S1.png",
  871.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBiuMZc1.png",
  872.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BB5a8e71.png",
  873.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAyXiwM1.png",
  874.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURvqq1.jpg",
  875.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\CAONNZV6.log",
  876.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\views1",
  877.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\l10n1",
  878.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUOGdK1.jpg",
  879.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\httpErrorPagesScripts1",
  880.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\complete_en1",
  881.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMwtY1.jpg",
  882.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAgi0nZ1.png",
  883.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQPvC1.jpg",
  884.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\rtutils1",
  885.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\common1",
  886.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURK2V1.jpg",
  887.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBTeGGL1.jpg",
  888.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUDRpQ1.jpg",
  889.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURPj91.jpg",
  890.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURuzZ1.jpg",
  891.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAA15Zd1.png",
  892.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBweSeT2.jpg",
  893.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\gap2",
  894.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURAO51.jpg",
  895.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUDYUu1.png",
  896.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTVBUS1.jpg",
  897.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\hero-back-mobile1.jpg",
  898.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURw7P1.jpg",
  899.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUNbnV2.jpg",
  900.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AApevLf1.png",
  901.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\benefits-icon-world1.jpg",
  902.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\host2",
  903.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\progress_fg_right1",
  904.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPB3k1.jpg",
  905.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURK4a1.jpg",
  906.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURhqo1.jpg",
  907.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUBoT52.jpg",
  908.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\invalidcert1",
  909.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQtce1.jpg",
  910.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBnGKDa1.png",
  911.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUvisf1.png",
  912.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\async_usersync1.htm",
  913.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\fwlink1.htm",
  914.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUxGVI1.jpg",
  915.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\invalidcert1",
  916.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress1",
  917.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\progress_bg_fill1",
  918.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\complete1",
  919.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\red_shield1",
  920.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\burp1.htm",
  921.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPpCJ1.jpg",
  922.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBSGe1V1.png",
  923.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUtSB21.jpg",
  924.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQCC02.jpg",
  925.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\nav_logo2291.png",
  926.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\fallback.v2.min1.css",
  927.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\progress_fg_fill1",
  928.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQ28R2.jpg",
  929.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQzQr1.jpg",
  930.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURmU61.jpg",
  931.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAyHBki1.jpg",
  932.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURH531.jpg",
  933.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOO6P1.jpg",
  934.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUN0YM1.jpg",
  935.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-logo-one-color1.jpg",
  936.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\masthead_left1",
  937.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\invalidcert2",
  938.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\background_gradient_red1",
  939.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\adsWrapperMSNI1.js",
  940.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBReDbo1.png",
  941.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBjLpNF1.png",
  942.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAk0zNO1.jpg",
  943.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURw7P1.jpg",
  944.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURCDB1.jpg",
  945.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPxVV1.jpg",
  946.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBULOAp1.jpg",
  947.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBgjtLu1.png",
  948.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMLEB1.jpg",
  949.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\ga1.js",
  950.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\down1",
  951.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\foolge_com1.htm",
  952.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBS7DY21.jpg",
  953.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUJoMd1.jpg",
  954.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPeN31.jpg",
  955.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\download-bg-mobile1.svg",
  956.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBih5H1.png",
  957.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAxspu11.png",
