Trojan.Encoder.43870

Technical Information

Modifies file system

Creates the following files

%TEMP%\_mei22482\vcruntime140.dll
%TEMP%\_mei22482\_bz2.pyd
%TEMP%\_mei22482\_cffi_backend.cp38-win_amd64.pyd
%TEMP%\_mei22482\_hashlib.pyd
%TEMP%\_mei22482\_lzma.pyd
%TEMP%\_mei22482\_socket.pyd
%TEMP%\_mei22482\api-ms-win-core-console-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-datetime-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-debug-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-errorhandling-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-file-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-file-l1-2-0.dll
%TEMP%\_mei22482\api-ms-win-core-file-l2-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-handle-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-heap-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-interlocked-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-libraryloader-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-localization-l1-2-0.dll
%TEMP%\_mei22482\api-ms-win-core-memory-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-namedpipe-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-processenvironment-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-processthreads-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-processthreads-l1-1-1.dll
%TEMP%\_mei22482\api-ms-win-core-profile-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-rtlsupport-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-string-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-synch-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-synch-l1-2-0.dll
%TEMP%\_mei22482\api-ms-win-core-sysinfo-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-timezone-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-core-util-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-conio-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-convert-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-environment-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-filesystem-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-heap-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-locale-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-math-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-process-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-runtime-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-stdio-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-string-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-time-l1-1-0.dll
%TEMP%\_mei22482\api-ms-win-crt-utility-l1-1-0.dll
%TEMP%\_mei22482\base_library.zip
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\record
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei22482\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei22482\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei22482\libcrypto-1_1.dll
%TEMP%\_mei22482\python3.dll
%TEMP%\_mei22482\python38.dll
%TEMP%\_mei22482\select.pyd
%TEMP%\_mei22482\ucrtbase.dll
%TEMP%\_mei22482\unicodedata.pyd
C:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\desktop.ini.encrypted
<Full path to file>.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\office64ww.msi.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\office64ww.xml.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\ose.exe.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\osetup.dll.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\owow64ww.cab.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\pidgenx.dll.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\proplusww.msi.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\proplusww.xml.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww.cab.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww2.cab.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.dll.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.exe.encrypted
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excellr.cab.encrypted
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excelmui.msi.encrypted
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excelmui.xml.encrypted
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.msi.encrypted
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.xml.encrypted
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\pptlr.cab.encrypted
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publishermui.msi.encrypted
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publishermui.xml.encrypted
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publr.cab.encrypted
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlklr.cab.encrypted
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlookmui.msi.encrypted
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlookmui.xml.encrypted
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordlr.cab.encrypted
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordmui.msi.encrypted
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordmui.xml.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proofing.msi.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proofing.xml.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.cab.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.msi.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.xml.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.cab.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.msi.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.xml.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.cab.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.msi.encrypted
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.xml.encrypted
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\inflr.cab.encrypted
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\infopathmui.msi.encrypted
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\infopathmui.xml.encrypted
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.cab.encrypted
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.msi.encrypted
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\dcfmui.xml.encrypted
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onenotemui.msi.encrypted
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onenotemui.xml.encrypted
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\onotelr.cab.encrypted
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovelr.cab.encrypted
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovemui.msi.encrypted
