API tools faq
paste
Advertisement
paladin316

Exes_15c69380b7cf8feaa6f7a7033f10b4aa_dat_2019-08-13_14_30.txt

paladin316
Aug 13th, 2019
1,385
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 99.53 KB | None | 0 0
raw download clone embed print report
  1.  
  2. * MalFamily: ""
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat"
  7. * File Size: 3678208
  8. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. * SHA256: "ddcbf8e3742691aafda428a017093e6669384114277612adbcfa53b4ff2dfcd1"
  10. * MD5: "15c69380b7cf8feaa6f7a7033f10b4aa"
  11. * SHA1: "b38c61a435497cac63d481263f879773c14c3ce5"
  12. * SHA512: "e545859e1f4c2ada01ef9882ba6fb08b79a19366ccdf0cad35b35d6276ef4f7e3cf7a85a3cfd1f5c22ea2a67ee0765c7246afa0646dcb5c9dec6feb22afa21b3"
  13. * CRC32: "CA9CD83A"
  14. * SSDEEP: "49152:OLcfG4kBKPqEoCO3AdTEWP5aJNKl8mfBqeoEvRLSJRlshktcoXQWwAPmZXP8ONR:HSBKrLylzNKhToEgJcaPmZ/fNR"
  15.  
  16. * Process Execution:
  17. "Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  18. "EDD86EDC.EXE",
  19. "C8B5715E.EXE",
  20. "VC2008.EXE",
  21. "install.exe",
  22. "services.exe",
  23. "svchost.exe",
  24. "WmiPrvSE.exe",
  25. "svchost.exe",
  26. "msiexec.exe"
  27.  
  28.  
  29. * Executed Commands:
  30. "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE C:\\Users\\user\\AppData\\Local\\Temp\\Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  31. "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding",
  32. "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE ",
  33. "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE /Q",
  34. "c:\\323029f5b1c45432f6a6f0\\.\\install.exe /Q",
  35. "C:\\Windows\\system32\\msiexec.exe /V"
  36.  
  37.  
  38. * Signatures Detected:
  39.  
  40. "Description": "Attempts to connect to a dead IP:Port (3 unique times)",
  41. "Details":
  42.  
  43. "IP": "184.28.188.250:80"
  44.  
  45.  
  46. "IP": "23.208.142.202:443"
  47.  
  48.  
  49. "IP": "72.21.91.29:80"
  50.  
  51.  
  52.  
  53.  
  54. "Description": "Creates RWX memory",
  55. "Details":
  56.  
  57.  
  58. "Description": "A process attempted to delay the analysis task.",
  59. "Details":
  60.  
  61. "Process": "WmiPrvSE.exe tried to sleep 363 seconds, actually delayed analysis time by 0 seconds"
  62.  
  63.  
  64.  
  65.  
  66. "Description": "At least one IP Address, Domain, or File Name was found in a crypto call",
  67. "Details":
  68.  
  69. "ioc": "3.1b"
  70.  
  71.  
  72. "ioc": "9.zq"
  73.  
  74.  
  75. "ioc": "0.yk"
  76.  
  77.  
  78. "ioc": "r.bn"
  79.  
  80.  
  81. "ioc": "b.c8"
  82.  
  83.  
  84. "ioc": "t.31"
  85.  
  86.  
  87. "ioc": "x.x7V"
  88.  
  89.  
  90. "ioc": "6.va0"
  91.  
  92.  
  93. "ioc": "l.53"
  94.  
  95.  
  96. "ioc": "-.4a"
  97.  
  98.  
  99. "ioc": "q.za"
  100.  
  101.  
  102. "ioc": "32.dll"
  103.  
  104.  
  105.  
  106.  
  107. "Description": "Expresses interest in specific running processes",
  108. "Details":
  109.  
  110. "process": "System"
  111.  
  112.  
  113.  
  114.  
  115. "Description": "Reads data out of its own binary image",
  116. "Details":
  117.  
  118. "self_read": "process: Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat, pid: 1532, offset: 0x00000000, length: 0x00380000"
  119.  
  120.  
  121. "self_read": "process: EDD86EDC.EXE, pid: 1200, offset: 0x00000000, length: 0x00380000"
  122.  
  123.  
  124. "self_read": "process: C8B5715E.EXE, pid: 896, offset: 0x00000000, length: 0x001a0000"
  125.  
  126.  
  127. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00000000, length: 0x000000f8"
  128.  
  129.  
  130. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000000c8, length: 0x000000f8"
  131.  
  132.  
  133. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009600, length: 0x0000013c"
  134.  
  135.  
  136. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009647, length: 0x00000110"
  137.  
  138.  
  139. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009662, length: 0x00000110"
  140.  
  141.  
  142. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009680, length: 0x00000110"
  143.  
  144.  
  145. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096a7, length: 0x00000110"
  146.  
  147.  
  148. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096ce, length: 0x00000110"
  149.  
  150.  
  151. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000096f5, length: 0x00000110"
  152.  
  153.  
  154. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x0000971c, length: 0x00000110"
  155.  
  156.  
  157. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009743, length: 0x00000110"
  158.  
  159.  
  160. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x0000976a, length: 0x00000110"
  161.  
  162.  
  163. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009791, length: 0x00000110"
  164.  
  165.  
  166. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000097b8, length: 0x00000110"
  167.  
  168.  
  169. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000097df, length: 0x00000110"
  170.  
  171.  
  172. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009806, length: 0x00000110"
  173.  
  174.  
  175. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009826, length: 0x00000110"
  176.  
  177.  
  178. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009846, length: 0x00000110"
  179.  
  180.  
  181. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009866, length: 0x00000110"
  182.  
  183.  
  184. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009886, length: 0x00000110"
  185.  
  186.  
  187. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098a6, length: 0x00000110"
  188.  
  189.  
  190. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098c6, length: 0x00000110"
  191.  
  192.  
  193. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000098e6, length: 0x00000110"
  194.  
  195.  
  196. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009906, length: 0x00000110"
  197.  
  198.  
  199. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009926, length: 0x00000110"
  200.  
  201.  
  202. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009946, length: 0x00000110"
  203.  
  204.  
  205. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00009965, length: 0x00000010"
  206.  
  207.  
  208. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x000099a2, length: 0x003f99d2"
  209.  
  210.  
  211. "self_read": "process: VC2008.EXE, pid: 2644, offset: 0x00403400, length: 0x00002408"
  212.  
  213.  
  214.  
  215.  
  216. "Description": "Drops a binary and executes it",
  217. "Details":
  218.  
  219. "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE"
  220.  
  221.  
  222. "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE"
  223.  
  224.  
  225. "binary": "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE"
  226.  
  227.  
  228. "binary": "C:\\323029f5b1c45432f6a6f0\\install.exe"
  229.  
  230.  
  231.  
  232.  
  233. "Description": "Performs some HTTP requests",
  234. "Details":
  235.  
  236. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D"
  237.  
  238.  
  239.  
  240.  
  241. "Description": "The binary likely contains encrypted or compressed data.",
  242. "Details":
  243.  