  958.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBmSG0M1.jpg",
  959.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBienk91.png",
  960.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUFWLX1.jpg",
  961.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon1.ico",
  962.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURMSL1.jpg",
  963.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBULEUd1.jpg",
  964.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURuzZ1.jpg",
  965.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURFFy1.jpg",
  966.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUR6JC2.jpg",
  967.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\ast1.js",
  968.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\autotrack1.js",
  969.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\e151e51.gif",
  970.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBbyo1E1.png",
  971.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA3lldo1.png",
  972.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTeWQu1.jpg",
  973.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUONWd1.jpg",
  974.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBLFv5R1.png",
  975.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPby61.jpg",
  976.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BByCIyx1.png",
  977.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon3.ico",
  978.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBTOvML1.png",
  979.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAgymO61.png",
  980.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURx4L1.jpg",
  981.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA6oGHJ1.png",
  982.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google_com1.htm",
  983.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\chrome_throbber_fast1.gif",
  984.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\common1",
  985.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\welcome1",
  986.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUB9jR1.jpg",
  987.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBRPdL81.jpg",
  988.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAywGC01.png",
  989.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPxiN1.jpg",
  990.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUvpML1.png",
  991.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\font1.css",
  992.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\host1",
  993.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\auwelcome1",
  994.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUCKRK1.jpg",
  995.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUM34w1.jpg",
  996.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSHLM31.jpg",
  997.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\thank-you-animation1.png",
  998.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\auwelcome_en1",
  999.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\errorPageStrings2",
  1000.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\buro1.htm",
  1001.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBu5I1K1.png",
  1002.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBCleeG2.png",
  1003.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURw8g1.jpg",
  1004.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMvYi1.jpg",
  1005.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQh9J1.jpg",
  1006.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTl7Lq1.jpg",
  1007.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPQB81.jpg",
  1008.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\chrome_desktop1.png",
  1009.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\icon-twitter1.jpg",
  1010.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\benefits-icon-search1.jpg",
  1011.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAyxkRJ1.png",
  1012.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUIDWt1.jpg",
  1013.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAgnIPB1.png",
  1014.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\runtime1",
  1015.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\licensechange_en1",
  1016.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUMLNA1.jpg",
  1017.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAkyOZy1.png",
  1018.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\gtm1.js",
  1019.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\runtime1",
  1020.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\red_shield_481",
  1021.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUOqtT1.jpg",
  1022.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\welcome_en1",
  1023.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\check1",
  1024.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\jquery-1.11.1.min1.js",
  1025.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUPEdB1.jpg",
  1026.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAexRGq1.png",
  1027.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAvcS6D1.png",
  1028.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAmRWGB1.png",
  1029.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\tools1",
  1030.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQsBl1.jpg",
  1031.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\search1.htm",
  1032.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\modernizr1.js",
  1033.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\connected_desktop1.png",
  1034.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\favicon1.ico",
  1035.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURMlT1.jpg",
  1036.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBACPiN1.png",
  1037.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA6Q14t1.jpg",
  1038.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA3eozz1.png",
  1039.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA3ltd81.png",
  1040.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAmogYR1.png",
  1041.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favcenter1",
  1042.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQj6i1.jpg",
  1043.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUCvZK1.jpg",
  1044.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPeDe1.jpg",
