Trojan.Encoder.45468

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\_mei40442\crypto\cipher\_arc4.pyd
%TEMP%\_mei40442\crypto\cipher\_salsa20.pyd
%TEMP%\_mei40442\crypto\cipher\_chacha20.pyd
%TEMP%\_mei40442\crypto\cipher\_pkcs1_decode.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_aes.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_aesni.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_arc2.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_blowfish.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_cast.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_cbc.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_cfb.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_ctr.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_des.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_des3.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_ecb.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_ocb.pyd
%TEMP%\_mei40442\crypto\cipher\_raw_ofb.pyd
%TEMP%\_mei40442\crypto\hash\_blake2b.pyd
%TEMP%\_mei40442\crypto\hash\_blake2s.pyd
%TEMP%\_mei40442\crypto\hash\_md2.pyd
%TEMP%\_mei40442\crypto\hash\_md4.pyd
%TEMP%\_mei40442\crypto\hash\_md5.pyd
%TEMP%\_mei40442\crypto\hash\_ripemd160.pyd
%TEMP%\_mei40442\crypto\hash\_sha1.pyd
%TEMP%\_mei40442\crypto\hash\_sha224.pyd
%TEMP%\_mei40442\crypto\hash\_sha256.pyd
%TEMP%\_mei40442\crypto\hash\_sha384.pyd
%TEMP%\_mei40442\crypto\hash\_sha512.pyd
%TEMP%\_mei40442\crypto\hash\_ghash_clmul.pyd
%TEMP%\_mei40442\crypto\hash\_ghash_portable.pyd
%TEMP%\_mei40442\crypto\hash\_keccak.pyd
%TEMP%\_mei40442\crypto\hash\_poly1305.pyd
%TEMP%\_mei40442\crypto\math\_modexp.pyd
%TEMP%\_mei40442\crypto\protocol\_scrypt.pyd
%TEMP%\_mei40442\crypto\publickey\_curve25519.pyd
%TEMP%\_mei40442\crypto\publickey\_curve448.pyd
%TEMP%\_mei40442\crypto\publickey\_ec_ws.pyd
%TEMP%\_mei40442\crypto\publickey\_ed25519.pyd
%TEMP%\_mei40442\crypto\publickey\_ed448.pyd
%TEMP%\_mei40442\crypto\util\_cpuid_c.pyd
%TEMP%\_mei40442\crypto\util\_strxor.pyd
%TEMP%\_mei40442\pyqt5\qt5\bin\msvcp140.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\msvcp140_1.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5core.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5dbus.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5gui.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5network.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5qml.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5qmlmodels.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5quick.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5svg.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5websockets.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\qt5widgets.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\vcruntime140.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\vcruntime140_1.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\d3dcompiler_47.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\libegl.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\libglesv2.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\libcrypto-1_1-x64.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\libssl-1_1-x64.dll
%TEMP%\_mei40442\pyqt5\qt5\bin\opengl32sw.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\bearer\qgenericbearer.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\generic\qtuiotouchplugin.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\iconengines\qsvgicon.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qgif.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qicns.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qico.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qjpeg.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qsvg.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qtga.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qtiff.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qwbmp.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\imageformats\qwebp.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\platforms\qminimal.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\platforms\qoffscreen.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\platforms\qwebgl.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\platforms\qwindows.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\platformthemes\qxdgdesktopportal.dll
%TEMP%\_mei40442\pyqt5\qt5\plugins\styles\qwindowsvistastyle.dll
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_ar.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_bg.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_ca.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_cs.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_da.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_de.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_en.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_es.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_fa.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_fi.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_fr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_gd.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_gl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_he.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_ar.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_bg.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_ca.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_cs.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_da.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_de.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_en.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_es.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_fr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_gl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_hu.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_it.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_ja.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_ko.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_pl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_ru.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_sk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_sl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_tr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_uk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_zh_cn.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_help_zh_tw.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_hu.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_it.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_ja.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_ko.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_lt.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_lv.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_pl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_pt.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_ru.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_sk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_sl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_sv.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_tr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_uk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_zh_cn.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qt_zh_tw.