  244. "section": "name: \\x00 , entropy: 7.88, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00010000, virtual_size: 0x00058000"
  245.  
  246.  
  247. "section": "name: .rsrc, entropy: 7.99, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x001a8000, virtual_size: 0x001c397c"
  248.  
  249.  
  250. "section": "name: eozvwjpz, entropy: 7.85, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x001c3000, virtual_size: 0x001c3000"
  251.  
  252.  
  253. "section": "name: anxggeuo, entropy: 7.71, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00001000, virtual_size: 0x00001000"
  254.  
  255.  
  256.  
  257.  
  258. "Description": "Detects Sandboxie through the presence of a library",
  259. "Details":
  260.  
  261.  
  262. "Description": "Deletes its original binary from disk",
  263. "Details":
  264.  
  265.  
  266. "Description": "Tries to suspend Cuckoo threads to prevent logging of malicious activity",
  267. "Details":
  268.  
  269. "Process": "C8B5715E.EXE (896)"
  270.  
  271.  
  272.  
  273.  
  274. "Description": "Checks for the presence of known windows from debuggers and forensic tools",
  275. "Details":
  276.  
  277. "Window": "OLLYDBG"
  278.  
  279.  
  280. "Window": "GBDYLLO"
  281.  
  282.  
  283. "Window": "pediy06"
  284.  
  285.  
  286. "Window": "FilemonClass"
  287.  
  288.  
  289. "Window": "File Monitor - Sysinternals: www.sysinternals.com"
  290.  
  291.  
  292. "Window": "PROCMON_WINDOW_CLASS"
  293.  
  294.  
  295. "Window": "Process Monitor - Sysinternals: www.sysinternals.com"
  296.  
  297.  
  298. "Window": "RegmonClass"
  299.  
  300.  
  301. "Window": "Registry Monitor - Sysinternals: www.sysinternals.com"
  302.  
  303.  
  304. "Window": "18467-41"
  305.  
  306.  
  307. "Window": "OLLYDBG"
  308.  
  309.  
  310. "Window": "GBDYLLO"
  311.  
  312.  
  313. "Window": "pediy06"
  314.  
  315.  
  316. "Window": "FilemonClass"
  317.  
  318.  
  319. "Window": "File Monitor - Sysinternals: www.sysinternals.com"
  320.  
  321.  
  322. "Window": "PROCMON_WINDOW_CLASS"
  323.  
  324.  
  325. "Window": "Process Monitor - Sysinternals: www.sysinternals.com"
  326.  
  327.  
  328. "Window": "RegmonClass"
  329.  
  330.  
  331. "Window": "Registry Monitor - Sysinternals: www.sysinternals.com"
  332.  
  333.  
  334. "Window": "18467-41"
  335.  
  336.  
  337.  
  338.  
  339. "Description": "Attempts to repeatedly call a single API many times in order to delay analysis time",
  340. "Details":
  341.  
  342. "Spam": "services.exe (504) called API GetSystemTimeAsFileTime 18087090 times"
  343.  
  344.  
  345.  
  346.  
  347. "Description": "The following process appear to have been packed with Themida: Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat, EDD86EDC.EXE",
  348. "Details":
  349.  
  350.  
  351. "Description": "Creates a hidden or system file",
  352. "Details":
  353.  
  354. "file": "C:\\323029f5b1c45432f6a6f0\\$shtdwn$.req"
  355.  
  356.  
  357. "file": "C:\\Windows\\Installer\\"
  358.  
  359.  
  360. "file": "C:\\Config.Msi\\"
  361.  
  362.  
  363.  
  364.  
  365. "Description": "Checks for the presence of known devices from debuggers and forensic tools",
  366. "Details":
  367.  
  368.  
  369. "Description": "Detects the presence of Wine emulator via registry key",
  370. "Details":
  371.  
  372.  
  373. "Description": "File has been identified by 49 Antiviruses on VirusTotal as malicious",
  374. "Details":
  375.  
  376. "MicroWorld-eScan": "Gen:Variant.Ursu.374900"
  377.  
  378.  
  379. "CAT-QuickHeal": "Trojan.VBKrypt"
  380.  
  381.  
  382. "McAfee": "Artemis!15C69380B7CF"
  383.  
  384.  
  385. "Cylance": "Unsafe"
  386.  
  387.  
  388. "K7AntiVirus": "Riskware ( 0040eff71 )"
  389.  
  390.  
  391. "Alibaba": "Trojan:Win32/VBKrypt.80f489d8"
  392.  
  393.  
  394. "K7GW": "Riskware ( 0040eff71 )"
  395.  
  396.  
  397. "Cybereason": "malicious.0b7cf8"
  398.  
  399.  
  400. "Arcabit": "Trojan.Ursu.D5B874"
  401.  
  402.  
  403. "TrendMicro": "TROJ_GEN.R011C0WH319"
  404.  
  405.  
  406. "Symantec": "ML.Attribute.HighConfidence"
  407.  
  408.  
  409. "ESET-NOD32": "a variant of Win32/Packed.Themida.AJJ"
  410.  
  411.  
  412. "APEX": "Malicious"
  413.  
  414.  
  415. "Paloalto": "generic.ml"
  416.  
  417.  
  418. "Kaspersky": "Trojan.Win32.VBKrypt.aaexg"
  419.  
  420.  
  421. "BitDefender": "Gen:Variant.Ursu.374900"
  422.  
  423.  
  424. "NANO-Antivirus": "Trojan.Win32.VBKrypt.fuuodt"
  425.  
  426.  
  427. "AegisLab": "Trojan.Win32.VBKrypt.4!c"
  428.  
  429.  
  430. "Endgame": "malicious (high confidence)"
  431.  
  432.  
  433. "Sophos": "Mal/Generic-S"
  434.  
  435.  
  436. "F-Secure": "Heuristic.HEUR/AGEN.1039155"
  437.  
  438.  
  439. "DrWeb": "Trojan.MulDrop9.40252"
  440.  
  441.  
  442. "Invincea": "heuristic"
  443.  
  444.  
  445. "McAfee-GW-Edition": "BehavesLike.Win32.Packed.wc"
  446.  
  447.  
  448. "Trapmine": "malicious.high.ml.score"
  449.  
  450.  
  451. "FireEye": "Generic.mg.15c69380b7cf8fea"
  452.  
  453.  
  454. "Emsisoft": "Gen:Variant.Ursu.374900 (B)"
  455.  
  456.  
  457. "SentinelOne": "DFI - Malicious PE"
  458.  
  459.  
  460. "Cyren": "W32/Trojan.TDSD-8291"
  461.  
  462.  
  463. "Jiangmin": "Trojan.VBKrypt.dvqk"
  464.  
  465.  
  466. "Webroot": "W32.Trojan.Gen"
  467.  
  468.  
  469. "Avira": "HEUR/AGEN.1039155"
  470.  
  471.  
  472. "Antiy-AVL": "Trojan/Win32.VBKrypt"
  473.  
  474.  
  475. "Microsoft": "Trojan:Win32/Occamy.C"
  476.  
  477.  