  1045.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\font1.css",
  1046.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\green_shield1",
  1047.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon2.ico",
  1048.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\main.v2.min1.css",
  1049.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\background_gradient1",
  1050.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURG1Q1.jpg",
  1051.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA3HAHV1.png",
  1052.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA565dd1.png",
  1053.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAywHbG1.png",
  1054.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBiNnLK1.png",
  1055.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBQurOb1.jpg",
  1056.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDFvK1.jpg",
  1057.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBULhNs1.jpg",
  1058.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURJ4j1.jpg",
  1059.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon2.ico",
  1060.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\burp2.htm",
  1061.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\cd93661.eot",
  1062.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAfZ6og1.png",
  1063.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAAAFjj2.png",
  1064.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTOD5k1.png",
  1065.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\rs=ACT90oHxP-1wbzaSxZq31U3_PsI-6G7qSA1",
  1066.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\dnserror1",
  1067.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMU351.jpg",
  1068.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUE92F1.png",
  1069.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\installer.min1.js",
  1070.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTw0cA1.png",
  1071.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMNVw1.jpg",
  1072.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQSyB1.jpg",
  1073.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAsvT3F1.png",
  1074.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\92-b7b846-86e270321",
  1075.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQCC01.jpg",
  1076.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTX9Tl1.jpg",
  1077.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQGj11.jpg",
  1078.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-play-download1.jpg",
  1079.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\masthead_fill1",
  1080.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQh9J1.jpg",
  1081.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUwVjk1.jpg",
  1082.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUR6JC1.jpg",
  1083.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQsBl1.jpg",
  1084.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUDzuP1.jpg",
  1085.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURBJY1.jpg",
  1086.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURCih1.jpg",
  1087.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\views1",
  1088.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURfVz1.jpg",
  1089.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\dbab-mobile1.jpg",
  1090.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\benefits-icon-fast1.jpg",
  1091.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\cursor-replay1.bmp",
  1092.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUDEOH1.jpg",
  1093.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\chrome-logo1.svg",
  1094.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-logo1.jpg",
  1095.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\app-store-download1.jpg",
  1096.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\l10n1",
  1097.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\92-b7b846-86e270322",
  1098.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\chrome-logo1.png",
  1099.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURGks1.jpg",
  1100.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\rs=ACT90oFGNBhiXJs06Tqt0W67rbKcqFNTAw1",
  1101.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\font1.css",
  1102.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\icon-x1.jpg",
  1103.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAqsfdG1.png",
  1104.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\92-b7b846-86e270321",
  1105.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\url1.htm",
  1106.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\rtutils1",
  1107.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\save_password_desktop1.png",
  1108.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\translate_desktop1.png",
  1109.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\icon-youtube1.jpg",
  1110.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\thank-you1.htm",
  1111.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@bing2.txt",
  1112.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google1.txt",
  1113.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google5.txt",
  1114.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@scorecardresearch2.txt",
  1115.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.msn2.txt",
  1116.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.bing2.txt",
  1117.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.google1.txt",
  1118.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@atwola2.txt",
  1119.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@3lift1.txt",
  1120.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@doubleclick1.txt",
  1121.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@msn1.txt",
  1122.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google4.txt",
  1123.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.msn2.txt",
  1124.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@advertising1.txt",
  1125.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google3.txt",
  1126.     "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@media2.txt",
  1127.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl1",
  1128.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\errorPageStrings1",
