Technical Information
Malicious functions
Executes the following
- '%WINDIR%\syswow64\net.exe' stop TomService
- '%WINDIR%\syswow64\net.exe' stop TomPackage
- '%WINDIR%\syswow64\net.exe' stop LocalService
Modifies file system
Creates the following files
- %TEMP%\rarsfx0\openvpn\4b5599c8-958a-41d1-9f61-ddddd2bb65e8.txt
- %TEMP%\rarsfx0\qtquick\controls\checkbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\checkbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\checkboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\checkboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\checkdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\checkindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\calendarheadermodel.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\circularbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\calendarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\circularbuttonstylehelper.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\comboboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\combobox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\combobox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\combobox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\combobox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\busyindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\columnmenucontent.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\coloroverlay.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\colorize.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circulartickmarklabelstyle.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\circulartickmarklabel.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circulargaugestyle.qmlc
- %TEMP%\rarsfx0\qtquick\extras\circulargauge.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\qml\colorslider.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circularbuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\calendarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\calendar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\buttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetfiledialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\widgetfontdialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\widgetmessagedialog.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\zoomblur.qml
- %TEMP%\rarsfx0\qtquick\controls.2\abstractbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\abstractcheckable.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\applicationwindow.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\applicationwindow.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\applicationwindow.qmlc
- %TEMP%\rarsfx0\qtquick\controls\applicationwindow.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\applicationwindowstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\applicationwindowstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\basicbutton.qmlc
- %TEMP%\rarsfx0\qt\labs\calendar\weeknumbercolumn.qml
- %TEMP%\rarsfx0\qtquick\controls\private\basictableview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\buttongroup.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\button.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\buttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\basictableviewstyle.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\blend.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\boxshadow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\brightnesscontrast.qmlc
- %TEMP%\rarsfx0\qtquick\controls\busyindicator.qmlc
- %TEMP%\rarsfx0\qtmultimedia\video.qml
- %TEMP%\rarsfx0\qtquick\controls.2\busyindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\busyindicatorstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\comboboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\busyindicatorstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\button.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\button.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\button.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\busyindicator.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetcolordialog.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\commonstylehelper.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\control.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\editmenu_base.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\elevationeffect.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\fastblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\fastglow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastglow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastinnershadow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastmaskedblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\focusframe.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\focusframestyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\focusframestyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\frame.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\frame.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\frame.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\dropshadowbase.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\editmenu.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\gammaadjust.qmlc
- %TEMP%\rarsfx0\qtquick\extras\gauge.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\handle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\groupboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\groupboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\groupbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\groupbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\drawer.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\groupbox.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\glow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianmaskedblur.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianinnershadow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianglow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussiandirectionalblur.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\gaussianblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\gaugestyle.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\dropshadow.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\drawer.qmlc
- %TEMP%\rarsfx0\qtquick\extras\tumblercolumn.qml
- %TEMP%\rarsfx0\qtquick\controls\private\control.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\cursordelegate.qmlc
- %TEMP%\rarsfx0\qt\labs\calendar\dayofweekrow.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\defaultcolordialog.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\defaultdialogwrapper.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\defaultfiledialog.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\defaultfontdialog.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\defaultmessagedialog.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\qml\defaultwindowdecoration.qmlc
- %TEMP%\rarsfx0\qtquick\extras\delaybutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\delaybutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\delaybutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\delaybutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\delaybuttonstyle.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\desaturate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\drawer.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\dialog.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\dialogbuttonbox.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\displace.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\directionalblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\dialstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dialogbuttonbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\dialogbuttonbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\container.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\conicalgradient.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\contentitem.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\dialog.qmlc