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_ar.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_bg.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_ca.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_cs.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_da.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_de.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_en.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_es.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_fi.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_fr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_gd.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_he.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_hu.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_it.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_ja.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_ko.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_lv.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_pl.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_ru.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_sk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_tr.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_uk.qm
%TEMP%\_mei40442\pyqt5\qt5\translations\qtbase_zh_tw.qm
%TEMP%\_mei40442\pyqt5\qtcore.pyd
%TEMP%\_mei40442\pyqt5\qtgui.pyd
%TEMP%\_mei40442\pyqt5\qtnetwork.pyd
%TEMP%\_mei40442\pyqt5\qtwidgets.pyd
%TEMP%\_mei40442\pyqt5\sip.cp313-win_amd64.pyd
%TEMP%\_mei40442\vcruntime140.dll
%TEMP%\_mei40442\vcruntime140_1.dll
%TEMP%\_mei40442\_asyncio.pyd
%TEMP%\_mei40442\_bz2.pyd
%TEMP%\_mei40442\_cffi_backend.cp313-win_amd64.pyd
%TEMP%\_mei40442\_ctypes.pyd
%TEMP%\_mei40442\_decimal.pyd
%TEMP%\_mei40442\_hashlib.pyd
%TEMP%\_mei40442\_lzma.pyd
%TEMP%\_mei40442\_multiprocessing.pyd
%TEMP%\_mei40442\_overlapped.pyd
%TEMP%\_mei40442\_queue.pyd
%TEMP%\_mei40442\_socket.pyd
%TEMP%\_mei40442\_ssl.pyd
%TEMP%\_mei40442\_wmi.pyd
%TEMP%\_mei40442\base_library.zip
%TEMP%\_mei40442\libcrypto-3.dll
%TEMP%\_mei40442\libffi-8.dll
%TEMP%\_mei40442\libssl-3.dll
%TEMP%\_mei40442\pyexpat.pyd
%TEMP%\_mei40442\python3.dll
%TEMP%\_mei40442\python313.dll
%TEMP%\_mei40442\select.pyd
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\installer
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\metadata
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\record
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\wheel
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\licenses\license
%TEMP%\_mei40442\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\top_level.txt
%TEMP%\_mei40442\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei40442\unicodedata.pyd
<Текущая директория>\handschar.key
C:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\desktop.ini.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\office64ww.msi.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\office64ww.xml.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\ose.exe.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\osetup.dll.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\owow64ww.cab.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\pidgenx.dll.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\proplusww.msi.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\proplusww.xml.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww.cab.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww2.cab.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.dll.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.exe.handschar
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excellr.cab.handschar
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excelmui.msi.handschar
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excelmui.xml.handschar
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.msi.handschar
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.xml.handschar
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\pptlr.cab.handschar
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publishermui.msi.handschar
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publishermui.xml.handschar
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publr.cab.handschar
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlklr.cab.handschar
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlookmui.msi.handschar
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlookmui.xml.handschar
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordlr.cab.handschar
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordmui.msi.handschar
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordmui.xml.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proofing.msi.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proofing.xml.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.cab.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.msi.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.xml.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.cab.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.msi.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.xml.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.cab.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.msi.handschar
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.xml.handschar
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\inflr.cab.handschar
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\infopathmui.msi.handschar
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\infopathmui.xml.handschar
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.cab.handschar
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.msi.handschar
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.xml.handschar
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onenotemui.msi.handschar
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onenotemui.xml.handschar
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onotelr.cab.handschar
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovelr.cab.handschar
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovemui.msi.handschar
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovemui.xml.handschar
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.cab.handschar
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.msi.handschar
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.xml.handschar
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.cab.handschar
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.msi.handschar
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.xml.handschar
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\branding.xml.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officelr.cab.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemui.msi.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemui.xml.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemuiset.msi.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemuiset.xml.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\offsetlr.cab.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\osetupui.dll.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\pss10r.chm.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\setup.chm.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\shellui.mst.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64mui.msi.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64mui.xml.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64muiset.msi.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64muiset.xml.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\owow64lr.cab.handschar