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\groovemui.xml.encrypted
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.cab.encrypted
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.msi.encrypted
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\osmmui.xml.encrypted
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.cab.encrypted
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.msi.encrypted
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\osmuxmui.xml.encrypted
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\branding.xml.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officelr.cab.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemui.msi.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemui.xml.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemuiset.msi.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\officemuiset.xml.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\offsetlr.cab.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\osetupui.dll.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\pss10r.chm.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\setup.chm.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\shellui.mst.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64mui.msi.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64mui.xml.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64muiset.msi.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\office64muiset.xml.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\owow64lr.cab.encrypted
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\accessmuiset.msi.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\accessmuiset.xml.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\accessmui.msi.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\accessmui.xml.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\acclr.cab.encrypted
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\branding.xml.encrypted
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.cab.encrypted
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.msi.encrypted
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\lyncmui.xml.encrypted
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\setup.xml.encrypted
%ProgramFiles%\desktop.ini.encrypted
%CommonProgramFiles%\microsoft shared\filters\msgfilt.dll.encrypted
%CommonProgramFiles%\microsoft shared\filters\odffilt.dll.encrypted
%CommonProgramFiles%\microsoft shared\filters\offfiltx.dll.encrypted
%CommonProgramFiles%\microsoft shared\filters\visfilt.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\alphabet.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\content.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\hwrcommonlm.dat.encrypted
%CommonProgramFiles%\microsoft shared\ink\hwrenclm.dat.encrypted
%CommonProgramFiles%\microsoft shared\ink\hwrenuslm.dat.encrypted
%CommonProgramFiles%\microsoft shared\ink\hwrlatinlm.dat.encrypted
%CommonProgramFiles%\microsoft shared\ink\hwrusash.dat.encrypted
%CommonProgramFiles%\microsoft shared\ink\inkdiv.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\inkobj.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\inputpersonalization.exe.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsar.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipscat.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipschs.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipscht.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipscsy.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsdan.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsdeu.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsel.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsen.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsesp.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsfin.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsfra.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipshe.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipshi.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipshrv.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsid.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsita.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsjpn.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipskor.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsmigrationplugin.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsnld.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsnor.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsplk.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsplugin.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsptb.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsptg.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsrom.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipsrus.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipssrb.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipssrl.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipssve.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\ipstr.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\micaut.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\microsoft.ink.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\mip.exe.encrypted
%CommonProgramFiles%\microsoft shared\ink\mraut.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\mshwgst.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\mshwlatin.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\rtscom.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\shapecollector.exe.encrypted
%CommonProgramFiles%\microsoft shared\ink\tabipsps.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tabskb.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tabtip.exe.encrypted
%CommonProgramFiles%\microsoft shared\ink\thirdpartynotices.mshwlatin.txt.encrypted
%CommonProgramFiles%\microsoft shared\ink\tipres.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tipresx.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tipskins.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tiptsf.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\tpcps.dll.encrypted