- %TEMP%\rarsfx0\qtquick\extras\dial.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dial.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\dial.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\dial.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dialog.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tumblerstyle.qml
- %TEMP%\rarsfx0\qtquick\extras\tumbler.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\handlestylehelper.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\spinboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\spinboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\splitview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\stackview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\stackview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\stackview.qml
- %TEMP%\rarsfx0\qtquick\controls\stackview.qml
- %TEMP%\rarsfx0\qtquick\controls\stackviewdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\private\stackviewslidedelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\stackviewtransition.qml
- %TEMP%\rarsfx0\qtquick\controls\statusbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\spinbox.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\statusbarstyle.qml
- %TEMP%\rarsfx0\qtquick\extras\statusindicator.qml
- %TEMP%\rarsfx0\qtquick\controls\spinbox.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\statusindicatorstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\statusbarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\switchdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\switchdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\switch.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\switch.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\switchindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switch.qml
- %TEMP%\rarsfx0\qtquick\controls.2\swipeview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\swipeview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\swipedelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\swipedelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\swipedelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\private\style.qml
- %TEMP%\rarsfx0\qtquick\controls.2\switch.qml
- %TEMP%\rarsfx0\qtquick\controls\private\sourceproxy.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\spinbox.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\sliderstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\sliderstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\rangeslider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\rangeslider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\rangeslider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\rectangularglow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\rectangularglow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\recursiveblur.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\roundbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\roundbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\roundbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\rowitemsingleton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\scrollbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\scrollbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\scrollbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\radioindicator.qml
- %TEMP%\rarsfx0\qtquick\controls\private\scrollbar.qml
- %TEMP%\rarsfx0\qtquick\controls\slider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\slider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\radioindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\sliderhandle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\scrollviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\scrollindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\scrollindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\scrollindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\switchindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\scrollview.qml
- %TEMP%\rarsfx0\qtquick\controls\private\scrollviewhelper.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\scrollviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switchdelegate.qml
- %TEMP%\rarsfx0\qttest\signalspy.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\slider.qml
- %TEMP%\rarsfx0\qtquick\controls.2\slider.qml
- %TEMP%\rarsfx0\qtquick\controls\scrollview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switchindicator.qml
- %TEMP%\rarsfx0\qtquick\extras\private\textsingleton.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\switchstyle.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\thresholdmask.qml
- %TEMP%\rarsfx0\qtquick\extras\togglebutton.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\togglebuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\toolbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolbar.qml
- %TEMP%\rarsfx0\qtquick\controls\toolbar.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\toolbarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\toolbarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\toolbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\toolbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\toolbuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\toolbuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tumbler.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\tooltip.qml
- %TEMP%\rarsfx0\qtquick\controls\treeview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\tumbler.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\tumbler.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\treeviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\treeviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\private\treeviewitemdelegateloader.qml
- %TEMP%\rarsfx0\qtquick\controls\private\textsingleton.qml
- %TEMP%\rarsfx0\qtquick\controls\private\textinputwithhandles.qml
- %TEMP%\rarsfx0\qtquick\controls\private\texthandle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\tooltip.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolseparator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolseparator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\toolseparator.qml
- %TEMP%\rarsfx0\qtquick\controls\private\toolmenubutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tooltip.qml
- %TEMP%\rarsfx0\qtquick\controls.2\groupbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\handlestyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\spinbox.qml
- %TEMP%\rarsfx0\qtquick\controls\private\systempalettesingleton.qml
- %TEMP%\rarsfx0\qtquick\controls\tab.qml
- %TEMP%\rarsfx0\qtquick\controls.2\tabbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tabbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\tabbar.qml
- %TEMP%\rarsfx0\qtquick\controls\private\tabbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tabbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\tabbutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\tabbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\tableview.qml
- %TEMP%\rarsfx0\qtquick\controls\tableviewcolumn.qml
- %TEMP%\rarsfx0\qtquick\controls\private\tableviewitemdelegateloader.qml
- %TEMP%\rarsfx0\qtquick\controls\private\tableviewselection.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tableviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\tableviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\textfield.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\textarea.qml
- %TEMP%\rarsfx0\qtquick\controls\textarea.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\textfield.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\textfield.qml
- %TEMP%\rarsfx0\qtquick\controls.2\textfield.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\textareastyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\textareastyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\textfieldstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\textfieldstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\switchstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\textarea.qml