  1129.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts1",
  1130.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\info_481",
  1131.     "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\bullet1",
  1132.     "C:\\Users\\user\\AppData\\Local\\Temp\\D0EE.tmp",
  1133.     "C:\\Windows\\Installer\\ad8bf8.ipi",
  1134.     "C:\\Config.Msi\\MSI186A.tmp",
  1135.     "C:\\Config.Msi",
  1136.     "C:\\Windows\\Installer\\ad8bfa.msi"
  1137.  
  1138.  
  1139. * Modified Registry Keys:
  1140.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\LastServiceStart",
  1141.     "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Wbem\\Transports\\Decoupled\\Server",
  1142.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\CreationTime",
  1143.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\MarshaledProxy",
  1144.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\ProcessIdentifier",
  1145.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\ConfigValueEssNeedsLoading",
  1146.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\List of event-active namespaces",
  1147.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\ESS\\//./root/CIMV2\\SCM Event Provider",
  1148.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\UNCAsIntranet",
  1149.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\AutoDetect",
  1150.     "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\C8B5715E_RASAPI32",
  1151.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\EnableFileTracing",
  1152.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\EnableConsoleTracing",
  1153.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\FileTracingMask",
  1154.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\ConsoleTracingMask",
  1155.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\MaxFileSize",
  1156.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\FileDirectory",
  1157.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable",
  1158.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyServer",
  1159.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings",
  1160.     "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager",
  1161.     "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000",
  1162.     "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\Owner",
  1163.     "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\SessionHash",
  1164.     "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\Sequence",
  1165.     "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\InProgress",
  1166.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\InProgress\\(Default)",
  1167.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Folders\\c:\\Config.Msi\\",
  1168.     "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts",
  1169.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts\\c:\\Config.Msi\\ad8bf9.rbs",
  1170.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts\\c:\\Config.Msi\\ad8bf9.rbsLow",
  1171.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA5D9C68C00F12943B2F6CA09FE28244",
  1172.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA5D9C68C00F12943B2F6CA09FE28244\\D20352A90C039D93DBF6126ECE614057",
  1173.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DDA695F96EBE974FAAE0D63A6F7BE67",
  1174.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DDA695F96EBE974FAAE0D63A6F7BE67\\D20352A90C039D93DBF6126ECE614057",
  1175.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A771E8EB1E10BCE44AA8014E39DCC206",
  1176.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll",
  1177.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A771E8EB1E10BCE44AA8014E39DCC206\\D20352A90C039D93DBF6126ECE614057",
  1178.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D2B3EF2522FB0693FA4336E05E3EE623",
  1179.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D2B3EF2522FB0693FA4336E05E3EE623\\D20352A90C039D93DBF6126ECE614057",
  1180.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5FAA65EA0C3FB4D388951A5EA0E372FB",
  1181.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5FAA65EA0C3FB4D388951A5EA0E372FB\\D20352A90C039D93DBF6126ECE614057",
  1182.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6E5749FF32D22E334AADA52C638EE202",
  1183.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6E5749FF32D22E334AADA52C638EE202\\D20352A90C039D93DBF6126ECE614057",
  1184.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\58E5A2495BC8DC53B8B9416C9DCD30D0",
  1185.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\58E5A2495BC8DC53B8B9416C9DCD30D0\\D20352A90C039D93DBF6126ECE614057",
  1186.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\69F8E9220EA16E2348822DBCAC217204",
  1187.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\69F8E9220EA16E2348822DBCAC217204\\D20352A90C039D93DBF6126ECE614057",
  1188.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D78B2F612F88EF5329150B96F703BDB9",
  1189.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D78B2F612F88EF5329150B96F703BDB9\\D20352A90C039D93DBF6126ECE614057",
  1190.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B121D1754691A29369A50091D3A51E1A\\D20352A90C039D93DBF6126ECE614057",
  1191.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057",
  1192.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\909E59FB5F378733ABE9A56AB30732F0\\D20352A90C039D93DBF6126ECE614057",
  1193.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E22E976033B685437B6E78A79C856562\\D20352A90C039D93DBF6126ECE614057",
  1194.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\489285C3706753E33A733D3D72903715\\D20352A90C039D93DBF6126ECE614057",
  1195.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F74C83443EF904D34AF9EDBF71F48762\\D20352A90C039D93DBF6126ECE614057",
  1196.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D36A387FC01EF2F33B9CDB1C9FE8BDDC",
  1197.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D36A387FC01EF2F33B9CDB1C9FE8BDDC\\D20352A90C039D93DBF6126ECE614057",
  1198.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD834BCB1B20E23A96A6DAD28ECD979",
  1199.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD834BCB1B20E23A96A6DAD28ECD979\\D20352A90C039D93DBF6126ECE614057",
  1200.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E285BE69D65F4B3F83D8E11830483F1",
  1201.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E285BE69D65F4B3F83D8E11830483F1\\D20352A90C039D93DBF6126ECE614057",