%CommonProgramFiles%\microsoft shared\ink\ar-sa\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\bg-bg\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\cs-cz\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\da-dk\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\de-de\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\el-gr\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-gb\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\inkobj.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\inputpersonalization.exe.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\micaut.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\mip.exe.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\mshwlatin.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\rtscom.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\shapecollector.exe.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\tabskb.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\tabtip.exe.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\tipres.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\en-us\tiptsf.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\es-es\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\es-mx\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\et-ee\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\fi-fi\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\fr-ca\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\fr-fr\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\insert.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskclearui.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknav.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\insert\insertbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\ea.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\basealtgr_rtl.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_altgr.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_ca.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_heb.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_jpn.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_kor.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\base_rtl.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\ja-jp.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\ko-kr.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskclearui\oskclearuibase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\oskpredbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\ea-sym.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\symbase.xml.encrypted
%CommonProgramFiles%\microsoft shared\ink\he-il\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\hr-hr\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\hu-hu\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\it-it\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\ja-jp\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\ko-kr\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\lt-lt\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\lv-lv\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\nb-no\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\nl-nl\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\pl-pl\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\pt-br\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\pt-pt\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\ro-ro\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\ru-ru\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\sk-sk\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\sl-si\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\sr-latn-rs\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\sv-se\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\th-th\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\tr-tr\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\uk-ua\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\zh-cn\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\ink\zh-tw\tipresx.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\msinfo\msinfo32.exe.encrypted
%CommonProgramFiles%\microsoft shared\msinfo\en-us\msinfo32.exe.mui.encrypted
%CommonProgramFiles%\microsoft shared\office16\cmigrate.exe.encrypted
%CommonProgramFiles%\microsoft shared\office16\csi.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\mso20win32client.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\mso30win32client.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\mso40uiwin32client.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\mso99lwin32client.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\msoshext.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\msoxev.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\msoxmled.exe.encrypted
%CommonProgramFiles%\microsoft shared\office16\msoxmlmf.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\oregres.dll.encrypted
%CommonProgramFiles%\microsoft shared\office16\cultures\office.odf.encrypted
%CommonProgramFiles%\microsoft shared\office16\en-us\oregres.dll.mui.encrypted
%CommonProgramFiles%\microsoft shared\vc\msdia100.dll.encrypted
%CommonProgramFiles%\microsoft shared\vgx\vgx.dll.encrypted
%CommonProgramFiles%\microsoft shared\vsto\vstoee.dll.encrypted
%CommonProgramFiles%\microsoft shared\vsto\vstoee100.tlb.encrypted
%CommonProgramFiles%\microsoft shared\vsto\vstoee90.tlb.encrypted
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstoinstaller.exe.encrypted
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstoloader.dll.encrypted
%CommonProgramFiles%\microsoft shared\vsto\10.0\vstomessageprovider.dll.encrypted
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\vstoinstallerui.dll.encrypted
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\vstoloaderui.dll.encrypted
%CommonProgramFiles%\services\verisign.bmp.encrypted
%CommonProgramFiles%\system\wab32.dll.encrypted
%CommonProgramFiles%\system\wab32res.dll.encrypted
%CommonProgramFiles%\system\ado\adojavas.inc.encrypted
%CommonProgramFiles%\system\ado\adovbs.inc.encrypted
%CommonProgramFiles%\system\ado\msader15.dll.encrypted
%CommonProgramFiles%\system\ado\msado15.dll.encrypted
%CommonProgramFiles%\system\ado\msado20.tlb.encrypted
%CommonProgramFiles%\system\ado\msado21.tlb.encrypted
%CommonProgramFiles%\system\ado\msado25.tlb.encrypted
%CommonProgramFiles%\system\ado\msado26.tlb.encrypted
%CommonProgramFiles%\system\ado\msado27.tlb.encrypted
%CommonProgramFiles%\system\ado\msado28.tlb.encrypted
%CommonProgramFiles%\system\ado\msado60.tlb.encrypted
%CommonProgramFiles%\system\ado\msadomd.dll.encrypted
%CommonProgramFiles%\system\ado\msadomd28.tlb.encrypted
%CommonProgramFiles%\system\ado\msador15.dll.encrypted
%CommonProgramFiles%\system\ado\msador28.tlb.encrypted
%CommonProgramFiles%\system\ado\msadox.dll.encrypted