  478. "ZoneAlarm": "Trojan.Win32.VBKrypt.aaexg"
  479.  
  480.  
  481. "GData": "Gen:Variant.Ursu.374900"
  482.  
  483.  
  484. "AhnLab-V3": "Malware/Win32.Generic.C3368820"
  485.  
  486.  
  487. "Acronis": "suspicious"
  488.  
  489.  
  490. "ALYac": "Gen:Variant.Ursu.374900"
  491.  
  492.  
  493. "MAX": "malware (ai score=100)"
  494.  
  495.  
  496. "Ad-Aware": "Gen:Variant.Ursu.374900"
  497.  
  498.  
  499. "Panda": "Trj/Genetic.gen"
  500.  
  501.  
  502. "TrendMicro-HouseCall": "TROJ_GEN.R011C0WH319"
  503.  
  504.  
  505. "Ikarus": "Trojan.Win32.Themida"
  506.  
  507.  
  508. "Fortinet": "W32/PossibleThreat"
  509.  
  510.  
  511. "AVG": "Win32:Trojan-gen"
  512.  
  513.  
  514. "Avast": "Win32:Trojan-gen"
  515.  
  516.  
  517. "CrowdStrike": "win/malicious_confidence_100% (W)"
  518.  
  519.  
  520. "Qihoo-360": "Win32/Trojan.ee7"
  521.  
  522.  
  523.  
  524.  
  525. "Description": "Checks the version of Bios, possibly for anti-virtualization",
  526. "Details":
  527.  
  528.  
  529. "Description": "Checks the CPU name from registry, possibly for anti-virtualization",
  530. "Details":
  531.  
  532.  
  533. "Description": "Detects VirtualBox using ACPI tricks",
  534. "Details":
  535.  
  536.  
  537. "Description": "Detects VirtualBox through the presence of a registry key",
  538. "Details":
  539.  
  540.  
  541. "Description": "Attempts to modify proxy settings",
  542. "Details":
  543.  
  544.  
  545. "Description": "Creates a copy of itself",
  546. "Details":
  547.  
  548. "copy": "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE"
  549.  
  550.  
  551.  
  552.  
  553. "Description": "Anomalous binary characteristics",
  554. "Details":
  555.  
  556. "anomaly": "Unprintable characters found in section name"
  557.  
  558.  
  559. "anomaly": "Actual checksum does not match that reported in PE header"
  560.  
  561.  
  562.  
  563.  
  564. "Description": "Clears web history",
  565. "Details":
  566.  
  567. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@doubleclick1.txt"
  568.  
  569.  
  570. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@advertising1.txt"
  571.  
  572.  
  573. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.bing2.txt"
  574.  
  575.  
  576. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.google1.txt"
  577.  
  578.  
  579. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google5.txt"
  580.  
  581.  
  582. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google4.txt"
  583.  
  584.  
  585. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@msn1.txt"
  586.  
  587.  
  588. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google1.txt"
  589.  
  590.  
  591. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.msn2.txt"
  592.  
  593.  
  594. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.msn2.txt"
  595.  
  596.  
  597. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@media2.txt"
  598.  
  599.  
  600. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@3lift1.txt"
  601.  
  602.  
  603. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google3.txt"
  604.  
  605.  
  606. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@bing2.txt"
  607.  
  608.  
  609. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@atwola2.txt"
  610.  
  611.  
  612. "file": "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@scorecardresearch2.txt"
  613.  
  614.  
  615.  
  616.  
  617.  
  618. * Started Service:
  619. "msiserver"
  620.  
  621.  
  622. * Mutexes:
  623. "DBWinMutex",
  624. "CicLoadWinStaWinSta0",
  625. "Local\\MSCTF.CtfMonitorInstMutexDefault1",
  626. "Local\\_!MSFTHISTORY!_",
  627. "Local\\c:!users!user!appdata!local!microsoft!windows!temporary internet files!content.ie5!",
  628. "Local\\c:!users!user!appdata!roaming!microsoft!windows!cookies!",
  629. "Local\\c:!users!user!appdata!local!microsoft!windows!history!history.ie5!",
  630. "Local\\ZonesCounterMutex",
  631. "Local\\ZoneAttributeCacheCounterMutex",
  632. "Local\\ZonesCacheCounterMutex",
  633. "Local\\ZonesLockedCacheCounterMutex",
  634. "Local\\WininetStartupMutex",
  635. "Local\\WininetConnectionMutex",
  636. "Local\\WininetProxyRegistryMutex",
  637. "Local\\!IETld!Mutex",
  638. "SetupWatson_Mutex_Name",
  639. "Global\\MSILOG_50cd82201d551dftxt.3F42ISMtsidercv_dd_pmeT_lacoL_ataDppA_ubs_sresU_:C",
  640. "Global\\_MSIExecute",
  641. "Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511",
  642. "Local\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000"
  643.  
  644.  
  645. * Modified Files:
  646. "\\??\\SICE",
  647. "\\??\\SIWVID",
  648. "\\??\\NTICE",
  649. "C:\\Users\\user\\AppData\\Local\\Temp\\~DF560BAB02A4B45C6C.TMP",
  650. "C:\\Users\\user\\AppData\\Local\\Temp\\EDD86EDC.EXE",
  651. "\\??\\PIPE\\samr",
  652. "C:\\Windows\\sysnative\\wbem\\repository\\WRITABLE.TST",
  653. "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING1.MAP",
  654. "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING2.MAP",
  655. "C:\\Windows\\sysnative\\wbem\\repository\\MAPPING3.MAP",
  656. "C:\\Windows\\sysnative\\wbem\\repository\\OBJECTS.DATA",
  657. "C:\\Windows\\sysnative\\wbem\\repository\\INDEX.BTR",
  658. "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER",
  659. "\\??\\pipe\\PIPE_EVENTROOT\\CIMV2PROVIDERSUBSYSTEM",
  660. "\\??\\WMIDataDevice",
  661. "C:\\Users\\user\\AppData\\Local\\Temp\\~DF302B61B80449B774.TMP",
  662. "C:\\Users\\user\\AppData\\Local\\Temp\\C8B5715E.EXE",
  663. "C:\\Users\\user\\AppData\\Local\\Temp\\~DFAC6AAA63189082AC.TMP",
  664. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
  665. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
  666. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