  1202.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FCC01B60BAF4F3637A6C90A523BD3667",
  1203.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FCC01B60BAF4F3637A6C90A523BD3667\\D20352A90C039D93DBF6126ECE614057",
  1204.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A880436E76DD633495267B76A09C747",
  1205.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A880436E76DD633495267B76A09C747\\D20352A90C039D93DBF6126ECE614057",
  1206.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9166B4ED039A84439930ADDFB2752F5F",
  1207.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9166B4ED039A84439930ADDFB2752F5F\\D20352A90C039D93DBF6126ECE614057",
  1208.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CA8E8AC867D93C337A32F95688D8BE90",
  1209.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CA8E8AC867D93C337A32F95688D8BE90\\D20352A90C039D93DBF6126ECE614057",
  1210.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\10BB9476A37D3473E83136181DC18A8F",
  1211.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\10BB9476A37D3473E83136181DC18A8F\\D20352A90C039D93DBF6126ECE614057",
  1212.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F271DD6DEFFB195369723CE5A4356601",
  1213.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F271DD6DEFFB195369723CE5A4356601\\D20352A90C039D93DBF6126ECE614057",
  1214.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9884982C831F68D3CB5FF5B9BE77DA61",
  1215.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9884982C831F68D3CB5FF5B9BE77DA61\\D20352A90C039D93DBF6126ECE614057",
  1216.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C7CF67A49199C64339EA5C26D3462CA3",
  1217.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C7CF67A49199C64339EA5C26D3462CA3\\D20352A90C039D93DBF6126ECE614057",
  1218.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A3FC9C46D3D588B3BBBB5F5A009F7578",
  1219.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A3FC9C46D3D588B3BBBB5F5A009F7578\\D20352A90C039D93DBF6126ECE614057",
  1220.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA35D58AD6095C13693E2EB19B51E4C2",
  1221.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA35D58AD6095C13693E2EB19B51E4C2\\D20352A90C039D93DBF6126ECE614057",
  1222.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3F4F115D119AFC23CA11C979FE49B8CF",
  1223.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3F4F115D119AFC23CA11C979FE49B8CF\\D20352A90C039D93DBF6126ECE614057",
  1224.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF68F61B49DBAF0389AA71BA5EF44087",
  1225.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF68F61B49DBAF0389AA71BA5EF44087\\D20352A90C039D93DBF6126ECE614057",
  1226.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C01B6B82F14EB2036A37104F63245722",
  1227.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C01B6B82F14EB2036A37104F63245722\\D20352A90C039D93DBF6126ECE614057",
  1228.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75EC17D83CDB0B43DADAAEC4A5CF6946",
  1229.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75EC17D83CDB0B43DADAAEC4A5CF6946\\D20352A90C039D93DBF6126ECE614057",
  1230.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A891A946D91CF523FBA37CAE6EF2E56F",
  1231.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A891A946D91CF523FBA37CAE6EF2E56F\\D20352A90C039D93DBF6126ECE614057",
  1232.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4EE57BB6B8E2E3848AA4773134975546",
  1233.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4EE57BB6B8E2E3848AA4773134975546\\D20352A90C039D93DBF6126ECE614057",
  1234.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D72CFC1B540B9014C983F2B89EC0AD3A",
  1235.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D72CFC1B540B9014C983F2B89EC0AD3A\\D20352A90C039D93DBF6126ECE614057",
  1236.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9139CDB10A2211C458036000CA13F613",
  1237.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9139CDB10A2211C458036000CA13F613\\D20352A90C039D93DBF6126ECE614057",
  1238.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\298095F840DB82A4C997E3EE402B0B0D",
  1239.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\298095F840DB82A4C997E3EE402B0B0D\\D20352A90C039D93DBF6126ECE614057",
  1240.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1DBFA1B595D618049AFE66A3138BEBC3",
  1241.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1DBFA1B595D618049AFE66A3138BEBC3\\D20352A90C039D93DBF6126ECE614057",
  1242.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AC1BF68872161FB4C94C84F195523AB7",
  1243.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AC1BF68872161FB4C94C84F195523AB7\\D20352A90C039D93DBF6126ECE614057",
  1244.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CCCD3CF96BADF7E42A9468F29E623555",
  1245.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CCCD3CF96BADF7E42A9468F29E623555\\D20352A90C039D93DBF6126ECE614057",
  1246.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D44BDE8068B242B43963888890D3BA9B",
  1247.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D44BDE8068B242B43963888890D3BA9B\\D20352A90C039D93DBF6126ECE614057",
  1248.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\97486C5D001A175448A3E30BF3B775B3",
  1249.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\97486C5D001A175448A3E30BF3B775B3\\D20352A90C039D93DBF6126ECE614057",
  1250.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BFB8A0EA52A3591408D6120D165BAF11",
  1251.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BFB8A0EA52A3591408D6120D165BAF11\\D20352A90C039D93DBF6126ECE614057",
  1252.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A82B8DA21FCE4542840AD18154B6003",
  1253.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A82B8DA21FCE4542840AD18154B6003\\D20352A90C039D93DBF6126ECE614057",
  1254.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3FFF22A42C37CBB4DA2CC697237A99B9",
  1255.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3FFF22A42C37CBB4DA2CC697237A99B9\\D20352A90C039D93DBF6126ECE614057",
  1256.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\303FD3DF888283041A37A5688745D217",
  1257.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\303FD3DF888283041A37A5688745D217\\D20352A90C039D93DBF6126ECE614057",
  1258.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8267078178EFD2D43874621BFF124618",