%CommonProgramFiles%\system\ado\msadox28.tlb.encrypted
%CommonProgramFiles%\system\ado\msadrh15.dll.encrypted
%CommonProgramFiles%\system\ado\en-us\msader15.dll.mui.encrypted
%CommonProgramFiles%\system\en-us\wab32res.dll.mui.encrypted
%CommonProgramFiles%\system\msadc\adcjavas.inc.encrypted
%CommonProgramFiles%\system\msadc\adcvbs.inc.encrypted
%CommonProgramFiles%\system\msadc\msadce.dll.encrypted
%CommonProgramFiles%\system\msadc\msadcer.dll.encrypted
%CommonProgramFiles%\system\msadc\msadco.dll.encrypted
%CommonProgramFiles%\system\msadc\msadcor.dll.encrypted
%CommonProgramFiles%\system\msadc\msadds.dll.encrypted
%CommonProgramFiles%\system\msadc\msaddsr.dll.encrypted
%CommonProgramFiles%\system\msadc\msdaprsr.dll.encrypted
%CommonProgramFiles%\system\msadc\msdaprst.dll.encrypted
%CommonProgramFiles%\system\msadc\msdarem.dll.encrypted
%CommonProgramFiles%\system\msadc\msdaremr.dll.encrypted
%CommonProgramFiles%\system\msadc\msdfmap.dll.encrypted
%CommonProgramFiles%\system\msadc\en-us\msadcer.dll.mui.encrypted
%CommonProgramFiles%\system\msadc\en-us\msadcor.dll.mui.encrypted
%CommonProgramFiles%\system\msadc\en-us\msaddsr.dll.mui.encrypted
%CommonProgramFiles%\system\msadc\en-us\msdaprsr.dll.mui.encrypted
%CommonProgramFiles%\system\msadc\en-us\msdaremr.dll.mui.encrypted
%CommonProgramFiles%\system\ole db\msdaosp.dll.encrypted
%CommonProgramFiles%\system\ole db\msdaps.dll.encrypted
%CommonProgramFiles%\system\ole db\msdasql.dll.encrypted
%CommonProgramFiles%\system\ole db\msdasqlr.dll.encrypted
%CommonProgramFiles%\system\ole db\msdatl3.dll.encrypted
%CommonProgramFiles%\system\ole db\msxactps.dll.encrypted
%CommonProgramFiles%\system\ole db\oledb32.dll.encrypted
%CommonProgramFiles%\system\ole db\oledb32r.dll.encrypted
%CommonProgramFiles%\system\ole db\oledbjvs.inc.encrypted
%CommonProgramFiles%\system\ole db\oledbvbs.inc.encrypted
%CommonProgramFiles%\system\ole db\sqloledb.dll.encrypted
%CommonProgramFiles%\system\ole db\sqloledb.rll.encrypted
%CommonProgramFiles%\system\ole db\sqlxmlx.dll.encrypted
%CommonProgramFiles%\system\ole db\sqlxmlx.rll.encrypted
%CommonProgramFiles%\system\ole db\en-us\msdasqlr.dll.mui.encrypted
%CommonProgramFiles%\system\ole db\en-us\oledb32r.dll.mui.encrypted
%CommonProgramFiles%\system\ole db\en-us\sqloledb.rll.mui.encrypted
%CommonProgramFiles%\system\ole db\en-us\sqlxmlx.rll.mui.encrypted
%ProgramFiles%\internet explorer\extexport.exe.encrypted
%ProgramFiles%\internet explorer\hmmapi.dll.encrypted
%ProgramFiles%\internet explorer\iediagcmd.exe.encrypted
%ProgramFiles%\internet explorer\ieinstal.exe.encrypted
%ProgramFiles%\internet explorer\ielowutil.exe.encrypted
%ProgramFiles%\internet explorer\ieshims.dll.encrypted
%ProgramFiles%\internet explorer\iexplore.exe.encrypted
%ProgramFiles%\internet explorer\sqmapi.dll.encrypted
%ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.encrypted
%ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.encrypted
%ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.encrypted
%ProgramFiles%\internet explorer\images\bing.ico.encrypted
%ProgramFiles%\internet explorer\signup\install.ins.encrypted
%ProgramFiles%\java\jre1.8.0_77\copyright.encrypted
%ProgramFiles%\java\jre1.8.0_77\license.encrypted
%ProgramFiles%\java\jre1.8.0_77\readme.txt.encrypted
%ProgramFiles%\java\jre1.8.0_77\release.encrypted
%ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt.encrypted
%ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt.encrypted
%ProgramFiles%\java\jre1.8.0_77\welcome.html.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\awt.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\bci.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\dcpr.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\decora_sse.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\deploy.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\dt_shmem.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\dt_socket.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\eula.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\fontmanager.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\fxplugins.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\glass.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\glib-lite.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\gstreamer-lite.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\hprof.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\instrument.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\j2pcsc.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\j2pkcs11.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jaas_nt.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jabswitch.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\java-rmi.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\java.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\java.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javaaccessbridge-64.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javacpl.cpl.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javacpl.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_font.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_font_t2k.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javafx_iio.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javaw.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\javaws.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\java_crw_demo.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jawt.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jawtaccessbridge-64.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jdwp.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jfr.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jfxmedia.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jfxwebkit.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jjs.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jli.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jp2iexp.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jp2launcher.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jp2native.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jp2ssv.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jpeg.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jsdt.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jsound.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\jsoundds.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\kcms.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\keytool.