- %TEMP%\rarsfx0\qttest\testcase.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tabviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\tabviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\tabview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\textarea.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\busyindicator.qml
- %TEMP%\rarsfx0\qtquick\controls\private\hoverbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\toolbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\toolbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\toolbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\toolbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\toolbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\toolbuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\toolbuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\toolmenubutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\toolseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\toolbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\toolseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\toolbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tooltip.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\togglebuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\tooltip.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetcolordialog.qmlc
- %TEMP%\rarsfx0\qt\labs\calendar\weeknumbercolumn.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tumblerstyle.qmlc
- %TEMP%\rarsfx0\qtquick\extras\tumblercolumn.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetfontdialog.qmlc
- %TEMP%\rarsfx0\qtquick\extras\tumbler.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tumbler.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\tumbler.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\treeviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\treeviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\treeviewitemdelegateloader.qmlc
- %TEMP%\rarsfx0\qtquick\controls\treeview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\tooltip.qmlc
- %TEMP%\rarsfx0\qtquick\extras\togglebutton.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\thresholdmask.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tabbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\tabbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\tabbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\tabbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\tabbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\tableview.qmlc
- %TEMP%\rarsfx0\qtquick\controls\tableviewcolumn.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\tableviewitemdelegateloader.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\tableviewselection.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tableviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\tableviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\tabview.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\tabviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\tabviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\textarea.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\tabbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\textarea.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\textsingleton.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\textsingleton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\textfield.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\textarea.qmlc
- %TEMP%\rarsfx0\qtquick\controls\textarea.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\textareastyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\textareastyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\tumbler.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\textfield.qmlc
- %TEMP%\rarsfx0\qtquick\controls\textfield.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetfiledialog.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\textfieldstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\textfieldstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\texthandle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\textinputwithhandles.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\textfield.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\widgetmessagedialog.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\zoomblur.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\images\copy.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\critical.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\crosshairs.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\editbox.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\focusframe.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\groupbox.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\header.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\information.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\knob.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\leftanglearrow.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\needle.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\progress-indeterminate.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\question.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\rightanglearrow.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\scrollbar-handle-horizontal.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\scrollbar-handle-transient.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\scrollbar-handle-vertical.png
- %LOCALAPPDATA%\install\cache\qmlcache\e0e58d85f0b69cea69151e18c33ddee62a691d8f.qmlc.uh2308
- %LOCALAPPDATA%\install\cache\qmlcache\f4c4c7d8440aa8b867093e8d31d3ce6cbab7160a.qmlc.gq2308
- %LOCALAPPDATA%\install\cache\qmlcache\1cad7b73d32e08778bd9e9ea19100220040a838a.qmlc.hp2308
- %TEMP%\rarsfx0\qtquick\dialogs\images\window_border.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\warning.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\tab_selected.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\checkmark.png
- %TEMP%\rarsfx0\qtquick\controls.2\tabbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\spinner_small.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\spinner_medium.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\spinner_large.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\slider_handle.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\slider-handle.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\slider-groove.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\sunken_frame.png
- %TEMP%\rarsfx0\qtquick\dialogs\images\checkers.png
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radiodelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\check.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-left@2x.png
- %TEMP%\rarsfx0\qt\labs\settings\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls.2\universal\plugins.qmltypes
- %TEMP%\rarsfx0\qt\labs\folderlistmodel\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls.2\material\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\layouts\plugins.qmltypes
- %TEMP%\rarsfx0\qt\labs\calendar\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\privatewidgets\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\window.2\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\dialogs\private\plugins.qmltypes
- %TEMP%\rarsfx0\qttest\plugins.qmltypes
- %TEMP%\rarsfx0\qtwinextras\plugins.qmltypes
- %TEMP%\rarsfx0\qtqml\models.2\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\extras\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\templates.2\plugins.qmltypes
- %TEMP%\rarsfx0\qtmultimedia\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls.2\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\button_down.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\button.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-up@2x.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-up.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-right@2x.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-right.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\check@2x.png
- %TEMP%\rarsfx0\qtquick\controls\tab.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-down@2x.png
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-down.png