  667. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl1",
  668. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl2",
  669. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate1",
  670. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\errorPageStrings1",
  671. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate2",
  672. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\errorPageStrings1",
  673. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts1",
  674. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts2",
  675. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\background_gradient1",
  676. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\info_481",
  677. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\background_gradient1",
  678. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\info_481",
  679. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\bullet1",
  680. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\bullet1",
  681. "C:\\Users\\user\\AppData\\Local\\Temp\\D0EE.tmp",
  682. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04",
  683. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04",
  684. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\vcredist_x861.exe",
  685. "C:\\Users\\user\\AppData\\Local\\Temp\\LIB\\VC2008.EXE",
  686. "C:\\323029f5b1c45432f6a6f0\\vc_red.cab",
  687. "C:\\323029f5b1c45432f6a6f0\\vc_red.msi",
  688. "C:\\323029f5b1c45432f6a6f0\\install.exe",
  689. "C:\\323029f5b1c45432f6a6f0\\install.res.1033.dll",
  690. "C:\\323029f5b1c45432f6a6f0\\install.res.1042.dll",
  691. "C:\\323029f5b1c45432f6a6f0\\install.res.1041.dll",
  692. "C:\\323029f5b1c45432f6a6f0\\install.res.1049.dll",
  693. "C:\\323029f5b1c45432f6a6f0\\install.res.1040.dll",
  694. "C:\\323029f5b1c45432f6a6f0\\install.res.1036.dll",
  695. "C:\\323029f5b1c45432f6a6f0\\install.res.3082.dll",
  696. "C:\\323029f5b1c45432f6a6f0\\install.res.1031.dll",
  697. "C:\\323029f5b1c45432f6a6f0\\install.res.1028.dll",
  698. "C:\\323029f5b1c45432f6a6f0\\install.res.2052.dll",
  699. "C:\\323029f5b1c45432f6a6f0\\eula.1033.txt",
  700. "C:\\323029f5b1c45432f6a6f0\\eula.1042.txt",
  701. "C:\\323029f5b1c45432f6a6f0\\eula.1041.txt",
  702. "C:\\323029f5b1c45432f6a6f0\\eula.1049.txt",
  703. "C:\\323029f5b1c45432f6a6f0\\eula.1040.txt",
  704. "C:\\323029f5b1c45432f6a6f0\\eula.1036.txt",
  705. "C:\\323029f5b1c45432f6a6f0\\eula.3082.txt",
  706. "C:\\323029f5b1c45432f6a6f0\\eula.1031.txt",
  707. "C:\\323029f5b1c45432f6a6f0\\eula.1028.txt",
  708. "C:\\323029f5b1c45432f6a6f0\\eula.2052.txt",
  709. "C:\\323029f5b1c45432f6a6f0\\globdata.ini",
  710. "C:\\323029f5b1c45432f6a6f0\\install.ini",
  711. "C:\\323029f5b1c45432f6a6f0\\vcredist.bmp",
  712. "C:\\323029f5b1c45432f6a6f0\\$shtdwn$.req",
  713. "C:\\Users\\user\\AppData\\Local\\Temp\\dd_vcredistUI24F3.txt",
  714. "C:\\Users\\user\\AppData\\Local\\Temp\\dd_vcredistMSI24F3.txt",
  715. "C:\\Windows\\Installer\\ad8bf6.msi",
  716. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9",
  717. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9",
  718. "C:\\Windows\\Installer\\ad8bf8.ipi",
  719. "C:\\Users\\user\\AppData\\Local\\Temp\\~DFB59EF6A74D0A5A30.TMP",
  720. "C:\\Windows\\Installer\\MSIFD21.tmp",
  721. "C:\\Config.Msi\\ad8bf9.rbs",
  722. "C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll",
  723. "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\atl90.dll",
  724. "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1.cat",
  725. "C:\\Windows\\winsxs\\InstallTemp\\20190813095450873.0\\9.0.21022.8.cat",
  726. "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2.cat",
  727. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943.cat",
  728. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03.cat",
  729. "C:\\Windows\\winsxs\\InstallTemp\\20190813095522942.0\\9.0.30729.1.cat",
  730. "C:\\Windows\\winsxs\\InstallTemp\\20190813095527705.0\\9.0.30729.1.cat",
  731. "C:\\Windows\\winsxs\\InstallTemp\\20190813095533085.0\\9.0.30729.1.cat",
  732. "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1.manifest",
  733. "C:\\Windows\\winsxs\\InstallTemp\\20190813095353404.0\\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2.manifest",
  734. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943.manifest",
  735. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03.manifest",
  736. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfc90.dll",
  737. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90chs.dll",
  738. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90cht.dll",
  739. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90deu.dll",
  740. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90enu.dll",
  741. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90esn.dll",
  742. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90esp.dll",
  743. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90fra.dll",
  744. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90ita.dll",
  745. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90jpn.dll",
  746. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90kor.dll",
  747. "C:\\Windows\\winsxs\\InstallTemp\\20190813095518539.0\\mfc90rus.dll",
  748. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfc90u.dll",
  749. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfcm90.dll",
  750. "C:\\Windows\\winsxs\\InstallTemp\\20190813095510565.0\\mfcm90u.dll",
  751. "C:\\Windows\\winsxs\\InstallTemp\\20190813095522942.0\\9.0.30729.1.policy",
  752. "C:\\Windows\\winsxs\\InstallTemp\\20190813095527705.0\\9.0.30729.1.policy",
  753. "C:\\Windows\\winsxs\\InstallTemp\\20190813095533085.0\\9.0.30729.1.policy",
  754. "C:\\Windows\\winsxs\\InstallTemp\\20190813095445921.0\\vcomp90.dll",
  755. "C:\\Windows\\Installer\\ad8bfa.msi"
  756.  
  757.  