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\kinit.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\klist.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\ktab.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\lcms.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\management.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\mlib_image.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\msvcp120.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\msvcr100.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\msvcr120.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\net.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\nio.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\npt.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\orbd.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\pack200.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\policytool.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\prism_common.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\prism_d3d.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\prism_sw.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\resource.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\rmid.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\rmiregistry.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\servertool.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\splashscreen.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\ssv.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\ssvagent.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\sunec.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\sunmscapi.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\t2k.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\tnameserv.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\unpack.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\unpack200.exe.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\verify.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\w2k_lsa_auth.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\windowsaccessbridge-64.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\wsdetect.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\zip.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\deployjava1.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\npdeployjava1.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\msvcr100.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\npjp2.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\server\classes.jsa.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\server\jvm.dll.encrypted
%ProgramFiles%\java\jre1.8.0_77\bin\server\xusage.txt.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\accessibility.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\calendars.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\charsets.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\classlist.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\content-types.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\currency.data.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\flavormap.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.bfc.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.properties.src.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\hijrah-config-umalqura.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\javafx.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\javaws.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jce.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jfr.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jfxswt.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jsse.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jvm.hprof.txt.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\logging.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\management-agent.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\meta-index.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\net.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\plugin.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\psfont.properties.ja.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\psfontj2d.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\resources.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\rt.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\sound.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\tzdb.dat.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\tzmappings.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\amd64\jvm.cfg.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\ciexyz.pf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\gray.pf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\linear_rgb.pf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\pycc.pf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\srgb.pf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_de.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_es.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_fr.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_it.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ja.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ko.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_pt_br.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_sv.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_cn.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_hk.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_tw.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash@2x.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11-lic.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11@2x-lic.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\access-bridge-64.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\cldrdata.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\dnsns.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\jaccess.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\jfxrt.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\localedata.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\meta-index.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\nashorn.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunec.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunjce_provider.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunmscapi.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\sunpkcs11.