- %TEMP%\rarsfx0\qtquick\dialogs\qml\icons.ttf
- %TEMP%\rarsfx0\qtquick.2\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\dialogs\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\arrow-left.png
- %TEMP%\rarsfx0\qtgraphicaleffects\plugins.qmltypes
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radioindicator.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\switchstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\switchdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\pageindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\pageindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\pageindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\pane.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\pane.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\pane.qmlc
- %TEMP%\rarsfx0\qtquick\extras\piemenu.qmlc
- %TEMP%\rarsfx0\qtquick\extras\private\piemenuicon.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\piemenustyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\popup.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\popup.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\popup.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\page.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\progressbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\page.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\progressbar.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\opacitymask.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\progressbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\radiodelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\radiodelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\radiobuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\radiobuttonstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\radioindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\radiobutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radiobutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\radiobutton.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\radialgradient.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\radialblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\progressbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\progressbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\progressbar.qmlc
- %TEMP%\rarsfx0\qt\labs\calendar\monthgrid.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\modalpopupbehavior.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\qml\iconbuttonstyle.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\innershadow.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\itemdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\itemdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\itemdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\label.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\label.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\label.qmlc
- %TEMP%\rarsfx0\qtquick\controls\label.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\leveladjust.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\lineargradient.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\maskedblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\menu.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menu.qmlc
- %TEMP%\rarsfx0\qtquick\controls\menu.qmlc
- %TEMP%\rarsfx0\qtquick\dialogs\qml\iconglyph.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\menu.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\menustyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\menustyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\menuitem.qmlc
- %TEMP%\rarsfx0\qtquick\controls\menubar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\menubarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\menubarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\menucontentitem.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\radiobutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\menucontentscroller.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menuitem.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radiodelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\menuitemsubcontrols.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\menuseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menuseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\menuseparator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\menuitem.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\radioindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radioindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\spinboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\splitview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\stackview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\stackview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\stackview.qmlc
- %TEMP%\rarsfx0\qtquick\controls\stackview.qmlc
- %TEMP%\rarsfx0\qtquick\controls\stackviewdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\stackviewslidedelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\stackviewtransition.qmlc
- %TEMP%\rarsfx0\qtquick\controls\statusbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\statusbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\statusbarstyle.qmlc
- %TEMP%\rarsfx0\qtquick\extras\statusindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\statusindicatorstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\style.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\swipedelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\swipedelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\switchstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switchindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\switchindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\switchindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switchdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\switchdelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\spinboxstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\systempalettesingleton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\switch.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\switch.qmlc
- %TEMP%\rarsfx0\qtquick\controls\switch.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\swipeview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\swipeview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\swipedelegate.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\switch.qmlc
- %TEMP%\rarsfx0\qtquick\controls\spinbox.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\huesaturation.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\spinbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\slider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\rangeslider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\rangeslider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\rectangularglow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\rectangularglow.qmlc
- %TEMP%\rarsfx0\qtgraphicaleffects\recursiveblur.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\roundbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\roundbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\roundbutton.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\rowitemsingleton.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\scrollbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\scrollbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\scrollbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\scrollbar.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\scrollindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\scrollindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\scrollindicator.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\spinbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\sourceproxy.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\sliderstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\sliderstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\sliderhandle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\slider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\universal\spinbox.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\page.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\slider.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\base\scrollviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\scrollviewstyle.qmlc