  1259.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8267078178EFD2D43874621BFF124618\\D20352A90C039D93DBF6126ECE614057",
  1260.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BB9303D405CDB134CB30CD367AC97F2B",
  1261.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BB9303D405CDB134CB30CD367AC97F2B\\D20352A90C039D93DBF6126ECE614057",
  1262.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0E8D57C26BBC0BA4086B6AE65D820A79",
  1263.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0E8D57C26BBC0BA4086B6AE65D820A79\\D20352A90C039D93DBF6126ECE614057",
  1264.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6C131C196F822F5418614A704F514399",
  1265.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6C131C196F822F5418614A704F514399\\D20352A90C039D93DBF6126ECE614057",
  1266.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B5E445F6BDBA2B346B9FC57B7169F65B",
  1267.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B5E445F6BDBA2B346B9FC57B7169F65B\\D20352A90C039D93DBF6126ECE614057",
  1268.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BCB893E3BCA189C4B96FA7F49DC89DA5",
  1269.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BCB893E3BCA189C4B96FA7F49DC89DA5\\D20352A90C039D93DBF6126ECE614057",
  1270.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3CC3911F7FC23D948BF67404DA99F113",
  1271.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3CC3911F7FC23D948BF67404DA99F113\\D20352A90C039D93DBF6126ECE614057",
  1272.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E81E5FA91DB0274CBFA0C024E748E82",
  1273.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E81E5FA91DB0274CBFA0C024E748E82\\D20352A90C039D93DBF6126ECE614057",
  1274.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FA0CEFB36BB0E664381F5BCC75524D33",
  1275.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FA0CEFB36BB0E664381F5BCC75524D33\\D20352A90C039D93DBF6126ECE614057",
  1276.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53714D3915F0E734D9809C232714222E",
  1277.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53714D3915F0E734D9809C232714222E\\D20352A90C039D93DBF6126ECE614057",
  1278.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8477A35EABCAFE040A730AE47C57DEA2",
  1279.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8477A35EABCAFE040A730AE47C57DEA2\\D20352A90C039D93DBF6126ECE614057",
  1280.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\614A75AA111769C4BB8A6B8F035000B0",
  1281.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\614A75AA111769C4BB8A6B8F035000B0\\D20352A90C039D93DBF6126ECE614057",
  1282.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F1546C7E77B0CE34EADB0FEAE4DB0BC7",
  1283.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F1546C7E77B0CE34EADB0FEAE4DB0BC7\\D20352A90C039D93DBF6126ECE614057",
  1284.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Folders\\c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\",
  1285.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchGUID",
  1286.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\MediaCabinet",
  1287.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\File",
  1288.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\ComponentVersion",
  1289.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\ProductVersion",
  1290.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchSize",
  1291.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchAttributes",
  1292.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchSequence",
  1293.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\SharedComponent",
  1294.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\IsFullFile",
  1295.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\DevDiv\\VC\\Servicing\\9.0",
  1296.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\SP",
  1297.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\SPIndex",
  1298.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033",
  1299.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\Install",
  1300.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\InstallerType",
  1301.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SP",
  1302.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SPIndex",
  1303.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SPName"
  1304.  
  1305.  
  1306. * Deleted Registry Keys:
  1307.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProxyBypass",
  1308.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProxyBypass",
  1309.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\IntranetName",
  1310.     "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\IntranetName",
  1311.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyOverride",
  1312.     "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\AutoConfigURL"
  1313.  
  1314.  
  1315. * DNS Communications:
  1316.  
  1317. * Domains:
  1318.  
  1319. * Network Communication - ICMP:
  1320.  
  1321. * Network Communication - HTTP:
  1322.    
  1323.         "count": 1,
  1324.         "body": "",
  1325.         "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  1326.         "user-agent": "Microsoft-CryptoAPI/6.1",
  1327.         "method": "GET",
  1328.         "host": "ocsp.digicert.com",
  1329.         "version": "1.1",
  1330.         "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  1331.         "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1\r\nCache-Control: max-age = 148251\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 18:10:24 GMT\r\nIf-None-Match: \"5c8d3c10-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  1332.         "port": 80
  1333.    
  1334.    
  1335.         "count": 1,
  1336.         "body": "",
  1337.         "uri": "http://crl.microsoft.com/pki/crl/products/CSPCA.crl",
  1338.         "user-agent": "Microsoft-CryptoAPI/6.1",
  1339.         "method": "GET",
  1340.         "host": "crl.microsoft.com",
  1341.         "version": "1.1",
  1342.         "path": "/pki/crl/products/CSPCA.crl",
  1343.         "data": "GET /pki/crl/products/CSPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  1344.         "port": 80
  1345.    
  1346.  
  1347.  
  1348. * Network Communication - SMTP:
  1349.  
  1350. * Network Communication - Hosts:
  1351.  
  1352. * Network Communication - IRC:
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top