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\ext\zipfs.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemibold.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemiitalic.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightitalic.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightregular.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansdemibold.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansregular.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterbold.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterregular.ttf.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\cursors.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\invalid32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copydrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copynodrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linkdrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linknodrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movedrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movenodrop32x32.gif.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\default.jfc.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\profile.jfc.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.access.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.password.template.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\management\management.properties.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\management\snmp.acl.template.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\blacklist.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\blacklisted.certs.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\cacerts.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\java.policy.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\java.security.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\javaws.policy.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\local_policy.jar.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\trusted.libraries.encrypted
%ProgramFiles%\java\jre1.8.0_77\lib\security\us_export_policy.jar.encrypted
%ProgramFiles%\microsoft office\office16\appsharingchromehook64.dll.encrypted
%ProgramFiles%\microsoft office\office16\appsharinghookcontroller64.exe.encrypted
%ProgramFiles%\microsoft office\office16\custom.propdesc.encrypted
%ProgramFiles%\microsoft office\office16\grooveex.dll.encrypted
%ProgramFiles%\microsoft office\office16\ieawsdc.dll.encrypted
%ProgramFiles%\microsoft office\office16\mapishell.dll.encrypted
%ProgramFiles%\microsoft office\office16\meetingjoinaxoc.dll.encrypted
%ProgramFiles%\microsoft office\office16\mso example setup file a.txt.encrypted
%ProgramFiles%\microsoft office\office16\msohev.dll.encrypted
%ProgramFiles%\microsoft office\office16\msohevi.dll.encrypted
%ProgramFiles%\microsoft office\office16\msohtmed.exe.encrypted
%ProgramFiles%\microsoft office\office16\msoia.exe.encrypted
%ProgramFiles%\microsoft office\office16\msoianetutil.dll.encrypted
%ProgramFiles%\microsoft office\office16\nameext.dll.encrypted
%ProgramFiles%\microsoft office\office16\ochelper.dll.encrypted
%ProgramFiles%\microsoft office\office16\olkfstub.dll.encrypted
%ProgramFiles%\microsoft office\office16\onbttnie.dll.encrypted
%ProgramFiles%\microsoft office\office16\onbttnielinkednotes.dll.encrypted
%ProgramFiles%\microsoft office\office16\onfilter.dll.encrypted
%ProgramFiles%\microsoft office\office16\onlntcomlib.dll.encrypted
%ProgramFiles%\microsoft office\office16\visiocustom.propdesc.encrypted
%ProgramFiles%\microsoft office\office16\visshe.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\bhointl.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\grooveintlresource.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\lyncdesktopresources.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\mapishellr.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\mso example intl setup file a.txt.encrypted
%ProgramFiles%\microsoft office\office16\1033\mso example intl setup file b.txt.encrypted
%ProgramFiles%\microsoft office\office16\1033\ocapires.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\ochelperresource.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\ocpubres.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\ucaddinres.dll.encrypted
%ProgramFiles%\microsoft office\office16\1033\uccapires.dll.encrypted
%ProgramFiles%\microsoft office\office16\onenote\prnms006.inf.encrypted
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote.cat.encrypted
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.cat.encrypted
%ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.inf.encrypted
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote-manifest.ini.encrypted
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.gpd.encrypted
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.ini.encrypted
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenotefilter.dll.encrypted
%ProgramFiles%\microsoft office\office16\onenote\sendtoonenotenames.gpd.encrypted
%ProgramFiles%\mozilla firefox\accessible.tlb.encrypted
%ProgramFiles%\mozilla firefox\accessiblehandler.dll.encrypted
%ProgramFiles%\mozilla firefox\accessiblemarshal.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla firefox\application.ini.encrypted
%ProgramFiles%\mozilla firefox\crashreporter.exe.encrypted
%ProgramFiles%\mozilla firefox\crashreporter.ini.encrypted
%ProgramFiles%\mozilla firefox\d3dcompiler_47.dll.encrypted
%ProgramFiles%\mozilla firefox\default-browser-agent.exe.encrypted
%ProgramFiles%\mozilla firefox\defaultagent.ini.encrypted
%ProgramFiles%\mozilla firefox\defaultagent_localized.ini.encrypted
%ProgramFiles%\mozilla firefox\dependentlibs.list.encrypted
%ProgramFiles%\mozilla firefox\firefox.exe.encrypted
%ProgramFiles%\mozilla firefox\firefox.exe.sig.encrypted
%ProgramFiles%\mozilla firefox\freebl3.dll.encrypted
%ProgramFiles%\mozilla firefox\ia2marshal.dll.encrypted
%ProgramFiles%\mozilla firefox\install.log.encrypted
%ProgramFiles%\mozilla firefox\installation_telemetry.json.encrypted
%ProgramFiles%\mozilla firefox\lgpllibs.dll.encrypted
%ProgramFiles%\mozilla firefox\libegl.dll.encrypted
%ProgramFiles%\mozilla firefox\libglesv2.dll.encrypted
%ProgramFiles%\mozilla firefox\locale.ini.encrypted
%ProgramFiles%\mozilla firefox\maintenanceservice.exe.encrypted
%ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe.encrypted
%ProgramFiles%\mozilla firefox\minidump-analyzer.exe.encrypted
%ProgramFiles%\mozilla firefox\mozavcodec.dll.encrypted