  758. * Deleted Files:
  759. "C:\\Users\\user\\AppData\\Local\\Temp\\~DF560BAB02A4B45C6C.TMP",
  760. "C:\\Users\\user\\AppData\\Local\\Temp\\Exes_15c69380b7cf8feaa6f7a7033f10b4aa.dat",
  761. "C:\\Users\\user\\AppData\\Local\\Temp\\~DF302B61B80449B774.TMP",
  762. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUGNux1.jpg",
  763. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUOpgu1.jpg",
  764. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBMngoJ1.jpg",
  765. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBiwNf1.png",
  766. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSigw31.jpg",
  767. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\layout1",
  768. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUDFrs1.jpg",
  769. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBBFV0f1.png",
  770. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBCYr3U1.png",
  771. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BB2bztB1.png",
  772. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAkgetg1.png",
  773. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\chrome1.htm",
  774. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\noConnect1",
  775. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAaeOki2.png",
  776. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUxPW21.jpg",
  777. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURh6A1.jpg",
  778. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBJ3XCJ1.png",
  779. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOBJn1.jpg",
  780. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBULJgM1.jpg",
  781. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQzQr1.jpg",
  782. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\masthead_left1",
  783. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUgfJ21.jpg",
  784. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUGEWC1.jpg",
  785. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBz3ebk1.png",
  786. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUMHuq1.jpg",
  787. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQFzQ1.jpg",
  788. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\fallback.v2.min1.js",
  789. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\licensechange1",
  790. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBAq91.png",
  791. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA36Tom1.png",
  792. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUJIfE1.jpg",
  793. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURuCL1.jpg",
  794. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\055643067C21678412144E247D39664A1.gif",
  795. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon3.ico",
  796. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\progress_bg_right1",
  797. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUE38v1.jpg",
  798. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAyx79e1.png",
  799. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQtce1.jpg",
  800. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\google-play-download1.png",
  801. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUREuA1.jpg",
  802. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBPMoha1.png",
  803. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURaQ72.jpg",
  804. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMGEu1.jpg",
  805. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUA5Vm1.png",
  806. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURGfg1.jpg",
  807. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURFFy1.jpg",
  808. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURGb41.png",
  809. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAywOab1.png",
  810. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUnN4f1.jpg",
  811. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUN5vs1.jpg",
  812. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\googlelogo_white_background_color_272x92dp1.png",
  813. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\masthead_fill1",
  814. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\burp1.htm",
  815. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURn3B1.jpg",
  816. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AA3l39h1.png",
  817. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPTbo1.jpg",
  818. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\benefits-icon-shield1.jpg",
  819. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\app-store-download1.png",
  820. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\Java3BillDevices_EN1",
  821. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUR9or1.jpg",
  822. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\chartbeat1.js",
  823. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMJC01.jpg",
  824. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBtOBsY1.png",
  825. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAAluHw1.jpg",
  826. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\config1.js",
  827. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURCTz1.jpg",
  828. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURHbv1.jpg",
  829. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\a0348fbc1.js",
  830. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\icon-fb1.jpg",
  831. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\icon-help1.jpg",
  832. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\5a-43cadc-8a01ca321.txt",
  833. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAywufo1.png",
  834. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBTBfNg1.png",
  835. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTAEer1.jpg",
  836. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBMweEa1.jpg",
  837. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUeHe31.jpg",
  838. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress_fg_left1",
  839. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\ErrorPageTemplate1",
  840. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQ6UG1.jpg",
  841. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPriM1.jpg",
  842. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQSyB2.jpg",
  843. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\burp1.htm",
  844. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUP0Tp1.jpg",
  845. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBU3vgM1.jpg",
  846. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\5a-43cadc-8a01ca321.txt",
  847. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\URRYV-HX35J-LK4WZ-4TRKG-NBMKC1",
  848. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAyxfDD1.png",
  849. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\devices1.png",
  850. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\progress_bg_left1",
  851. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDSPS1.jpg",
  852. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBweSeT1.jpg",
  853. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAA8PBm1.png",
  854. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAvNCcs1.png",
  855. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSzCzH1.png",
  856. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\f1.txt",
  857. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon1.ico",
  858. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDFsN1.jpg",
  859. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUBICX1.jpg",
  860. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURs1F1.jpg",
  861. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURCTz1.jpg",
  862. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQUJ21.jpg",
  863. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\layout1",
  864. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress_en1",
  865. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAlQCaw1.jpg",
  866. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA6pevu1.png",
  867. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUwTzH1.jpg",
  868. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BB1lb5v1.png",
  869. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOiYo1.jpg",
  870. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAzME7S1.png",
  871. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBiuMZc1.png",
  872. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BB5a8e71.png",
  873. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAyXiwM1.png",
  874. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURvqq1.jpg",
  875. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\CAONNZV6.log",
  876. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\views1",
  877. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\l10n1",
  878. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUOGdK1.jpg",
  879. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\httpErrorPagesScripts1",
  880. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\complete_en1",
  881. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMwtY1.jpg",
  882. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAgi0nZ1.png",
  883. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQPvC1.jpg",
  884. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\rtutils1",
  885. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\common1",
  886. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURK2V1.jpg",
  887. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBTeGGL1.jpg",
  888. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUDRpQ1.jpg",
  889. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURPj91.jpg",
  890. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURuzZ1.jpg",
  891. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAA15Zd1.png",
  892. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBweSeT2.jpg",
  893. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\gap2",
  894. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURAO51.jpg",
  895. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUDYUu1.png",
  896. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTVBUS1.jpg",
  897. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\hero-back-mobile1.jpg",
  898. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURw7P1.jpg",
  899. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUNbnV2.jpg",
  900. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AApevLf1.png",
  901. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\benefits-icon-world1.jpg",
  902. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\host2",
  903. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\progress_fg_right1",
  904. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPB3k1.jpg",
  905. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURK4a1.jpg",
  906. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURhqo1.jpg",
  907. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUBoT52.jpg",
  908. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\invalidcert1",
  909. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQtce1.jpg",
  910. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBnGKDa1.png",
  911. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUvisf1.png",
  912. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\async_usersync1.htm",
  913. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\fwlink1.htm",
  914. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUxGVI1.jpg",
  915. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\invalidcert1",
  916. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\progress1",
  917. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\progress_bg_fill1",
  918. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\complete1",
  919. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\red_shield1",
  920. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\burp1.htm",
  921. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPpCJ1.jpg",
  922. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBSGe1V1.png",
  923. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUtSB21.jpg",
  924. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQCC02.jpg",
  925. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\nav_logo2291.png",
  926. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\fallback.v2.min1.css",
  927. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\progress_fg_fill1",
  928. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQ28R2.jpg",
  929. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQzQr1.jpg",
  930. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURmU61.jpg",
  931. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAyHBki1.jpg",
  932. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURH531.jpg",
  933. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUOO6P1.jpg",
  934. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUN0YM1.jpg",
  935. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-logo-one-color1.jpg",
  936. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\masthead_left1",
  937. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\invalidcert2",
  938. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\background_gradient_red1",
  939. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\adsWrapperMSNI1.js",
  940. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBReDbo1.png",
  941. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBjLpNF1.png",
  942. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAk0zNO1.jpg",
  943. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURw7P1.jpg",
  944. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURCDB1.jpg",
  945. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPxVV1.jpg",
  946. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBULOAp1.jpg",
  947. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBgjtLu1.png",
  948. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMLEB1.jpg",