- %TEMP%\rarsfx0\qtquick\controls\private\scrollviewhelper.qmlc
- %TEMP%\rarsfx0\qtquick\controls\scrollview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\scrollview.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\slider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\rangeslider.qmlc
- %TEMP%\rarsfx0\qtquick\controls.2\material\radiodelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\radiodelegate.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\radiobuttonstyle.qml
- %TEMP%\rarsfx0\qt5positioning.dll
- %TEMP%\rarsfx0\qt5qml.dll
- %TEMP%\rarsfx0\qt5quick.dll
- %TEMP%\rarsfx0\qt5quickcontrols2.dll
- %TEMP%\rarsfx0\qt5quicktemplates2.dll
- %TEMP%\rarsfx0\qt5quicktest.dll
- %TEMP%\rarsfx0\qt5svg.dll
- %TEMP%\rarsfx0\qt5test.dll
- %TEMP%\rarsfx0\qt5widgets.dll
- %TEMP%\rarsfx0\qt5winextras.dll
- %TEMP%\rarsfx0\audio\qtaudio_wasapi.dll
- %TEMP%\rarsfx0\qt5gui.dll
- %TEMP%\rarsfx0\audio\qtaudio_windows.dll
- %TEMP%\rarsfx0\qtgraphicaleffects\qtgraphicaleffectsplugin.dll
- %TEMP%\rarsfx0\qt5network.dll
- %TEMP%\rarsfx0\qtgraphicaleffects\private\qtgraphicaleffectsprivate.dll
- %TEMP%\rarsfx0\imageformats\qtga.dll
- %TEMP%\rarsfx0\qtquick\templates.2\qtquicktemplates2plugin.dll
- %TEMP%\rarsfx0\qtquick\extras\qtquickextrasplugin.dll
- %TEMP%\rarsfx0\qtquick\controls\styles\flat\qtquickextrasflatplugin.dll
- %TEMP%\rarsfx0\qtquick\controls\qtquickcontrolsplugin.dll
- %TEMP%\rarsfx0\imageformats\qwbmp.dll
- %TEMP%\rarsfx0\qtquick\controls.2\universal\qtquickcontrols2universalstyleplugin.dll
- %TEMP%\rarsfx0\qtquick\controls.2\material\qtquickcontrols2materialstyleplugin.dll
- %TEMP%\rarsfx0\qtquick.2\qtquick2plugin.dll
- %TEMP%\rarsfx0\playlistformats\qtmultimedia_m3u.dll
- %TEMP%\rarsfx0\mediaservice\qtmedia_audioengine.dll
- %TEMP%\rarsfx0\qt\labs\calendar\qtlabscalendarplugin.dll
- %TEMP%\rarsfx0\imageformats\qtiff.dll
- %TEMP%\rarsfx0\qtquick\controls.2\qtquickcontrols2plugin.dll
- %TEMP%\rarsfx0\qt5core.dll
- %TEMP%\rarsfx0\qt5multimediaquick_p.dll
- %TEMP%\rarsfx0\iconengines\qsvgicon.dll
- %TEMP%\rarsfx0\imageformats\qsvg.dll
- %TEMP%\rarsfx0\tomprotocal\mygood.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\x64\packet.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\packet.dll
- %TEMP%\rarsfx0\tomprotocal\page.dll
- %TEMP%\rarsfx0\yxrun\page.dll
- %TEMP%\rarsfx0\proxy.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\pthreadvc.dll
- %TEMP%\rarsfx0\bearer\qgenericbearer.dll
- %TEMP%\rarsfx0\imageformats\qgif.dll
- %TEMP%\rarsfx0\imageformats\qicns.dll
- %TEMP%\rarsfx0\imageformats\qico.dll
- %TEMP%\rarsfx0\imageformats\qjpeg.dll
- %TEMP%\rarsfx0\qtwinextras\qml_winextras.dll
- %TEMP%\rarsfx0\msvcp140.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_debugger.dll
- %TEMP%\rarsfx0\qtquick\layouts\qquicklayoutsplugin.dll
- %TEMP%\rarsfx0\qttest\qmltestplugin.dll
- %TEMP%\rarsfx0\qtqml\models.2\modelsplugin.dll
- %TEMP%\rarsfx0\scenegraph\qsgd3d12backend.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_quickprofiler.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_inspector.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_local.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_messages.dll
- %TEMP%\rarsfx0\imageformats\qwebp.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_native.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_profiler.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_server.dll
- %TEMP%\rarsfx0\platforminputcontexts\qtvirtualkeyboardplugin.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_tcp.dll
- %TEMP%\rarsfx0\qt\labs\folderlistmodel\qmlfolderlistmodelplugin.dll
- %TEMP%\rarsfx0\qt\labs\settings\qmlsettingsplugin.dll
- %TEMP%\rarsfx0\qmltooling\qmldbg_nativedebugger.dll
- %TEMP%\rarsfx0\platforms\qwindows.dll
- %TEMP%\rarsfx0\qtmultimedia\qmldir
- %TEMP%\rarsfx0\ucrtbase.dll
- %TEMP%\rarsfx0\qtquick\extras\qmldir
- %TEMP%\rarsfx0\qtquick\controls.2\material\qmldir
- %TEMP%\rarsfx0\qtquick\controls.2\universal\qmldir
- %TEMP%\rarsfx0\qttest\qmldir
- %TEMP%\rarsfx0\qtquick\controls\qmldir
- %TEMP%\rarsfx0\qt\labs\calendar\qmldir
- %TEMP%\rarsfx0\qtwinextras\qmldir
- %TEMP%\rarsfx0\qtquick\dialogs\qmldir
- %TEMP%\rarsfx0\qtgraphicaleffects\private\qmldir
- %TEMP%\rarsfx0\qtgraphicaleffects\qmldir
- %TEMP%\rarsfx0\qtquick\controls\private\qmldir
- %TEMP%\rarsfx0\qtquick\controls\styles\qmldir
- %TEMP%\rarsfx0\bin\driver_x86\tap0901.cat
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\tap0901.cat
- %TEMP%\rarsfx0\bin\driver_x64\tap0901.cat
- %TEMP%\rarsfx0\cache\data8\3\1b83urds.d
- %TEMP%\rarsfx0\openvpn\ca.crt
- %TEMP%\rarsfx0\openvpn\open\cert0901.crt
- %TEMP%\rarsfx0\cache\data8\a\1ahvgrkj.d
- %TEMP%\rarsfx0\cache\data8\0\192wg9v0.d
- %TEMP%\rarsfx0\cache\data8\2\17kh8s7b.d
- %TEMP%\rarsfx0\openvpn\bin\cert0901.crt
- %TEMP%\rarsfx0\bin\cert0901.crt
- %TEMP%\rarsfx0\qtquick\controls.2\qmldir
- %TEMP%\rarsfx0\qtquick\layouts\qmldir
- %TEMP%\rarsfx0\qtquick\dialogs\private\qmldir
- %TEMP%\rarsfx0\ivanprotocal\i386\tom.cat
- %TEMP%\rarsfx0\ivanprotocal\amd64\tom.cat
- %TEMP%\rarsfx0\tomprotocal\tom.cat
- %TEMP%\rarsfx0\yxrun\x64\tap0901.cat
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\tap0901.cat
- %TEMP%\rarsfx0\tomprotocal\tom64.cat
- %TEMP%\rarsfx0\msvcr100.dll
- %TEMP%\rarsfx0\libwinpthread-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-sysinfo-l1-1-0.dll
- %TEMP%\rarsfx0\vcruntime140.dll
- %TEMP%\rarsfx0\qtquick\privatewidgets\widgetsplugin.dll
- %TEMP%\rarsfx0\qtquick\window.2\windowplugin.dll
- %TEMP%\rarsfx0\mediaservice\wmfengine.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\x64\wpcap.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\wpcap.dll
- %TEMP%\rarsfx0\lwiplocal\winpacp\drivers\npf.sys
- %TEMP%\rarsfx0\tomprotocal\package1.1.sys
- %TEMP%\rarsfx0\yxrun\package1.1.sys
- %TEMP%\rarsfx0\tomprotocal\package1.164.sys
- %TEMP%\rarsfx0\yxrun\package1.164.sys
- %TEMP%\rarsfx0\bin\driver_x86\tap0901.sys
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\tap0901.sys
- %TEMP%\rarsfx0\bin\driver_x64\tap0901.sys
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\tap0901.sys
- %TEMP%\rarsfx0\qtquick\templates.2\qmldir
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\qmldir
- %TEMP%\rarsfx0\qtqml\models.2\qmldir
- %TEMP%\rarsfx0\qtquick\privatewidgets\qmldir
- %TEMP%\rarsfx0\qtquick.2\qmldir
- %TEMP%\rarsfx0\qtquick\controls\styles\flat\qmldir
- %TEMP%\rarsfx0\qt\labs\settings\qmldir
- %TEMP%\rarsfx0\qtquick\dialogs\qml\qmldir
- %TEMP%\rarsfx0\qtquick\window.2\qmldir
- %TEMP%\rarsfx0\qt\labs\folderlistmodel\qmldir
- %TEMP%\rarsfx0\ssleay32.dll
- %TEMP%\rarsfx0\tomprotocal\tom64.sys
- %TEMP%\rarsfx0\tomprotocal\tom.sys
- %TEMP%\rarsfx0\ivanprotocal\amd64\tom.sys
- %TEMP%\rarsfx0\ivanprotocal\i386\tom.sys
- %TEMP%\rarsfx0\yxrun\x64\tap0901.sys
- %TEMP%\rarsfx0\qtquick\extras\private\qmldir
- %LOCALAPPDATA%\install\cache\qmlcache\2fa2a6c8c2df56a7932cf8b7368b907b95cf99c7.qmlc.em2308
- %TEMP%\rarsfx0\cache\data8\7\1busuhv7.d
- %TEMP%\rarsfx0\openvpn\open\liblzo2-2.dll
- %TEMP%\rarsfx0\ivanprotocal\i386\tapinstall.exe
- %TEMP%\rarsfx0\ivanprotocal\amd64\tapinstall.exe
- %TEMP%\rarsfx0\bin\driver_x86\tapinstall32.exe
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\tapinstall32.exe
- %TEMP%\rarsfx0\bin\driver_x64\tapinstall64.exe
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\tapinstall64.exe
- %TEMP%\rarsfx0\tomprotocal\tom.exe
- %TEMP%\rarsfx0\tom.exe
- %TEMP%\rarsfx0\tomprotocal\tom64.exe
- %TEMP%\rarsfx0\tomprotocal\tomproxy.exe
- %TEMP%\rarsfx0\yxrun\tomproxy.exe
- %TEMP%\rarsfx0\uninstall.exe
- %TEMP%\rarsfx0\nssm.exe
- %TEMP%\rarsfx0\update.exe
- %TEMP%\rarsfx0\yxrun\x64\tap0901.exe
- %TEMP%\rarsfx0\api-ms-win-core-comm-l1-1-0.dll
- %TEMP%\rarsfx0\lwiplocal\npfinstall.exe
- %TEMP%\rarsfx0\wallpaper.exe
- %TEMP%\rarsfx0\api-ms-win-core-file-l1-2-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-file-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-file-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-fibers-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-heap-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-fibers-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-errorhandling-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-delayload-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-debug-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-debug-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-datetime-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-datetime-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-console-l1-1-0.dll
- %TEMP%\rarsfx0\lwiplocal\lwiplocal.exe
- %TEMP%\rarsfx0\local.exe
- %TEMP%\rarsfx0\qtquick\controls\private\calendarutils.js
- %TEMP%\rarsfx0\qtquick\controls\private\style.js
- %TEMP%\rarsfx0\qttest\testlogger.js
- %TEMP%\rarsfx0\openvpn\open\config.ini
- %TEMP%\rarsfx0\ivanprotocal\amd64\addtap.bat
- %TEMP%\rarsfx0\ivanprotocal\i386\addtap.bat
- %TEMP%\rarsfx0\bin\driver_x64\addtap.bat
- %TEMP%\rarsfx0\bin\driver_x86\addtap.bat
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\addtap.bat
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\addtap.bat
- %TEMP%\rarsfx0\deleteautostart.bat
- %TEMP%\rarsfx0\ivanprotocal\amd64\deltap.bat
- %TEMP%\rarsfx0\ivanprotocal\i386\deltap.bat
- %TEMP%\rarsfx0\bin\driver_x64\deltapall.bat
- %TEMP%\rarsfx0\bin\driver_x86\deltapall.bat
- %TEMP%\rarsfx0\qtquick\controls\private\stackview.js
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\deltapall.bat
- %TEMP%\rarsfx0\install.exe
- %TEMP%\rarsfx0\ivan2win.exe
- %TEMP%\rarsfx0\bin\driver_x64\oemvista.inf
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\deltapall.bat
- %TEMP%\rarsfx0\ivanprotocal\i386\oemvista.inf
- %TEMP%\rarsfx0\ivanprotocal\amd64\oemvista.inf
- %TEMP%\rarsfx0\oemvista.inf
- %TEMP%\rarsfx0\api-ms-win-core-errorhandling-l1-1-1.dll
- %TEMP%\rarsfx0\bin\driver_x86\oemvista.inf
- %TEMP%\rarsfx0\openvpn\bin\driver_x64\oemvista.inf
- %TEMP%\rarsfx0\api-ms-win-core-handle-l1-1-0.dll
- %TEMP%\rarsfx0\yxrun\x64\tap0901.inf
- %TEMP%\rarsfx0\tomprotocal\tom.inf
- %TEMP%\rarsfx0\tomprotocal\tom64.inf
- %TEMP%\rarsfx0\goping.exe
- %TEMP%\rarsfx0\openvpn\bin\driver_x86\oemvista.inf
- %TEMP%\rarsfx0\openvpn\open\openclient.exe
- %TEMP%\rarsfx0\api-ms-win-core-interlocked-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-environment-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-heap-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-locale-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-math-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-multibyte-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-private-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-process-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-runtime-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-stdio-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-string-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-time-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-utility-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-security-base-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-service-core-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-service-core-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-service-management-l1-1-0.dll
- %TEMP%\rarsfx0\libglesv2.dll
- %TEMP%\rarsfx0\qtquick\dialogs\dialogplugin.dll
- %TEMP%\rarsfx0\qtquick\dialogs\private\dialogsprivateplugin.dll
- %TEMP%\rarsfx0\libgcc_s_dw2-1.dll
- %TEMP%\rarsfx0\libegl.dll
- %TEMP%\rarsfx0\libeay32.dll
- %TEMP%\rarsfx0\openvpn\open\libcrypto-1_1-x64.dll
- %TEMP%\rarsfx0\mediaservice\dsengine.dll
- %TEMP%\rarsfx0\api-ms-win-crt-filesystem-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-convert-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-io-l1-1-0.dll
- %TEMP%\rarsfx0\d3dcompiler_47.dll
- %TEMP%\rarsfx0\api-ms-win-service-winsvc-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-service-private-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-service-private-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-service-management-l2-1-0.dll
- %TEMP%\rarsfx0\qtmultimedia\declarative_multimedia.dll
- %TEMP%\rarsfx0\openvpn\open\libssl-1_1-x64.dll
- %TEMP%\rarsfx0\openvpn\open\libpkcs11-helper-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-wow64-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-libraryloader-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-libraryloader-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-localization-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-localization-l1-2-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-localization-obsolete-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-memory-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-memory-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-memory-l1-1-2.dll
- %TEMP%\rarsfx0\api-ms-win-core-namedpipe-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-processenvironment-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-processenvironment-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-processthreads-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-processthreads-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-processthreads-l1-1-2.dll
- %TEMP%\rarsfx0\api-ms-win-core-io-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-profile-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-util-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-realtime-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-registry-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-rtlsupport-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-string-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-stringloader-l1-1-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-synch-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-crt-conio-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-synch-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-xstate-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-sysinfo-l1-2-1.dll
- %TEMP%\rarsfx0\api-ms-win-core-threadpool-l1-2-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-threadpool-legacy-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-threadpool-private-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-timezone-l1-1-0.dll
- %TEMP%\rarsfx0\api-ms-win-core-sysinfo-l1-2-0.dll
- %TEMP%\rarsfx0\qtquick\controls\styles\base\images\tab.png
- %TEMP%\rarsfx0\cache\data8\5\1c9u4rqu.d
- %TEMP%\rarsfx0\cache\data8\3\1iju6lxs.d
- %TEMP%\rarsfx0\qtquick\controls\private\editmenu_base.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\elevationeffect.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\fastblur.qml
- %TEMP%\rarsfx0\qtquick\controls\private\fastglow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastglow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastinnershadow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\fastmaskedblur.qml
- %TEMP%\rarsfx0\qtquick\controls\private\focusframe.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\focusframestyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\focusframestyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\frame.qml
- %TEMP%\rarsfx0\qtquick\controls.2\frame.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\dropshadow.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\frame.qml
- %TEMP%\rarsfx0\qtquick\controls\private\editmenu.qml
- %TEMP%\rarsfx0\qtquick\extras\gauge.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\groupboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\groupboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\groupbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\groupbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\groupbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dialog.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\groupbox.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianmaskedblur.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianinnershadow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussianglow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\gaussiandirectionalblur.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\gaussianblur.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\gaugestyle.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\glow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\gammaadjust.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\private\dropshadowbase.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\drawer.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\drawer.qml
- %TEMP%\rarsfx0\qtquick\controls.2\control.qml
- %TEMP%\rarsfx0\qtquick\controls\private\control.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\cursordelegate.qml
- %TEMP%\rarsfx0\qt\labs\calendar\dayofweekrow.qml
- %TEMP%\rarsfx0\qtquick\dialogs\defaultcolordialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\defaultdialogwrapper.qml
- %TEMP%\rarsfx0\qtquick\dialogs\defaultfiledialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\defaultfontdialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\defaultmessagedialog.qml
- %TEMP%\rarsfx0\qtquick\dialogs\qml\defaultwindowdecoration.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\delaybutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\delaybutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\delaybutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\container.qml
- %TEMP%\rarsfx0\qtquick\extras\delaybutton.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\displace.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\directionalblur.qml
- %TEMP%\rarsfx0\qtquick\controls.2\drawer.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\delaybuttonstyle.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\desaturate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\dial.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\dial.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dial.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\handlestyle.qml
- %TEMP%\rarsfx0\qtquick\extras\dial.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\dialog.qml
- %TEMP%\rarsfx0\qtquick\extras\private\handle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\dialogbuttonbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\dialogbuttonbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\dialogbuttonbox.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\dialstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\dialog.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\handlestylehelper.qml
- %TEMP%\rarsfx0\qtquick\controls\private\hoverbutton.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\huesaturation.qml
- %TEMP%\rarsfx0\qt\labs\calendar\monthgrid.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\opacitymask.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\page.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\page.qml
- %TEMP%\rarsfx0\qtquick\controls.2\page.qml
- %TEMP%\rarsfx0\qtquick\controls.2\pageindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\pageindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\pageindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\pane.qml
- %TEMP%\rarsfx0\qtquick\controls.2\pane.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\pane.qml
- %TEMP%\rarsfx0\qtquick\extras\piemenu.qml
- %TEMP%\rarsfx0\qtquick\extras\private\piemenuicon.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\piemenustyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\popup.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\popup.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\popup.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\menustyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\radiobuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\radiobutton.qml
- %TEMP%\rarsfx0\qtquick\controls\radiobutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\radiobutton.qml
- %TEMP%\rarsfx0\qtquick\controls.2\radiobutton.qml
- %TEMP%\rarsfx0\qtquick\controls\private\modalpopupbehavior.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\radialgradient.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\conicalgradient.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\progressbarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\progressbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\progressbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\progressbar.qml
- %TEMP%\rarsfx0\qtquick\controls.2\progressbar.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\radialblur.qml
- %TEMP%\rarsfx0\qtquick\controls\private\contentitem.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\progressbarstyle.qml
- %TEMP%\rarsfx0\cache\data8\6\1ds4w586.d
- %TEMP%\rarsfx0\qtquick\dialogs\qml\iconbuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\dialogs\qml\iconglyph.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\innershadow.qml
- %TEMP%\rarsfx0\qtquick\controls.2\itemdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\itemdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\itemdelegate.qml
- %TEMP%\rarsfx0\qtwinextras\jumplistdestination.qml
- %TEMP%\rarsfx0\qtwinextras\jumplistlink.qml
- %TEMP%\rarsfx0\qtwinextras\jumplistseparator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\label.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\label.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\label.qml
- %TEMP%\rarsfx0\qtquick\controls\label.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\leveladjust.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\lineargradient.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\maskedblur.qml
- %TEMP%\rarsfx0\qtquick\controls.2\menu.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menuseparator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\menuseparator.qml
- %TEMP%\rarsfx0\qtquick\controls\private\menuitemsubcontrols.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menuitem.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\menuitem.qml
- %TEMP%\rarsfx0\qtquick\controls.2\menuitem.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\menustyle.qml
- %TEMP%\rarsfx0\qtquick\controls\private\menucontentscroller.qml
- %TEMP%\rarsfx0\qtquick\controls.2\menuseparator.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\menubarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\menubar.qml
- %TEMP%\rarsfx0\qtquick\controls\menu.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\menu.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\menu.qml
- %TEMP%\rarsfx0\qtquick\controls\private\menucontentitem.qml
- %TEMP%\rarsfx0\cache\data8\6\1gda5p46.d
- %TEMP%\rarsfx0\qtquick\controls\styles\base\menubarstyle.qml
- %TEMP%\rarsfx0\qt5multimedia.dll
- %TEMP%\rarsfx0\cache\data8\1\3vw5gjcq.d
- %TEMP%\rarsfx0\cache\data8\6\b8f8qfa6.d
- %TEMP%\rarsfx0\cache\data8\5\cy4x18i5.d
- %TEMP%\rarsfx0\cache\data8\5\djjoobj5.d
- %TEMP%\rarsfx0\cache\data8\5\jcf9fy2e.d
- %TEMP%\rarsfx0\cache\data8\1\oz6y29hq.d
- %TEMP%\rarsfx0\cache\data8\2\psapvlbr.d
- %TEMP%\rarsfx0\cache\data8\c\r3w8mq8l.d
- %TEMP%\rarsfx0\cache\data8\0\rfc0x5jp.d
- %TEMP%\rarsfx0\cache\data8\3\t3yxx6yc.d
- %TEMP%\rarsfx0\cache\data8\8\ti2cgk7x.d
- %TEMP%\rarsfx0\cache\data8\a\z7pu6u4j.d
- %TEMP%\rarsfx0\cache\data8\6\3okhedz6.d
- %TEMP%\rarsfx0\small.ico
- %TEMP%\rarsfx0\cache\data8\8\3u90hejh.d
- %TEMP%\rarsfx0\qtquick\controls\private\stackview.jsc
- %TEMP%\rarsfx0\translations\qt_fi.qm
- %TEMP%\rarsfx0\translations\qt_es.qm
- %TEMP%\rarsfx0\translations\qt_en.qm
- %TEMP%\rarsfx0\translations\qt_de.qm
- %TEMP%\rarsfx0\translations\qt_da.qm
- %TEMP%\rarsfx0\cache\data8\a\32hnp19j.d
- %TEMP%\rarsfx0\translations\qt_cs.qm
- %TEMP%\rarsfx0\translations\qt_bg.qm
- %TEMP%\rarsfx0\translations\qt_ar.qm
- %TEMP%\rarsfx0\versioninfo.json
- %TEMP%\rarsfx0\commonusedline.json
- %TEMP%\rarsfx0\channel.json
- %TEMP%\rarsfx0\qtquick\controls\private\style.jsc
- %TEMP%\rarsfx0\translations\qt_ca.qm
- %TEMP%\rarsfx0\qtquick\controls\private\calendarutils.jsc
- %TEMP%\rarsfx0\cache\data8\2\3svx132b.d
- %TEMP%\rarsfx0\cache\data8\1\3layqhfa.d
- %TEMP%\rarsfx0\cache\data8\4\3l6g0hnt.d
- %TEMP%\rarsfx0\cache\data8\8\1r8zxtwx.d
- %TEMP%\rarsfx0\cache\data8\9\1rqkdl3y.d
- %TEMP%\rarsfx0\cache\data8\9\1t30my09.d
- %TEMP%\rarsfx0\cache\data8\7\1x94canw.d
- %TEMP%\rarsfx0\cache\data8\7\1xte0q3w.d
- %TEMP%\rarsfx0\cache\data8\9\1yp5ngsy.d
- %TEMP%\rarsfx0\cache\data8\4\20stipyt.d
- %TEMP%\rarsfx0\cache\data8\9\24xd51e9.d
- %TEMP%\rarsfx0\cache\data8\6\29n2gue6.d
- %TEMP%\rarsfx0\cache\data8\a\2a7irxcz.d
- %TEMP%\rarsfx0\cache\data8\c\2dunp7kl.d
- %TEMP%\rarsfx0\cache\data8\6\2ec3xvi6.d
- %TEMP%\rarsfx0\cache\data8\2\2h0r8a62.d
- %TEMP%\rarsfx0\cache\data8\9\1ge9otp9.d
- %TEMP%\rarsfx0\cache\data8\9\2j2p3hny.d
- %TEMP%\rarsfx0\cache\data8\4\3ejixw7t.d
- %TEMP%\rarsfx0\cache\data8\f\3bm6nvyo.d
- %TEMP%\rarsfx0\cache\data8\7\3ic9y3y7.d
- %TEMP%\rarsfx0\cache\data8\c\2n3f1i7l.d
- %TEMP%\rarsfx0\cache\data8\5\2r0ufieu.d
- %TEMP%\rarsfx0\cache\data8\8\2s8t193x.d
- %TEMP%\rarsfx0\cache\data8\7\2uwd3nzw.d
- %TEMP%\rarsfx0\cache\data8\9\2v4k0gq9.d
- %TEMP%\rarsfx0\translations\qt_gd.qm
- %TEMP%\rarsfx0\cache\data8\c\2yp413yl.d
- %TEMP%\rarsfx0\cache\data8\c\32uqz4ul.d
- %TEMP%\rarsfx0\translations\qt_fr.qm
- %TEMP%\rarsfx0\cache\data8\4\35og63kd.d
- %TEMP%\rarsfx0\cache\data8\8\365c935x.d
- %TEMP%\rarsfx0\cache\data8\6\39a0dauf.d
- %TEMP%\rarsfx0\cache\data8\1\3a6sbmpq.d
- %TEMP%\rarsfx0\cache\data8\b\31h2u1ok.d
- %TEMP%\rarsfx0\translations\qt_he.qm
- %TEMP%\rarsfx0\translations\qt_hu.qm
- %TEMP%\rarsfx0\translations\qt_it.qm
- %TEMP%\rarsfx0\qtquick\controls\private\calendarheadermodel.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\calendarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\calendarstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\checkbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkbox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkbox.qml
- %TEMP%\rarsfx0\qtquick\controls\checkbox.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\checkboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\checkboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\checkdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkdelegate.qml
- %TEMP%\rarsfx0\qtquick\controls.2\checkindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\checkindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\checkindicator.qml
- %TEMP%\rarsfx0\qtquick\extras\private\circularbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circularbuttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\buttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\combobox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\combobox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\combobox.qml
- %TEMP%\rarsfx0\qtquick\controls.2\combobox.qml
- %TEMP%\rarsfx0\qtquick\controls\private\columnmenucontent.qml
- %TEMP%\rarsfx0\qtquick\controls\calendar.qml
- %TEMP%\rarsfx0\qtquick\dialogs\qml\colorslider.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\comboboxstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circulartickmarklabelstyle.qml
- %TEMP%\rarsfx0\qtquick\extras\private\circulartickmarklabel.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\circulargaugestyle.qml
- %TEMP%\rarsfx0\qtquick\extras\circulargauge.qml
- %TEMP%\rarsfx0\qtquick\extras\private\circularbuttonstylehelper.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\coloroverlay.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\commonstylehelper.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\colorize.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\comboboxstyle.qml
- %TEMP%\rarsfx0\translations\qt_ja.qm
- %TEMP%\rarsfx0\translations\qt_ko.qm
- %TEMP%\rarsfx0\translations\qt_lv.qm
- %TEMP%\rarsfx0\translations\qt_pl.qm
- %TEMP%\rarsfx0\translations\qt_ru.qm
- %TEMP%\rarsfx0\translations\qt_sk.qm
- %TEMP%\rarsfx0\translations\qt_uk.qm
- %TEMP%\rarsfx0\qtquick\controls.2\abstractbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\private\abstractcheckable.qml
- %TEMP%\rarsfx0\qtquick\controls.2\applicationwindow.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\applicationwindow.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\applicationwindow.qml
- %TEMP%\rarsfx0\qtquick\controls\applicationwindow.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\applicationwindowstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\applicationwindowstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\private\basicbutton.qml
- %TEMP%\rarsfx0\qtquick\controls\private\basictableview.qml
- %TEMP%\rarsfx0\qtquick\controls.2\buttongroup.qml
- %TEMP%\rarsfx0\qtquick\controls\button.qml
- %TEMP%\rarsfx0\qtquick\controls.2\button.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\button.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\busyindicatorstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\busyindicatorstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\desktop\buttonstyle.qml
- %TEMP%\rarsfx0\qtquick\controls\busyindicator.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\button.qml
- %TEMP%\rarsfx0\qtquick\controls.2\busyindicator.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\brightnesscontrast.qml
- %TEMP%\rarsfx0\qtquick\controls.2\material\boxshadow.qml
- %TEMP%\rarsfx0\qtgraphicaleffects\blend.qml
- %TEMP%\rarsfx0\qtquick\controls\styles\base\basictableviewstyle.qml
- %TEMP%\rarsfx0\qtquick\controls.2\universal\busyindicator.qml
- %LOCALAPPDATA%\install\cache\qmlcache\4eb1ec4aaa162be54cb9e4d99b9c7b53d746afc7.qmlc.ya2308
Moves the following files
- from %LOCALAPPDATA%\install\cache\qmlcache\1cad7b73d32e08778bd9e9ea19100220040a838a.qmlc.hp2308 to %LOCALAPPDATA%\install\cache\qmlcache\1cad7b73d32e08778bd9e9ea19100220040a838a.qmlc
- from %LOCALAPPDATA%\install\cache\qmlcache\f4c4c7d8440aa8b867093e8d31d3ce6cbab7160a.qmlc.gq2308 to %LOCALAPPDATA%\install\cache\qmlcache\f4c4c7d8440aa8b867093e8d31d3ce6cbab7160a.qmlc
- from %LOCALAPPDATA%\install\cache\qmlcache\e0e58d85f0b69cea69151e18c33ddee62a691d8f.qmlc.uh2308 to %LOCALAPPDATA%\install\cache\qmlcache\e0e58d85f0b69cea69151e18c33ddee62a691d8f.qmlc
- from %LOCALAPPDATA%\install\cache\qmlcache\2fa2a6c8c2df56a7932cf8b7368b907b95cf99c7.qmlc.em2308 to %LOCALAPPDATA%\install\cache\qmlcache\2fa2a6c8c2df56a7932cf8b7368b907b95cf99c7.qmlc
- from %LOCALAPPDATA%\install\cache\qmlcache\4eb1ec4aaa162be54cb9e4d99b9c7b53d746afc7.qmlc.ya2308 to %LOCALAPPDATA%\install\cache\qmlcache\4eb1ec4aaa162be54cb9e4d99b9c7b53d746afc7.qmlc
Network activity
Connects to
- 'dl####.##.eu-west-2.amazonaws.com':443
- 'dl####.##.us-east-2.amazonaws.com':443
- 'dl###.##.#a-central-1.amazonaws.com':443
- 'co###.##.##-northeast-2.amazonaws.com':443
- 'to#.#yip.top':80
- 'x.##2.us':80
- 'microsoft.com':80
TCP
HTTP GET requests
- http://to#.#yip.top/
- http://x.##2.us/x.cer
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
Other
- 'dl####.##.eu-west-2.amazonaws.com':443
- 'dl###.##.#a-central-1.amazonaws.com':443
- 'dl####.##.us-east-2.amazonaws.com':443
- 'co###.##.##-northeast-2.amazonaws.com':443
UDP
- DNS ASK dl####.##.us-east-2.amazonaws.com
- DNS ASK dl####.##.eu-west-2.amazonaws.com
- DNS ASK dl###.##.#a-central-1.amazonaws.com
- DNS ASK co###.##.##-northeast-2.amazonaws.com
- DNS ASK to#.#yip.top
- DNS ASK x.##2.us
- DNS ASK microsoft.com
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
Creates and executes the following
- '%TEMP%\rarsfx0\install.exe' --silent
- '%TEMP%\rarsfx0\tomprotocal\tomproxy.exe' REMOVPROXY
- '%TEMP%\rarsfx0\tomprotocal\tomproxy.exe' REMOVNINEVPN
- '%TEMP%\rarsfx0\nssm.exe' stop LwipLoService
- '%TEMP%\rarsfx0\nssm.exe' remove LwipLoService confirm
- '%WINDIR%\syswow64\net.exe' stop TomService' (with hidden window)
- '%WINDIR%\syswow64\sc.exe' delete TomService' (with hidden window)
- '%WINDIR%\syswow64\net.exe' stop LocalService' (with hidden window)
- '%WINDIR%\syswow64\sc.exe' delete LocalService' (with hidden window)
- '%TEMP%\rarsfx0\nssm.exe' stop LwipLoService' (with hidden window)
- '%TEMP%\rarsfx0\nssm.exe' remove LwipLoService confirm' (with hidden window)
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c net stop TomPackage
- '%WINDIR%\syswow64\net1.exe' stop TomService
- '%WINDIR%\syswow64\net1.exe' stop TomPackage
- '%WINDIR%\syswow64\sc.exe' delete TomService
- '%WINDIR%\syswow64\cmd.exe' /c sc delete TomPackage
- '%WINDIR%\syswow64\sc.exe' delete TomPackage
- '%WINDIR%\syswow64\net1.exe' stop LocalService
- '%WINDIR%\syswow64\sc.exe' delete LocalService