%ProgramFiles%\mozilla firefox\mozavutil.dll.encrypted
%ProgramFiles%\mozilla firefox\mozglue.dll.encrypted
%ProgramFiles%\mozilla firefox\mozwer.dll.encrypted
%ProgramFiles%\mozilla firefox\msvcp140.dll.encrypted
%ProgramFiles%\mozilla firefox\nss3.dll.encrypted
%ProgramFiles%\mozilla firefox\nssckbi.dll.encrypted
%ProgramFiles%\mozilla firefox\omni.ja.encrypted
%ProgramFiles%\mozilla firefox\osclientcerts.dll.encrypted
%ProgramFiles%\mozilla firefox\pingsender.exe.encrypted
%ProgramFiles%\mozilla firefox\platform.ini.encrypted
%ProgramFiles%\mozilla firefox\plugin-container.exe.encrypted
%ProgramFiles%\mozilla firefox\plugin-container.exe.sig.encrypted
%ProgramFiles%\mozilla firefox\precomplete.encrypted
%ProgramFiles%\mozilla firefox\qipcap64.dll.encrypted
%ProgramFiles%\mozilla firefox\removed-files.encrypted
%ProgramFiles%\mozilla firefox\softokn3.dll.encrypted
%ProgramFiles%\mozilla firefox\ucrtbase.dll.encrypted
%ProgramFiles%\mozilla firefox\update-settings.ini.encrypted
%ProgramFiles%\mozilla firefox\updater.exe.encrypted
%ProgramFiles%\mozilla firefox\updater.ini.encrypted
%ProgramFiles%\mozilla firefox\vcruntime140.dll.encrypted
%ProgramFiles%\mozilla firefox\xul.dll.encrypted
%ProgramFiles%\mozilla firefox\xul.dll.sig.encrypted
%ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.encrypted
%ProgramFiles%\mozilla firefox\browser\omni.ja.encrypted
%ProgramFiles%\mozilla firefox\browser\override.ini.encrypted
%ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\browser\features\pictureinpicture@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.encrypted
%ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js.encrypted
%ProgramFiles%\mozilla firefox\distibution\policies.json.encrypted
%ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.encrypted
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.encrypted
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig.encrypted
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.encrypted
%ProgramFiles%\mozilla firefox\uninstall\helper.exe.encrypted
%ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.encrypted
%ProgramFiles%\mozilla firefox\uninstall\uninstall.log.encrypted
%ProgramFiles%\mozilla thunderbird\accessible.tlb.encrypted
%ProgramFiles%\mozilla thunderbird\accessiblehandler.dll.encrypted
%ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\application.ini.encrypted
%ProgramFiles%\mozilla thunderbird\crashreporter.exe.encrypted
%ProgramFiles%\mozilla thunderbird\crashreporter.ini.encrypted
%ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll.encrypted
%ProgramFiles%\mozilla thunderbird\dependentlibs.list.encrypted
%ProgramFiles%\mozilla thunderbird\freebl3.dll.encrypted
%ProgramFiles%\mozilla thunderbird\ia2marshal.dll.encrypted
%ProgramFiles%\mozilla thunderbird\install.log.encrypted
%ProgramFiles%\mozilla thunderbird\ldap60.dll.encrypted
%ProgramFiles%\mozilla thunderbird\ldif60.dll.encrypted
%ProgramFiles%\mozilla thunderbird\lgpllibs.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libegl.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libglesv2.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libotr-5.dll.encrypted
%ProgramFiles%\mozilla thunderbird\libssp-0.dll.encrypted
%ProgramFiles%\mozilla thunderbird\maintenanceservice.exe.encrypted
%ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe.encrypted
%ProgramFiles%\mozilla thunderbird\mapiproxy.dll.encrypted
%ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll.encrypted
%ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe.encrypted
%ProgramFiles%\mozilla thunderbird\mozglue.dll.encrypted
%ProgramFiles%\mozilla thunderbird\mozmapi32.dll.encrypted
%ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll.encrypted
%ProgramFiles%\mozilla thunderbird\msvcp140.dll.encrypted
%ProgramFiles%\mozilla thunderbird\nss3.dll.encrypted
%ProgramFiles%\mozilla thunderbird\nssckbi.dll.encrypted
%ProgramFiles%\mozilla thunderbird\omni.ja.encrypted
%ProgramFiles%\mozilla thunderbird\osclientcerts.dll.encrypted
%ProgramFiles%\mozilla thunderbird\pingsender.exe.encrypted
%ProgramFiles%\mozilla thunderbird\platform.ini.encrypted
%ProgramFiles%\mozilla thunderbird\plugin-container.exe.encrypted
%ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe.encrypted
%ProgramFiles%\mozilla thunderbird\precomplete.encrypted
%ProgramFiles%\mozilla thunderbird\prldap60.dll.encrypted
%ProgramFiles%\mozilla thunderbird\qipcap64.dll.encrypted
%ProgramFiles%\mozilla thunderbird\removed-files.encrypted
%ProgramFiles%\mozilla thunderbird\rnp.dll.encrypted
%ProgramFiles%\mozilla thunderbird\softokn3.dll.encrypted
%ProgramFiles%\mozilla thunderbird\thunderbird.exe.encrypted
%ProgramFiles%\mozilla thunderbird\ucrtbase.dll.encrypted
%ProgramFiles%\mozilla thunderbird\update-settings.ini.encrypted
%ProgramFiles%\mozilla thunderbird\updater.exe.encrypted
%ProgramFiles%\mozilla thunderbird\updater.ini.encrypted
%ProgramFiles%\mozilla thunderbird\vcruntime140.dll.encrypted
%ProgramFiles%\mozilla thunderbird\wsenable.exe.encrypted
%ProgramFiles%\mozilla thunderbird\xul.dll.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-alarm-dialog.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-dialog.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-summary-dialog.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-dialog.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-summary-dialog.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\messengerwindow.ico.encrypted
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\msgcomposewindow.ico.encrypted
%ProgramFiles%\mozilla thunderbird\defaults\pref\channel-prefs.js.encrypted
%ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.encrypted
%ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.encrypted
%ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.encrypted
%ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.encrypted
%ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.encrypted
%ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.encrypted
%ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.encrypted
%ProgramFiles%\mozilla thunderbird\uninstall\helper.exe.encrypted
%ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.encrypted
%ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.encrypted
%ProgramFiles%\windows defender advanced threat protection\mssense.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensecncproxy.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensecncps.dll.encrypted