  949. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\ga1.js",
  950. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\down1",
  951. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\foolge_com1.htm",
  952. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBS7DY21.jpg",
  953. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUJoMd1.jpg",
  954. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPeN31.jpg",
  955. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\download-bg-mobile1.svg",
  956. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBih5H1.png",
  957. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAxspu11.png",
  958. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBmSG0M1.jpg",
  959. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBienk91.png",
  960. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUFWLX1.jpg",
  961. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon1.ico",
  962. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURMSL1.jpg",
  963. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBULEUd1.jpg",
  964. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURuzZ1.jpg",
  965. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURFFy1.jpg",
  966. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUR6JC2.jpg",
  967. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\ast1.js",
  968. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\autotrack1.js",
  969. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\e151e51.gif",
  970. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBbyo1E1.png",
  971. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA3lldo1.png",
  972. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTeWQu1.jpg",
  973. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUONWd1.jpg",
  974. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBLFv5R1.png",
  975. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPby61.jpg",
  976. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BByCIyx1.png",
  977. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon3.ico",
  978. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBTOvML1.png",
  979. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAgymO61.png",
  980. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURx4L1.jpg",
  981. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA6oGHJ1.png",
  982. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google_com1.htm",
  983. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\chrome_throbber_fast1.gif",
  984. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\common1",
  985. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\welcome1",
  986. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUB9jR1.jpg",
  987. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBRPdL81.jpg",
  988. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAywGC01.png",
  989. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUPxiN1.jpg",
  990. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUvpML1.png",
  991. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\font1.css",
  992. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\host1",
  993. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\auwelcome1",
  994. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUCKRK1.jpg",
  995. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUM34w1.jpg",
  996. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBSHLM31.jpg",
  997. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\thank-you-animation1.png",
  998. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\auwelcome_en1",
  999. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\errorPageStrings2",
  1000. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\buro1.htm",
  1001. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBu5I1K1.png",
  1002. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBCleeG2.png",
  1003. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBURw8g1.jpg",
  1004. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMvYi1.jpg",
  1005. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQh9J1.jpg",
  1006. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBTl7Lq1.jpg",
  1007. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUPQB81.jpg",
  1008. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\chrome_desktop1.png",
  1009. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\icon-twitter1.jpg",
  1010. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\benefits-icon-search1.jpg",
  1011. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAyxkRJ1.png",
  1012. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUIDWt1.jpg",
  1013. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAgnIPB1.png",
  1014. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\runtime1",
  1015. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\licensechange_en1",
  1016. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUMLNA1.jpg",
  1017. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAkyOZy1.png",
  1018. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\gtm1.js",
  1019. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\runtime1",
  1020. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\red_shield_481",
  1021. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUOqtT1.jpg",
  1022. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\welcome_en1",
  1023. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\check1",
  1024. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\jquery-1.11.1.min1.js",
  1025. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUPEdB1.jpg",
  1026. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAexRGq1.png",
  1027. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAvcS6D1.png",
  1028. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAmRWGB1.png",
  1029. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\tools1",
  1030. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQsBl1.jpg",
  1031. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\search1.htm",
  1032. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\modernizr1.js",
  1033. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\connected_desktop1.png",
  1034. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\favicon1.ico",
  1035. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURMlT1.jpg",
  1036. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBACPiN1.png",
  1037. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA6Q14t1.jpg",
  1038. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA3eozz1.png",
  1039. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AA3ltd81.png",
  1040. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AAmogYR1.png",
  1041. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favcenter1",
  1042. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUQj6i1.jpg",
  1043. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUCvZK1.jpg",
  1044. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUPeDe1.jpg",
  1045. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\font1.css",
  1046. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\green_shield1",
  1047. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\favicon2.ico",
  1048. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\main.v2.min1.css",
  1049. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\background_gradient1",
  1050. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURG1Q1.jpg",
  1051. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\AA3HAHV1.png",
  1052. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AA565dd1.png",
  1053. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAywHbG1.png",
  1054. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBiNnLK1.png",
  1055. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBQurOb1.jpg",
  1056. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUDFvK1.jpg",
  1057. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBULhNs1.jpg",
  1058. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURJ4j1.jpg",
  1059. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\favicon2.ico",
  1060. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\burp2.htm",
  1061. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\cd93661.eot",
  1062. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\AAfZ6og1.png",
  1063. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAAAFjj2.png",
  1064. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTOD5k1.png",
  1065. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\rs=ACT90oHxP-1wbzaSxZq31U3_PsI-6G7qSA1",
  1066. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\dnserror1",
  1067. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUMU351.jpg",
  1068. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUE92F1.png",
  1069. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\installer.min1.js",
  1070. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTw0cA1.png",
  1071. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUMNVw1.jpg",
  1072. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQSyB1.jpg",
  1073. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\AAsvT3F1.png",
  1074. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\92-b7b846-86e270321",
  1075. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQCC01.jpg",
  1076. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBTX9Tl1.jpg",
  1077. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\BBUQGj11.jpg",
  1078. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-play-download1.jpg",
  1079. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\masthead_fill1",
  1080. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUQh9J1.jpg",
  1081. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBUwVjk1.jpg",
  1082. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUR6JC1.jpg",
  1083. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUQsBl1.jpg",
  1084. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBUDzuP1.jpg",
  1085. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURBJY1.jpg",
  1086. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\BBURCih1.jpg",
  1087. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\views1",
  1088. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBURfVz1.jpg",
  1089. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\dbab-mobile1.jpg",
  1090. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\benefits-icon-fast1.jpg",
  1091. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\cursor-replay1.bmp",
  1092. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\BBUDEOH1.jpg",
  1093. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\chrome-logo1.svg",
  1094. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\google-logo1.jpg",
  1095. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\app-store-download1.jpg",
  1096. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\l10n1",
  1097. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\92-b7b846-86e270322",
  1098. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\chrome-logo1.png",
  1099. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\BBURGks1.jpg",
  1100. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\rs=ACT90oFGNBhiXJs06Tqt0W67rbKcqFNTAw1",
  1101. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\font1.css",
  1102. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\icon-x1.jpg",
  1103. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\AAqsfdG1.png",
  1104. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\92-b7b846-86e270321",
  1105. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\url1.htm",
  1106. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PA320MG8\\rtutils1",
  1107. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\save_password_desktop1.png",
  1108. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\translate_desktop1.png",
  1109. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\Q8H2MS75\\icon-youtube1.jpg",
  1110. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\thank-you1.htm",
  1111. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@bing2.txt",
  1112. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google1.txt",
  1113. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google5.txt",
  1114. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@scorecardresearch2.txt",
  1115. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.msn2.txt",
  1116. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.bing2.txt",
  1117. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@www.google1.txt",
  1118. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@atwola2.txt",
  1119. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@3lift1.txt",
  1120. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@doubleclick1.txt",
  1121. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@msn1.txt",
  1122. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google4.txt",
  1123. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@c.msn2.txt",
  1124. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@advertising1.txt",
  1125. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@google3.txt",
  1126. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\user@media2.txt",
  1127. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\navcancl1",
  1128. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\errorPageStrings1",
  1129. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\8BGZLQBV\\httpErrorPagesScripts1",
  1130. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\info_481",
  1131. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\S4VH3RFR\\bullet1",
  1132. "C:\\Users\\user\\AppData\\Local\\Temp\\D0EE.tmp",
  1133. "C:\\Windows\\Installer\\ad8bf8.ipi",
  1134. "C:\\Config.Msi\\MSI186A.tmp",
  1135. "C:\\Config.Msi",
  1136. "C:\\Windows\\Installer\\ad8bfa.msi"
  1137.  
  1138.  
  1139. * Modified Registry Keys:
  1140. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\LastServiceStart",
  1141. "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Wbem\\Transports\\Decoupled\\Server",
  1142. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\CreationTime",
  1143. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\MarshaledProxy",
  1144. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\Transports\\Decoupled\\Server\\ProcessIdentifier",
  1145. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\ConfigValueEssNeedsLoading",
  1146. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\CIMOM\\List of event-active namespaces",
  1147. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WBEM\\ESS\\//./root/CIMV2\\SCM Event Provider",
  1148. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\UNCAsIntranet",
  1149. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\AutoDetect",
  1150. "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\C8B5715E_RASAPI32",
  1151. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\EnableFileTracing",
  1152. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\EnableConsoleTracing",
  1153. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\FileTracingMask",
  1154. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\ConsoleTracingMask",
  1155. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\MaxFileSize",
  1156. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\C8B5715E_RASAPI32\\FileDirectory",
  1157. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable",
  1158. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyServer",
  1159. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings",
  1160. "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager",
  1161. "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000",
  1162. "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\Owner",
  1163. "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\SessionHash",
  1164. "HKEY_USERS\\S-1-5-21-0000000000-0000000000-0000000000-1000\\Software\\Microsoft\\RestartManager\\Session0000\\Sequence",
  1165. "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\InProgress",
  1166. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\InProgress\\(Default)",
  1167. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Folders\\c:\\Config.Msi\\",
  1168. "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts",
  1169. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts\\c:\\Config.Msi\\ad8bf9.rbs",
  1170. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Rollback\\Scripts\\c:\\Config.Msi\\ad8bf9.rbsLow",
  1171. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA5D9C68C00F12943B2F6CA09FE28244",
  1172. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA5D9C68C00F12943B2F6CA09FE28244\\D20352A90C039D93DBF6126ECE614057",
  1173. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DDA695F96EBE974FAAE0D63A6F7BE67",
  1174. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DDA695F96EBE974FAAE0D63A6F7BE67\\D20352A90C039D93DBF6126ECE614057",
  1175. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A771E8EB1E10BCE44AA8014E39DCC206",
  1176. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll",
  1177. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A771E8EB1E10BCE44AA8014E39DCC206\\D20352A90C039D93DBF6126ECE614057",
  1178. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D2B3EF2522FB0693FA4336E05E3EE623",
  1179. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D2B3EF2522FB0693FA4336E05E3EE623\\D20352A90C039D93DBF6126ECE614057",
  1180. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5FAA65EA0C3FB4D388951A5EA0E372FB",
  1181. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5FAA65EA0C3FB4D388951A5EA0E372FB\\D20352A90C039D93DBF6126ECE614057",
  1182. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6E5749FF32D22E334AADA52C638EE202",
  1183. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6E5749FF32D22E334AADA52C638EE202\\D20352A90C039D93DBF6126ECE614057",
  1184. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\58E5A2495BC8DC53B8B9416C9DCD30D0",
  1185. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\58E5A2495BC8DC53B8B9416C9DCD30D0\\D20352A90C039D93DBF6126ECE614057",
  1186. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\69F8E9220EA16E2348822DBCAC217204",
  1187. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\69F8E9220EA16E2348822DBCAC217204\\D20352A90C039D93DBF6126ECE614057",
  1188. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D78B2F612F88EF5329150B96F703BDB9",
  1189. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D78B2F612F88EF5329150B96F703BDB9\\D20352A90C039D93DBF6126ECE614057",
  1190. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B121D1754691A29369A50091D3A51E1A\\D20352A90C039D93DBF6126ECE614057",
  1191. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057",
  1192. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\909E59FB5F378733ABE9A56AB30732F0\\D20352A90C039D93DBF6126ECE614057",
  1193. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E22E976033B685437B6E78A79C856562\\D20352A90C039D93DBF6126ECE614057",
  1194. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\489285C3706753E33A733D3D72903715\\D20352A90C039D93DBF6126ECE614057",
  1195. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F74C83443EF904D34AF9EDBF71F48762\\D20352A90C039D93DBF6126ECE614057",
  1196. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D36A387FC01EF2F33B9CDB1C9FE8BDDC",
  1197. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D36A387FC01EF2F33B9CDB1C9FE8BDDC\\D20352A90C039D93DBF6126ECE614057",
  1198. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD834BCB1B20E23A96A6DAD28ECD979",
  1199. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD834BCB1B20E23A96A6DAD28ECD979\\D20352A90C039D93DBF6126ECE614057",
  1200. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E285BE69D65F4B3F83D8E11830483F1",
  1201. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E285BE69D65F4B3F83D8E11830483F1\\D20352A90C039D93DBF6126ECE614057",
  1202. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FCC01B60BAF4F3637A6C90A523BD3667",
  1203. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FCC01B60BAF4F3637A6C90A523BD3667\\D20352A90C039D93DBF6126ECE614057",
  1204. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A880436E76DD633495267B76A09C747",
  1205. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A880436E76DD633495267B76A09C747\\D20352A90C039D93DBF6126ECE614057",
  1206. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9166B4ED039A84439930ADDFB2752F5F",
  1207. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9166B4ED039A84439930ADDFB2752F5F\\D20352A90C039D93DBF6126ECE614057",
  1208. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CA8E8AC867D93C337A32F95688D8BE90",
  1209. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CA8E8AC867D93C337A32F95688D8BE90\\D20352A90C039D93DBF6126ECE614057",
  1210. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\10BB9476A37D3473E83136181DC18A8F",
  1211. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\10BB9476A37D3473E83136181DC18A8F\\D20352A90C039D93DBF6126ECE614057",
  1212. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F271DD6DEFFB195369723CE5A4356601",
  1213. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F271DD6DEFFB195369723CE5A4356601\\D20352A90C039D93DBF6126ECE614057",
  1214. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9884982C831F68D3CB5FF5B9BE77DA61",
  1215. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9884982C831F68D3CB5FF5B9BE77DA61\\D20352A90C039D93DBF6126ECE614057",
  1216. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C7CF67A49199C64339EA5C26D3462CA3",
  1217. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C7CF67A49199C64339EA5C26D3462CA3\\D20352A90C039D93DBF6126ECE614057",
  1218. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A3FC9C46D3D588B3BBBB5F5A009F7578",
  1219. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A3FC9C46D3D588B3BBBB5F5A009F7578\\D20352A90C039D93DBF6126ECE614057",
  1220. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA35D58AD6095C13693E2EB19B51E4C2",
  1221. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AA35D58AD6095C13693E2EB19B51E4C2\\D20352A90C039D93DBF6126ECE614057",
  1222. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3F4F115D119AFC23CA11C979FE49B8CF",
  1223. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3F4F115D119AFC23CA11C979FE49B8CF\\D20352A90C039D93DBF6126ECE614057",
  1224. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF68F61B49DBAF0389AA71BA5EF44087",
  1225. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF68F61B49DBAF0389AA71BA5EF44087\\D20352A90C039D93DBF6126ECE614057",
  1226. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C01B6B82F14EB2036A37104F63245722",
  1227. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C01B6B82F14EB2036A37104F63245722\\D20352A90C039D93DBF6126ECE614057",
  1228. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75EC17D83CDB0B43DADAAEC4A5CF6946",
  1229. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75EC17D83CDB0B43DADAAEC4A5CF6946\\D20352A90C039D93DBF6126ECE614057",
  1230. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A891A946D91CF523FBA37CAE6EF2E56F",