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\accessmuiset.msi.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\accessmuiset.xml.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\setup.xml.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\accessmui.msi.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\accessmui.xml.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\acclr.cab.handschar
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\branding.xml.handschar
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.cab.handschar
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.msi.handschar
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.xml.handschar
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\setup.xml.handschar
%ProgramFiles%\desktop.ini.handschar
%CommonProgramFiles%\microsoft shared\filters\msgfilt.dll.handschar
%CommonProgramFiles%\microsoft shared\filters\odffilt.dll.handschar
%CommonProgramFiles%\microsoft shared\filters\offfiltx.dll.handschar
%CommonProgramFiles%\microsoft shared\filters\visfilt.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\alphabet.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\content.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\hwrcommonlm.dat.handschar
%CommonProgramFiles%\microsoft shared\ink\hwrenclm.dat.handschar
%CommonProgramFiles%\microsoft shared\ink\hwrenuslm.dat.handschar
%CommonProgramFiles%\microsoft shared\ink\hwrlatinlm.dat.handschar
%CommonProgramFiles%\microsoft shared\ink\hwrusash.dat.handschar
%CommonProgramFiles%\microsoft shared\ink\inkdiv.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\inkobj.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\inputpersonalization.exe.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsar.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipscat.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipschs.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipscht.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipscsy.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsdan.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsdeu.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsel.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsen.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsesp.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsfin.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsfra.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipshe.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipshi.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipshrv.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsid.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsita.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsjpn.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipskor.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsmigrationplugin.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsnld.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsnor.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsplk.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsplugin.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsptb.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsptg.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsrom.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipsrus.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipssrb.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipssrl.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipssve.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\ipstr.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\micaut.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\microsoft.ink.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\mip.exe.handschar
%CommonProgramFiles%\microsoft shared\ink\mraut.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\mshwgst.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\mshwlatin.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\rtscom.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\shapecollector.exe.handschar
%CommonProgramFiles%\microsoft shared\ink\tabipsps.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tabskb.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tabtip.exe.handschar
%CommonProgramFiles%\microsoft shared\ink\thirdpartynotices.mshwlatin.txt.handschar
%CommonProgramFiles%\microsoft shared\ink\tipres.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tipresx.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tipskins.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tiptsf.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\tpcps.dll.handschar
%CommonProgramFiles%\microsoft shared\ink\ar-sa\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\bg-bg\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\cs-cz\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\da-dk\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\de-de\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\el-gr\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-gb\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\inkobj.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\inputpersonalization.exe.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\micaut.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\mip.exe.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\mshwlatin.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\rtscom.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\shapecollector.exe.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\tabskb.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\tabtip.exe.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\tipres.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\en-us\tiptsf.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\es-es\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\es-mx\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\et-ee\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\fi-fi\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\fr-ca\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\fr-fr\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\insert.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskclearui.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknav.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\insert\insertbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\ea.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\basealtgr_rtl.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_altgr.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_ca.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_heb.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_jpn.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_kor.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_rtl.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\ja-jp.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\ko-kr.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskclearui\oskclearuibase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\oskpredbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\ea-sym.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\symbase.xml.handschar