%ProgramFiles%\windows defender advanced threat protection\senseir.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensemirror.dll.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensendr.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensesampleuploader.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\sensesc.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\watpcsp.dll.encrypted
%ProgramFiles%\windows defender advanced threat protection\classification\mce.dll.encrypted
%ProgramFiles%\windows defender advanced threat protection\classification\mpgear.dll.encrypted
%ProgramFiles%\windows defender advanced threat protection\classification\sensece.exe.encrypted
%ProgramFiles%\windows defender advanced threat protection\en-us\mssense.exe.mui.encrypted
%ProgramFiles%\windows defender.bak\ammonitoringinstall.mof.encrypted
%ProgramFiles%\windows defender.bak\ammonitoringprovider.dll.encrypted
%ProgramFiles%\windows defender.bak\amstatusinstall.mof.encrypted
%ProgramFiles%\windows defender.bak\clientwmiinstall.mof.encrypted
%ProgramFiles%\windows defender.bak\configsecuritypolicy.exe.encrypted
%ProgramFiles%\windows defender.bak\defendercsp.dll.encrypted
%ProgramFiles%\windows defender.bak\eppmanifest.dll.encrypted
%ProgramFiles%\windows defender.bak\fepunregister.mof.encrypted
%ProgramFiles%\windows defender.bak\mpasdesc.dll.encrypted
%ProgramFiles%\windows defender.bak\mpazsubmit.dll.encrypted
%ProgramFiles%\windows defender.bak\mpclient.dll.encrypted
%ProgramFiles%\windows defender.bak\mpcmdrun.exe.encrypted
%ProgramFiles%\windows defender.bak\mpcommu.dll.encrypted
%ProgramFiles%\windows defender.bak\mpevmsg.dll.encrypted
%ProgramFiles%\windows defender.bak\mpoav.dll.encrypted
%ProgramFiles%\windows defender.bak\mpprovider.dll.encrypted
%ProgramFiles%\windows defender.bak\mprtp.dll.encrypted
%ProgramFiles%\windows defender.bak\mpsvc.dll.encrypted
%ProgramFiles%\windows defender.bak\msmpcom.dll.encrypted
%ProgramFiles%\windows defender.bak\msmpeng.exe.encrypted
%ProgramFiles%\windows defender.bak\msmplics.dll.encrypted
%ProgramFiles%\windows defender.bak\msmpres.dll.encrypted
%ProgramFiles%\windows defender.bak\nissrv.exe.encrypted
%ProgramFiles%\windows defender.bak\protectionmanagement.dll.encrypted
%ProgramFiles%\windows defender.bak\protectionmanagement.mof.encrypted
%ProgramFiles%\windows defender.bak\protectionmanagement_uninstall.mof.encrypted
%ProgramFiles%\windows defender.bak\shellext.dll.encrypted
%ProgramFiles%\windows defender.bak\thirdpartynotices.txt.encrypted
%ProgramFiles%\windows defender.bak\en-us\eppmanifest.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\mpasdesc.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\mpevmsg.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\msmpres.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\offlinescannershell.exe.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement.mfl.encrypted
%ProgramFiles%\windows defender.bak\en-us\protectionmanagement_uninstall.mfl.encrypted
%ProgramFiles%\windows defender.bak\en-us\shellext.dll.mui.encrypted
%ProgramFiles%\windows defender.bak\offline\eppmanifest.dll.encrypted
%ProgramFiles%\windows defender.bak\offline\msmplics.dll.encrypted
%ProgramFiles%\windows defender.bak\offline\offlinescannershell.exe.encrypted
%ProgramFiles%\windows mail\wab.exe.encrypted
%ProgramFiles%\windows mail\wabimp.dll.encrypted
%ProgramFiles%\windows mail\wabmig.exe.encrypted
%ProgramFiles%\windows media player\mpvis.dll.encrypted
%ProgramFiles%\windows media player\setup_wm.exe.encrypted
%ProgramFiles%\windows media player\wmlaunch.exe.encrypted
%ProgramFiles%\windows media player\wmpconfig.exe.encrypted
%ProgramFiles%\windows media player\wmplayer.exe.encrypted
%ProgramFiles%\windows media player\wmpmediasharing.dll.encrypted
%ProgramFiles%\windows media player\wmpnetwk.exe.encrypted
%ProgramFiles%\windows media player\wmpnscfg.exe.encrypted
%ProgramFiles%\windows media player\wmpnssci.dll.encrypted
%ProgramFiles%\windows media player\wmpnssui.dll.encrypted
%ProgramFiles%\windows media player\wmprph.exe.encrypted
%ProgramFiles%\windows media player\wmpshare.exe.encrypted
%ProgramFiles%\windows media player\en-us\mpvis.dll.mui.encrypted
%ProgramFiles%\windows media player\en-us\setup_wm.exe.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmlaunch.exe.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmplayer.exe.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmpmediasharing.dll.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmpnetwk.exe.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmpnscfg.exe.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmpnssci.dll.mui.encrypted
%ProgramFiles%\windows media player\en-us\wmpnssui.dll.mui.encrypted
%ProgramFiles%\windows media player\skins\revert.wmz.encrypted
%ProgramFiles%\windows multimedia platform\sqmapi.dll.encrypted
%ProgramFiles%\windows nt\accessories\wordpad.exe.encrypted
%ProgramFiles%\windows nt\accessories\wordpadfilter.dll.encrypted
%ProgramFiles%\windows nt\accessories\en-us\wordpad.exe.mui.encrypted
%ProgramFiles%\windows nt\tabletextservice\tabletextservice.dll.encrypted
%ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.encrypted
%ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.encrypted
%ProgramFiles%\windows nt\tabletextservice\tabletextservicetigrinya.txt.encrypted
%ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.encrypted
%ProgramFiles%\windows nt\tabletextservice\en-us\tabletextservice.dll.mui.encrypted
%ProgramFiles%\windows photo viewer\imagingdevices.exe.encrypted
%ProgramFiles%\windows photo viewer\imagingengine.dll.encrypted
%ProgramFiles%\windows photo viewer\photoacq.dll.encrypted
%ProgramFiles%\windows photo viewer\photobase.dll.encrypted
%ProgramFiles%\windows photo viewer\photoviewer.dll.encrypted
%ProgramFiles%\windows photo viewer\en-us\imagingdevices.exe.mui.encrypted
%ProgramFiles%\windows photo viewer\en-us\photoacq.dll.mui.encrypted
%ProgramFiles%\windows photo viewer\en-us\photoviewer.dll.mui.encrypted
%ProgramFiles%\windows portable devices\sqmapi.dll.encrypted
%ProgramFiles%\windows security\browsercore\browsercore.exe.encrypted
%ProgramFiles%\windows security\browsercore\manifest.json.encrypted
%ProgramFiles%\windows security\browsercore\en-us\browsercore.exe.mui.encrypted

Deletes itself.

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Restarts the analyzed sample

Tecnologías

Términos

Formación y educación

Mitos

Technical Information

Curing recommendations

Free trial