  1231. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A891A946D91CF523FBA37CAE6EF2E56F\\D20352A90C039D93DBF6126ECE614057",
  1232. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4EE57BB6B8E2E3848AA4773134975546",
  1233. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4EE57BB6B8E2E3848AA4773134975546\\D20352A90C039D93DBF6126ECE614057",
  1234. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D72CFC1B540B9014C983F2B89EC0AD3A",
  1235. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D72CFC1B540B9014C983F2B89EC0AD3A\\D20352A90C039D93DBF6126ECE614057",
  1236. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9139CDB10A2211C458036000CA13F613",
  1237. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9139CDB10A2211C458036000CA13F613\\D20352A90C039D93DBF6126ECE614057",
  1238. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\298095F840DB82A4C997E3EE402B0B0D",
  1239. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\298095F840DB82A4C997E3EE402B0B0D\\D20352A90C039D93DBF6126ECE614057",
  1240. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1DBFA1B595D618049AFE66A3138BEBC3",
  1241. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1DBFA1B595D618049AFE66A3138BEBC3\\D20352A90C039D93DBF6126ECE614057",
  1242. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AC1BF68872161FB4C94C84F195523AB7",
  1243. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AC1BF68872161FB4C94C84F195523AB7\\D20352A90C039D93DBF6126ECE614057",
  1244. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CCCD3CF96BADF7E42A9468F29E623555",
  1245. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CCCD3CF96BADF7E42A9468F29E623555\\D20352A90C039D93DBF6126ECE614057",
  1246. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D44BDE8068B242B43963888890D3BA9B",
  1247. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D44BDE8068B242B43963888890D3BA9B\\D20352A90C039D93DBF6126ECE614057",
  1248. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\97486C5D001A175448A3E30BF3B775B3",
  1249. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\97486C5D001A175448A3E30BF3B775B3\\D20352A90C039D93DBF6126ECE614057",
  1250. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BFB8A0EA52A3591408D6120D165BAF11",
  1251. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BFB8A0EA52A3591408D6120D165BAF11\\D20352A90C039D93DBF6126ECE614057",
  1252. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A82B8DA21FCE4542840AD18154B6003",
  1253. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3A82B8DA21FCE4542840AD18154B6003\\D20352A90C039D93DBF6126ECE614057",
  1254. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3FFF22A42C37CBB4DA2CC697237A99B9",
  1255. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3FFF22A42C37CBB4DA2CC697237A99B9\\D20352A90C039D93DBF6126ECE614057",
  1256. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\303FD3DF888283041A37A5688745D217",
  1257. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\303FD3DF888283041A37A5688745D217\\D20352A90C039D93DBF6126ECE614057",
  1258. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8267078178EFD2D43874621BFF124618",
  1259. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8267078178EFD2D43874621BFF124618\\D20352A90C039D93DBF6126ECE614057",
  1260. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BB9303D405CDB134CB30CD367AC97F2B",
  1261. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BB9303D405CDB134CB30CD367AC97F2B\\D20352A90C039D93DBF6126ECE614057",
  1262. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0E8D57C26BBC0BA4086B6AE65D820A79",
  1263. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0E8D57C26BBC0BA4086B6AE65D820A79\\D20352A90C039D93DBF6126ECE614057",
  1264. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6C131C196F822F5418614A704F514399",
  1265. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\6C131C196F822F5418614A704F514399\\D20352A90C039D93DBF6126ECE614057",
  1266. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B5E445F6BDBA2B346B9FC57B7169F65B",
  1267. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B5E445F6BDBA2B346B9FC57B7169F65B\\D20352A90C039D93DBF6126ECE614057",
  1268. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BCB893E3BCA189C4B96FA7F49DC89DA5",
  1269. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BCB893E3BCA189C4B96FA7F49DC89DA5\\D20352A90C039D93DBF6126ECE614057",
  1270. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3CC3911F7FC23D948BF67404DA99F113",
  1271. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3CC3911F7FC23D948BF67404DA99F113\\D20352A90C039D93DBF6126ECE614057",
  1272. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E81E5FA91DB0274CBFA0C024E748E82",
  1273. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3E81E5FA91DB0274CBFA0C024E748E82\\D20352A90C039D93DBF6126ECE614057",
  1274. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FA0CEFB36BB0E664381F5BCC75524D33",
  1275. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FA0CEFB36BB0E664381F5BCC75524D33\\D20352A90C039D93DBF6126ECE614057",
  1276. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53714D3915F0E734D9809C232714222E",
  1277. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53714D3915F0E734D9809C232714222E\\D20352A90C039D93DBF6126ECE614057",
  1278. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8477A35EABCAFE040A730AE47C57DEA2",
  1279. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8477A35EABCAFE040A730AE47C57DEA2\\D20352A90C039D93DBF6126ECE614057",
  1280. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\614A75AA111769C4BB8A6B8F035000B0",
  1281. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\614A75AA111769C4BB8A6B8F035000B0\\D20352A90C039D93DBF6126ECE614057",
  1282. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F1546C7E77B0CE34EADB0FEAE4DB0BC7",
  1283. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F1546C7E77B0CE34EADB0FEAE4DB0BC7\\D20352A90C039D93DBF6126ECE614057",
  1284. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Folders\\c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\",
  1285. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchGUID",
  1286. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\MediaCabinet",
  1287. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\File",
  1288. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\ComponentVersion",
  1289. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\ProductVersion",
  1290. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchSize",
  1291. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchAttributes",
  1292. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\PatchSequence",
  1293. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\SharedComponent",
  1294. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75E123D699E378B3FB32C2FD3F63C14B\\D20352A90C039D93DBF6126ECE614057\\IsFullFile",
  1295. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\DevDiv\\VC\\Servicing\\9.0",
  1296. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\SP",
  1297. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\SPIndex",
  1298. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033",
  1299. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\Install",
  1300. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\InstallerType",
  1301. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SP",
  1302. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SPIndex",
  1303. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DevDiv\\VC\\Servicing\\9.0\\RED\\1033\\SPName"
  1304.  
  1305.  
  1306. * Deleted Registry Keys:
  1307. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProxyBypass",
  1308. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProxyBypass",
  1309. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\IntranetName",
  1310. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\IntranetName",
  1311. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyOverride",
  1312. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\AutoConfigURL"
  1313.  
  1314.  
  1315. * DNS Communications:
  1316.  
  1317. * Domains:
  1318.  
  1319. * Network Communication - ICMP:
  1320.  
  1321. * Network Communication - HTTP:
  1322.  
  1323. "count": 1,
  1324. "body": "",
  1325. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  1326. "user-agent": "Microsoft-CryptoAPI/6.1",
  1327. "method": "GET",
  1328. "host": "ocsp.digicert.com",
  1329. "version": "1.1",
  1330. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  1331. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1\r\nCache-Control: max-age = 148251\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 18:10:24 GMT\r\nIf-None-Match: \"5c8d3c10-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  1332. "port": 80
  1333.  
  1334.  
  1335. "count": 1,
  1336. "body": "",
  1337. "uri": "http://crl.microsoft.com/pki/crl/products/CSPCA.crl",
  1338. "user-agent": "Microsoft-CryptoAPI/6.1",
  1339. "method": "GET",
  1340. "host": "crl.microsoft.com",
  1341. "version": "1.1",
  1342. "path": "/pki/crl/products/CSPCA.crl",
  1343. "data": "GET /pki/crl/products/CSPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  1344. "port": 80
  1345.  
  1346.  
  1347.  
  1348. * Network Communication - SMTP:
  1349.  
  1350. * Network Communication - Hosts:
  1351.  
  1352. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!