%CommonProgramFiles%\microsoft shared\ink\he-il\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\hr-hr\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\hu-hu\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\it-it\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\ja-jp\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\ko-kr\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\lt-lt\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\lv-lv\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\nb-no\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\nl-nl\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\pl-pl\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\pt-br\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\pt-pt\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\ro-ro\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\ru-ru\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\sk-sk\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\sl-si\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\sr-latn-rs\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\sv-se\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\th-th\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\tr-tr\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\uk-ua\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\zh-cn\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\ink\zh-tw\tipresx.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\msinfo\msinfo32.exe.handschar
%CommonProgramFiles%\microsoft shared\msinfo\en-us\msinfo32.exe.mui.handschar
%CommonProgramFiles%\microsoft shared\office16\cmigrate.exe.handschar
%CommonProgramFiles%\microsoft shared\office16\csi.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\mso20win32client.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\mso30win32client.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\mso40uiwin32client.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\mso99lwin32client.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\msoshext.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\msoxev.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\msoxmled.exe.handschar
%CommonProgramFiles%\microsoft shared\office16\msoxmlmf.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\oregres.dll.handschar
%CommonProgramFiles%\microsoft shared\office16\cultures\office.odf.handschar
%CommonProgramFiles%\microsoft shared\office16\en-us\oregres.dll.mui.handschar
%CommonProgramFiles%\microsoft shared\vc\msdia100.dll.handschar
%CommonProgramFiles%\microsoft shared\vgx\vgx.dll.handschar
%CommonProgramFiles%\microsoft shared\vsto\vstoee.dll.handschar
%CommonProgramFiles%\microsoft shared\vsto\vstoee100.tlb.handschar
%CommonProgramFiles%\microsoft shared\vsto\vstoee90.tlb.handschar
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstoinstaller.exe.handschar
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstoloader.dll.handschar
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstomessageprovider.dll.handschar
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\vstoinstallerui.dll.handschar
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\vstoloaderui.dll.handschar
%CommonProgramFiles%\services\verisign.bmp.handschar
%CommonProgramFiles%\system\wab32.dll.handschar
%CommonProgramFiles%\system\wab32res.dll.handschar
%CommonProgramFiles%\system\ado\adojavas.inc.handschar
%CommonProgramFiles%\system\ado\adovbs.inc.handschar
%CommonProgramFiles%\system\ado\msader15.dll.handschar
%CommonProgramFiles%\system\ado\msado15.dll.handschar
%CommonProgramFiles%\system\ado\msado20.tlb.handschar
%CommonProgramFiles%\system\ado\msado21.tlb.handschar
%CommonProgramFiles%\system\ado\msado25.tlb.handschar
%CommonProgramFiles%\system\ado\msado26.tlb.handschar
%CommonProgramFiles%\system\ado\msado27.tlb.handschar
%CommonProgramFiles%\system\ado\msado28.tlb.handschar
%CommonProgramFiles%\system\ado\msado60.tlb.handschar
%CommonProgramFiles%\system\ado\msadomd.dll.handschar
%CommonProgramFiles%\system\ado\msadomd28.tlb.handschar
%CommonProgramFiles%\system\ado\msador15.dll.handschar
%CommonProgramFiles%\system\ado\msador28.tlb.handschar
%CommonProgramFiles%\system\ado\msadox.dll.handschar
%CommonProgramFiles%\system\ado\msadox28.tlb.handschar
%CommonProgramFiles%\system\ado\msadrh15.dll.handschar
%CommonProgramFiles%\system\ado\en-us\msader15.dll.mui.handschar
%CommonProgramFiles%\system\en-us\wab32res.dll.mui.handschar
%CommonProgramFiles%\system\msadc\adcjavas.inc.handschar
%CommonProgramFiles%\system\msadc\adcvbs.inc.handschar
%CommonProgramFiles%\system\msadc\msadce.dll.handschar
%CommonProgramFiles%\system\msadc\msadcer.dll.handschar
%CommonProgramFiles%\system\msadc\msadco.dll.handschar
%CommonProgramFiles%\system\msadc\msadcor.dll.handschar
%CommonProgramFiles%\system\msadc\msadds.dll.handschar
%CommonProgramFiles%\system\msadc\msaddsr.dll.handschar
%CommonProgramFiles%\system\msadc\msdaprsr.dll.handschar
%CommonProgramFiles%\system\msadc\msdaprst.dll.handschar
%CommonProgramFiles%\system\msadc\msdarem.dll.handschar
%CommonProgramFiles%\system\msadc\msdaremr.dll.handschar
%CommonProgramFiles%\system\msadc\msdfmap.dll.handschar
%CommonProgramFiles%\system\msadc\en-us\msadcer.dll.mui.handschar
%CommonProgramFiles%\system\msadc\en-us\msadcor.dll.mui.handschar
%CommonProgramFiles%\system\msadc\en-us\msaddsr.dll.mui.handschar
%CommonProgramFiles%\system\msadc\en-us\msdaprsr.dll.mui.handschar
%CommonProgramFiles%\system\msadc\en-us\msdaremr.dll.mui.handschar
%CommonProgramFiles%\system\ole db\msdaosp.dll.handschar
%CommonProgramFiles%\system\ole db\msdaps.dll.handschar
%CommonProgramFiles%\system\ole db\msdasql.dll.handschar
%CommonProgramFiles%\system\ole db\msdasqlr.dll.handschar
%CommonProgramFiles%\system\ole db\msdatl3.dll.handschar
%CommonProgramFiles%\system\ole db\msxactps.dll.handschar
%CommonProgramFiles%\system\ole db\oledb32.dll.handschar
%CommonProgramFiles%\system\ole db\oledb32r.dll.handschar
%CommonProgramFiles%\system\ole db\oledbjvs.inc.handschar
%CommonProgramFiles%\system\ole db\oledbvbs.inc.handschar
%CommonProgramFiles%\system\ole db\sqloledb.dll.handschar
%CommonProgramFiles%\system\ole db\sqloledb.rll.handschar
%CommonProgramFiles%\system\ole db\sqlxmlx.dll.handschar
%CommonProgramFiles%\system\ole db\sqlxmlx.rll.handschar
%CommonProgramFiles%\system\ole db\en-us\msdasqlr.dll.mui.handschar
%CommonProgramFiles%\system\ole db\en-us\oledb32r.dll.mui.handschar
%CommonProgramFiles%\system\ole db\en-us\sqloledb.rll.mui.handschar
%CommonProgramFiles%\system\ole db\en-us\sqlxmlx.rll.mui.handschar
%ProgramFiles%\internet explorer\extexport.exe.handschar
%ProgramFiles%\internet explorer\hmmapi.dll.handschar
%ProgramFiles%\internet explorer\iediagcmd.exe.handschar
%ProgramFiles%\internet explorer\ieinstal.exe.handschar
%ProgramFiles%\internet explorer\ielowutil.exe.handschar
%ProgramFiles%\internet explorer\ieshims.dll.handschar
%ProgramFiles%\internet explorer\iexplore.exe.handschar
%ProgramFiles%\internet explorer\sqmapi.dll.handschar
%ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.handschar
%ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.handschar
%ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.handschar
%ProgramFiles%\internet explorer\images\bing.ico.handschar
%ProgramFiles%\internet explorer\signup\install.ins.handschar
%ProgramFiles%\java\jre1.8.0_77\copyright.handschar
%ProgramFiles%\java\jre1.8.0_77\license.handschar
%ProgramFiles%\java\jre1.8.0_77\readme.txt.handschar
%ProgramFiles%\java\jre1.8.0_77\release.handschar
%ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt.handschar
%ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt.handschar
%ProgramFiles%\java\jre1.8.0_77\welcome.html.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\awt.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\bci.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\dcpr.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\decora_sse.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\deploy.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\dt_shmem.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\dt_socket.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\eula.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\fontmanager.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\fxplugins.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\glass.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\glib-lite.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\gstreamer-lite.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\hprof.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\instrument.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\j2pcsc.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\j2pkcs11.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jaas_nt.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jabswitch.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\java-rmi.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\java.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\java.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javaaccessbridge-64.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javacpl.cpl.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javacpl.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_font.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_font_t2k.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_iio.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javaw.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\javaws.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\java_crw_demo.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jawt.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jawtaccessbridge-64.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jdwp.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jfr.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jfxmedia.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jfxwebkit.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jjs.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jli.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jp2iexp.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jp2launcher.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jp2native.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jp2ssv.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jpeg.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jsdt.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jsound.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\jsoundds.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\kcms.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\keytool.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\kinit.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\klist.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\ktab.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\lcms.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\management.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\mlib_image.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\msvcp120.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\msvcr100.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\msvcr120.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\net.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\nio.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\npt.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\orbd.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\pack200.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\policytool.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\prism_common.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\prism_d3d.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\prism_sw.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\resource.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\rmid.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\rmiregistry.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\servertool.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\splashscreen.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\ssv.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\ssvagent.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\sunec.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\sunmscapi.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\t2k.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\tnameserv.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\unpack.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\unpack200.exe.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\verify.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\w2k_lsa_auth.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\windowsaccessbridge-64.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\wsdetect.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\zip.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\deployjava1.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\npdeployjava1.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\msvcr100.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\npjp2.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\server\classes.jsa.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\server\jvm.dll.handschar
%ProgramFiles%\java\jre1.8.0_77\bin\server\xusage.txt.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\accessibility.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\calendars.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\charsets.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\classlist.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\content-types.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\currency.data.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\flavormap.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.bfc.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.properties.src.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\hijrah-config-umalqura.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\javafx.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\javaws.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jce.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jfr.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jfxswt.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jsse.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jvm.hprof.txt.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\logging.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\management-agent.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\meta-index.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\net.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\plugin.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\psfont.properties.ja.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\psfontj2d.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\resources.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\rt.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\sound.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\tzdb.dat.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\tzmappings.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\amd64\jvm.cfg.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\ciexyz.pf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\gray.pf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\linear_rgb.pf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\pycc.pf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\srgb.pf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_de.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_es.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_fr.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_it.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ja.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ko.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_pt_br.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_sv.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_cn.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_hk.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_tw.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash@2x.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11-lic.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11@2x-lic.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\access-bridge-64.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\cldrdata.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\dnsns.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\jaccess.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\jfxrt.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\localedata.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\meta-index.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\nashorn.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunec.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunjce_provider.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunmscapi.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunpkcs11.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\ext\zipfs.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemibold.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemiitalic.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightitalic.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightregular.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansdemibold.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansregular.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterbold.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterregular.ttf.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\cursors.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\invalid32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copydrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copynodrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linkdrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linknodrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movedrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movenodrop32x32.gif.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\default.jfc.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\profile.jfc.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.access.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.password.template.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\management\management.properties.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\management\snmp.acl.template.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\blacklist.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\blacklisted.certs.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\cacerts.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\java.policy.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\java.security.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\javaws.policy.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\local_policy.jar.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\trusted.libraries.handschar
%ProgramFiles%\java\jre1.8.0_77\lib\security\us_export_policy.jar.handschar
%ProgramFiles%\microsoft office\office16\appsharingchromehook64.dll.handschar
%ProgramFiles%\microsoft office\office16\appsharinghookcontroller64.exe.handschar
%ProgramFiles%\microsoft office\office16\custom.propdesc.handschar
%ProgramFiles%\microsoft office\office16\grooveex.dll.handschar
%ProgramFiles%\microsoft office\office16\ieawsdc.dll.handschar
%ProgramFiles%\microsoft office\office16\mapishell.dll.handschar
%ProgramFiles%\microsoft office\office16\meetingjoinaxoc.dll.handschar
%ProgramFiles%\microsoft office\office16\mso example setup file a.txt.handschar
%ProgramFiles%\microsoft office\office16\msohev.dll.handschar
%ProgramFiles%\microsoft office\office16\msohevi.dll.handschar
%ProgramFiles%\microsoft office\office16\msohtmed.exe.handschar
%ProgramFiles%\microsoft office\office16\msoia.exe.handschar
%ProgramFiles%\microsoft office\office16\msoianetutil.dll.handschar
%ProgramFiles%\microsoft office\office16\nameext.dll.handschar
%ProgramFiles%\microsoft office\office16\ochelper.dll.handschar
%ProgramFiles%\microsoft office\office16\olkfstub.dll.handschar
%ProgramFiles%\microsoft office\office16\onbttnie.dll.handschar
%ProgramFiles%\microsoft office\office16\onbttnielinkednotes.dll.handschar
%ProgramFiles%\microsoft office\office16\onfilter.dll.handschar
%ProgramFiles%\microsoft office\office16\onlntcomlib.dll.handschar
%ProgramFiles%\microsoft office\office16\visiocustom.propdesc.handschar
%ProgramFiles%\microsoft office\office16\visshe.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\bhointl.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\grooveintlresource.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\lyncdesktopresources.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\mapishellr.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\mso example intl setup file a.txt.handschar
%ProgramFiles%\microsoft office\office16\1033\mso example intl setup file b.txt.handschar
%ProgramFiles%\microsoft office\office16\1033\ocapires.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\ochelperresource.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\ocpubres.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\ucaddinres.dll.handschar
%ProgramFiles%\microsoft office\office16\1033\uccapires.dll.handschar
%ProgramFiles%\microsoft office\office16\onenote\prnms006.inf.handschar
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote.cat.handschar
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.cat.handschar
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.inf.handschar
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote-manifest.ini.handschar
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.gpd.handschar
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.ini.handschar
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenotefilter.dll.handschar
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenotenames.gpd.handschar
%ProgramFiles%\mozilla firefox\accessible.tlb.handschar
%ProgramFiles%\mozilla firefox\accessiblehandler.dll.handschar
%ProgramFiles%\mozilla firefox\accessiblemarshal.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.handschar
%ProgramFiles%\mozilla firefox\application.ini.handschar
%ProgramFiles%\mozilla firefox\crashreporter.exe.handschar
%ProgramFiles%\mozilla firefox\crashreporter.ini.handschar
%ProgramFiles%\mozilla firefox\d3dcompiler_47.dll.handschar
%ProgramFiles%\mozilla firefox\default-browser-agent.exe.handschar
%ProgramFiles%\mozilla firefox\defaultagent.ini.handschar
%ProgramFiles%\mozilla firefox\defaultagent_localized.ini.handschar
%ProgramFiles%\mozilla firefox\dependentlibs.list.handschar
%ProgramFiles%\mozilla firefox\firefox.exe.handschar
%ProgramFiles%\mozilla firefox\firefox.exe.sig.handschar
%ProgramFiles%\mozilla firefox\freebl3.dll.handschar
%ProgramFiles%\mozilla firefox\ia2marshal.dll.handschar
%ProgramFiles%\mozilla firefox\install.log.handschar
%ProgramFiles%\mozilla firefox\installation_telemetry.json.handschar
%ProgramFiles%\mozilla firefox\lgpllibs.dll.handschar
%ProgramFiles%\mozilla firefox\libegl.dll.handschar
%ProgramFiles%\mozilla firefox\libglesv2.dll.handschar
%ProgramFiles%\mozilla firefox\locale.ini.handschar
%ProgramFiles%\mozilla firefox\maintenanceservice.exe.handschar
%ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe.handschar
%ProgramFiles%\mozilla firefox\minidump-analyzer.exe.handschar
%ProgramFiles%\mozilla firefox\mozavcodec.dll.handschar
%ProgramFiles%\mozilla firefox\mozavutil.dll.handschar
%ProgramFiles%\mozilla firefox\mozglue.dll.handschar
%ProgramFiles%\mozilla firefox\mozwer.dll.handschar
%ProgramFiles%\mozilla firefox\msvcp140.dll.handschar
%ProgramFiles%\mozilla firefox\nss3.dll.handschar
%ProgramFiles%\mozilla firefox\nssckbi.dll.handschar
%ProgramFiles%\mozilla firefox\omni.ja.handschar
%ProgramFiles%\mozilla firefox\osclientcerts.dll.handschar
%ProgramFiles%\mozilla firefox\pingsender.exe.handschar
%ProgramFiles%\mozilla firefox\platform.ini.handschar
%ProgramFiles%\mozilla firefox\plugin-container.exe.handschar
%ProgramFiles%\mozilla firefox\plugin-container.exe.sig.handschar
%ProgramFiles%\mozilla firefox\precomplete.handschar
%ProgramFiles%\mozilla firefox\qipcap64.dll.handschar
%ProgramFiles%\mozilla firefox\removed-files.handschar
%ProgramFiles%\mozilla firefox\softokn3.dll.handschar
%ProgramFiles%\mozilla firefox\ucrtbase.dll.handschar
%ProgramFiles%\mozilla firefox\update-settings.ini.handschar
%ProgramFiles%\mozilla firefox\updater.exe.handschar
%ProgramFiles%\mozilla firefox\updater.ini.handschar
%ProgramFiles%\mozilla firefox\vcruntime140.dll.handschar
%ProgramFiles%\mozilla firefox\xul.dll.handschar
%ProgramFiles%\mozilla firefox\xul.dll.sig.handschar
%ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.handschar
%ProgramFiles%\mozilla firefox\browser\omni.ja.handschar
%ProgramFiles%\mozilla firefox\browser\override.ini.handschar
%ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\browser\features\pictureinpicture@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.handschar
%ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js.handschar
%ProgramFiles%\mozilla firefox\distibution\policies.json.handschar
%ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.handschar
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.handschar
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig.handschar
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.handschar
%ProgramFiles%\mozilla firefox\uninstall\helper.exe.handschar
%ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.handschar
%ProgramFiles%\mozilla firefox\uninstall\uninstall.log.handschar
%ProgramFiles%\mozilla thunderbird\accessible.tlb.handschar
%ProgramFiles%\mozilla thunderbird\accessiblehandler.dll.handschar
%ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\application.ini.handschar
%ProgramFiles%\mozilla thunderbird\crashreporter.exe.handschar
%ProgramFiles%\mozilla thunderbird\crashreporter.ini.handschar
%ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll.handschar
%ProgramFiles%\mozilla thunderbird\dependentlibs.list.handschar
%ProgramFiles%\mozilla thunderbird\freebl3.dll.handschar
%ProgramFiles%\mozilla thunderbird\ia2marshal.dll.handschar
%ProgramFiles%\mozilla thunderbird\install.log.handschar
%ProgramFiles%\mozilla thunderbird\ldap60.dll.handschar
%ProgramFiles%\mozilla thunderbird\ldif60.dll.handschar
%ProgramFiles%\mozilla thunderbird\lgpllibs.dll.handschar
%ProgramFiles%\mozilla thunderbird\libegl.dll.handschar
%ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll.handschar
%ProgramFiles%\mozilla thunderbird\libglesv2.dll.handschar
%ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\libotr-5.dll.handschar
%ProgramFiles%\mozilla thunderbird\libssp-0.dll.handschar
%ProgramFiles%\mozilla thunderbird\maintenanceservice.exe.handschar
%ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe.handschar
%ProgramFiles%\mozilla thunderbird\mapiproxy.dll.handschar
%ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll.handschar
%ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe.handschar
%ProgramFiles%\mozilla thunderbird\mozglue.dll.handschar
%ProgramFiles%\mozilla thunderbird\mozmapi32.dll.handschar
%ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll.handschar
%ProgramFiles%\mozilla thunderbird\msvcp140.dll.handschar
%ProgramFiles%\mozilla thunderbird\nss3.dll.handschar
%ProgramFiles%\mozilla thunderbird\nssckbi.dll.handschar
%ProgramFiles%\mozilla thunderbird\omni.ja.handschar
%ProgramFiles%\mozilla thunderbird\osclientcerts.dll.handschar
%ProgramFiles%\mozilla thunderbird\pingsender.exe.handschar
%ProgramFiles%\mozilla thunderbird\platform.ini.handschar
%ProgramFiles%\mozilla thunderbird\plugin-container.exe.handschar
%ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe.handschar
%ProgramFiles%\mozilla thunderbird\precomplete.handschar
%ProgramFiles%\mozilla thunderbird\prldap60.dll.handschar
%ProgramFiles%\mozilla thunderbird\qipcap64.dll.handschar
%ProgramFiles%\mozilla thunderbird\removed-files.handschar
%ProgramFiles%\mozilla thunderbird\rnp.dll.handschar
%ProgramFiles%\mozilla thunderbird\softokn3.dll.handschar
%ProgramFiles%\mozilla thunderbird\thunderbird.exe.handschar
%ProgramFiles%\mozilla thunderbird\ucrtbase.dll.handschar
%ProgramFiles%\mozilla thunderbird\update-settings.ini.handschar
%ProgramFiles%\mozilla thunderbird\updater.exe.handschar
%ProgramFiles%\mozilla thunderbird\updater.ini.handschar
%ProgramFiles%\mozilla thunderbird\vcruntime140.dll.handschar
%ProgramFiles%\mozilla thunderbird\wsenable.exe.handschar
%ProgramFiles%\mozilla thunderbird\xul.dll.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-alarm-dialog.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-dialog.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-summary-dialog.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-dialog.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-summary-dialog.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\messengerwindow.ico.handschar
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\msgcomposewindow.ico.handschar
%ProgramFiles%\mozilla thunderbird\defaults\pref\channel-prefs.js.handschar
%ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.handschar
%ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.handschar
%ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.handschar
%ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.handschar
%ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.handschar
%ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.handschar
%ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.handschar
%ProgramFiles%\mozilla thunderbird\uninstall\helper.exe.handschar
%ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.handschar
%ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.handschar
%ProgramFiles%\windows defender advanced threat protection\mssense.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\sensecncproxy.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\sensecncps.dll.handschar
%ProgramFiles%\windows defender advanced threat protection\senseir.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\sensemirror.dll.handschar
%ProgramFiles%\windows defender advanced threat protection\sensendr.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\sensesampleuploader.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\sensesc.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\watpcsp.dll.handschar
%ProgramFiles%\windows defender advanced threat protection\classification\mce.dll.handschar
%ProgramFiles%\windows defender advanced threat protection\classification\mpgear.dll.handschar
%ProgramFiles%\windows defender advanced threat protection\classification\sensece.exe.handschar
%ProgramFiles%\windows defender advanced threat protection\en-us\mssense.exe.mui.handschar
%ProgramFiles%\windows defender.bak\ammonitoringinstall.mof.handschar
%ProgramFiles%\windows defender.bak\ammonitoringprovider.dll.handschar
%ProgramFiles%\windows defender.bak\amstatusinstall.mof.handschar
%ProgramFiles%\windows defender.bak\clientwmiinstall.mof.handschar
%ProgramFiles%\windows defender.bak\configsecuritypolicy.exe.handschar
%ProgramFiles%\windows defender.bak\defendercsp.dll.handschar
%ProgramFiles%\windows defender.bak\eppmanifest.dll.handschar
%ProgramFiles%\windows defender.bak\fepunregister.mof.handschar
%ProgramFiles%\windows defender.bak\mpasdesc.dll.handschar
%ProgramFiles%\windows defender.bak\mpazsubmit.dll.handschar
%ProgramFiles%\windows defender.bak\mpclient.dll.handschar
%ProgramFiles%\windows defender.bak\mpcmdrun.exe.handschar
%ProgramFiles%\windows defender.bak\mpcommu.dll.handschar
%ProgramFiles%\windows defender.bak\mpevmsg.dll.handschar
%ProgramFiles%\windows defender.bak\mpoav.dll.handschar
%ProgramFiles%\windows defender.bak\mpprovider.dll.handschar
%ProgramFiles%\windows defender.bak\mprtp.dll.handschar
%ProgramFiles%\windows defender.bak\mpsvc.dll.handschar
%ProgramFiles%\windows defender.bak\msmpcom.dll.handschar
%ProgramFiles%\windows defender.bak\msmpeng.exe.handschar
%ProgramFiles%\windows defender.bak\msmplics.dll.handschar
%ProgramFiles%\windows defender.bak\msmpres.dll.handschar
%ProgramFiles%\windows defender.bak\nissrv.exe.handschar
%ProgramFiles%\windows defender.bak\protectionmanagement.dll.handschar
%ProgramFiles%\windows defender.bak\protectionmanagement.mof.handschar
%ProgramFiles%\windows defender.bak\protectionmanagement_uninstall.mof.handschar
%ProgramFiles%\windows defender.bak\shellext.dll.handschar
%ProgramFiles%\windows defender.bak\thirdpartynotices.txt.handschar
%ProgramFiles%\windows defender.bak\en-us\eppmanifest.dll.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\mpasdesc.dll.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\mpevmsg.dll.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\msmpres.dll.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\offlinescannershell.exe.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement.dll.mui.handschar
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement.mfl.handschar
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement_uninstall.mfl.handschar
%ProgramFiles%\windows defender.bak\en-us\shellext.dll.mui.handschar
%ProgramFiles%\windows defender.bak\offline\eppmanifest.dll.handschar
%ProgramFiles%\windows defender.bak\offline\msmplics.dll.handschar
%ProgramFiles%\windows defender.bak\offline\offlinescannershell.exe.handschar
%ProgramFiles%\windows mail\wab.exe.handschar
%ProgramFiles%\windows mail\wabimp.dll.handschar
%ProgramFiles%\windows mail\wabmig.exe.handschar
%ProgramFiles%\windows media player\mpvis.dll.handschar
%ProgramFiles%\windows media player\setup_wm.exe.handschar
%ProgramFiles%\windows media player\wmlaunch.exe.handschar
%ProgramFiles%\windows media player\wmpconfig.exe.handschar
%ProgramFiles%\windows media player\wmplayer.exe.handschar
%ProgramFiles%\windows media player\wmpmediasharing.dll.handschar
%ProgramFiles%\windows media player\wmpnetwk.exe.handschar
%ProgramFiles%\windows media player\wmpnscfg.exe.handschar
%ProgramFiles%\windows media player\wmpnssci.dll.handschar
%ProgramFiles%\windows media player\wmpnssui.dll.handschar
%ProgramFiles%\windows media player\wmprph.exe.handschar
%ProgramFiles%\windows media player\wmpshare.exe.handschar
%ProgramFiles%\windows media player\en-us\mpvis.dll.mui.handschar
%ProgramFiles%\windows media player\en-us\setup_wm.exe.mui.handschar
%ProgramFiles%\windows media player\en-us\wmlaunch.exe.mui.handschar
%ProgramFiles%\windows media player\en-us\wmplayer.exe.mui.handschar
%ProgramFiles%\windows media player\en-us\wmpmediasharing.dll.mui.handschar
%ProgramFiles%\windows media player\en-us\wmpnetwk.exe.mui.handschar
%ProgramFiles%\windows media player\en-us\wmpnscfg.exe.mui.handschar
%ProgramFiles%\windows media player\en-us\wmpnssci.dll.mui.handschar
%ProgramFiles%\windows media player\en-us\wmpnssui.dll.mui.handschar
%ProgramFiles%\windows media player\skins\revert.wmz.handschar
%ProgramFiles%\windows multimedia platform\sqmapi.dll.handschar
%ProgramFiles%\windows nt\accessories\wordpad.exe.handschar
%ProgramFiles%\windows nt\accessories\wordpadfilter.dll.handschar
%ProgramFiles%\windows nt\accessories\en-us\wordpad.exe.mui.handschar
%ProgramFiles%\windows nt\tabletextservice\tabletextservice.dll.handschar
%ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.handschar
%ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.handschar
%ProgramFiles%\windows nt\tabletextservice\tabletextservicetigrinya.txt.handschar
%ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.handschar
%ProgramFiles%\windows nt\tabletextservice\en-us\tabletextservice.dll.mui.handschar
%ProgramFiles%\windows photo viewer\imagingdevices.exe.handschar
%ProgramFiles%\windows photo viewer\imagingengine.dll.handschar
%ProgramFiles%\windows photo viewer\photoacq.dll.handschar
%ProgramFiles%\windows photo viewer\photobase.dll.handschar
%ProgramFiles%\windows photo viewer\photoviewer.dll.handschar
%ProgramFiles%\windows photo viewer\en-us\imagingdevices.exe.mui.handschar
%ProgramFiles%\windows photo viewer\en-us\photoacq.dll.mui.handschar
%ProgramFiles%\windows photo viewer\en-us\photoviewer.dll.mui.handschar
%ProgramFiles%\windows portable devices\sqmapi.dll.handschar
%ProgramFiles%\windows security\browsercore\browsercore.exe.handschar
%ProgramFiles%\windows security\browsercore\manifest.json.handschar
%ProgramFiles%\windows security\browsercore\en-us\browsercore.exe.mui.handschar

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Сетевая активность

Подключается к

'fi###.catbox.moe':443

TCP

Другие

'fi###.catbox.moe':443

UDP

DNS ASK fi###.catbox.moe

Другое

Перезапускает анализируемый образец

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /c "ver" (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней