VBS.Muldrop.578

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\desktop.ini.nbl

Malicious functions

Creates and executes the following

'%TEMP%\ransom.exe'

Reads files which store third party applications passwords

%HOMEPATH%\desktop\000814251_video_01.avi
%HOMEPATH%\desktop\508softwareandos.doc
%HOMEPATH%\desktop\about.htm
%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\alert.html
%HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
%HOMEPATH%\desktop\browse.htm
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\contosoroot_1.cer
%HOMEPATH%\desktop\correct.avi
%HOMEPATH%\desktop\cveuropeo.doc
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dialmap.bmp
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\file_p_00000000_1371597592.docx
%HOMEPATH%\desktop\iisstart.html
%HOMEPATH%\desktop\issi2013_template_for_posters.docx
%HOMEPATH%\desktop\ituneshelpunavailable.htm
%HOMEPATH%\desktop\ituneshelpunavailable.html
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\sdksampleprivdeveloper.cer
%HOMEPATH%\desktop\testcertificate.cer
%HOMEPATH%\desktop\tileimage.bmp
%HOMEPATH%\desktop\trivial-merge.htm
%LOCALAPPDATA%\google\chrome\user data\default\cookies
%LOCALAPPDATA%\google\chrome\user data\default\login data
%LOCALAPPDATA%\google\chrome\user data\default\web data
%LOCALAPPDATA%\microsoft\edge\user data\default\login data
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%APPDATA%\mozilla\firefox\profiles.ini
%APPDATA%\opera software\opera stable\login data
%APPDATA%\thunderbird\profiles.ini

Modifies file system

Creates the following files

%TEMP%\ransom.exe
%HOMEPATH%\desktop\000814251_video_01.avi.nbl
%HOMEPATH%\desktop\508softwareandos.doc.nbl
%HOMEPATH%\desktop\about.htm.nbl
%HOMEPATH%\desktop\advice_process.htm.nbl
%HOMEPATH%\desktop\alert.html.nbl
%HOMEPATH%\desktop\calc.exe.nbl
%HOMEPATH%\desktop\desktop.ini.nbl
%HOMEPATH%\desktop\google chrome.lnk.nbl
%HOMEPATH%\desktop\skypesetup.exe.nbl
%HOMEPATH%\desktop\telegram.lnk.nbl
%HOMEPATH%\documents\desktop.ini.nbl
%HOMEPATH%\pictures\desktop.ini.nbl
%HOMEPATH%\pictures\camera roll\desktop.ini.nbl
%HOMEPATH%\videos\desktop.ini.nbl
%HOMEPATH%\music\desktop.ini.nbl
%HOMEPATH%\downloads\desktop.ini.nbl
%LOCALAPPDATA%\comms\unistore\data\aggregatecache.uca.nbl
%LOCALAPPDATA%\comms\unistoredb\store.jfm.nbl
%LOCALAPPDATA%\comms\unistoredb\store.vol.nbl
%LOCALAPPDATA%\comms\unistoredb\uss.jcp.nbl
%LOCALAPPDATA%\comms\unistoredb\uss.jtx.nbl
%LOCALAPPDATA%\comms\unistoredb\ussres00001.jrs.nbl
%LOCALAPPDATA%\comms\unistoredb\ussres00002.jrs.nbl
%LOCALAPPDATA%\comms\unistoredb\usstmp.jtx.nbl
%LOCALAPPDATA%\connecteddevicesplatform\cdpglobalsettings.cdp.nbl
%LOCALAPPDATA%\connecteddevicesplatform\connected devices platform certificates.sst.nbl
%LOCALAPPDATA%\connecteddevicesplatform\l.user.cdp.nbl
%LOCALAPPDATA%\connecteddevicesplatform\l.user.cdpresource.nbl
%LOCALAPPDATA%\connecteddevicesplatform\l.user\activitiescache.db-shm.nbl
%LOCALAPPDATA%\connecteddevicesplatform\l.user\activitiescache.db-wal.nbl
%LOCALAPPDATA%\google\chrome\application\chrome.exe.nbl
%LOCALAPPDATA%\google\chrome\application\debug.log.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\47.0.2526.106.manifest.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome_100_percent.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome_200_percent.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome_child.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome_elf.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\chrome_watcher.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\d3dcompiler_47.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\delegate_execute.exe.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\libegl.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\libexif.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\libglesv2.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\metro_driver.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\nacl64.exe.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\nacl_irt_x86_32.nexe.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\nacl_irt_x86_64.nexe.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\natives_blob.bin.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\resources.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\snapshot_blob.bin.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\widevinecdmadapter.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\xinput1_3.dll.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\docs.crx.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\drive.crx.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\external_extensions.json.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\gmail.crx.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\search.crx.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\default_apps\youtube.crx.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\extensions\external_extensions.json.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\installer\chrome.7z.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\installer\setup.exe.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\am.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ar.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\bg.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\bn.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ca.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\cs.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\da.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\de.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\el.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\en-gb.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\en-us.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\es-419.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\es.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\et.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\fa.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\fi.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\fil.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\fr.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\gu.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\he.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\hi.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\hr.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\hu.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\id.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\it.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ja.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\kn.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ko.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\lt.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\lv.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ml.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\mr.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ms.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\nb.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\nl.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\pl.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\pt-br.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\pt-pt.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ro.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ru.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\sk.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\sl.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\sr.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\sv.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\sw.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\ta.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\te.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\th.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\tr.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\uk.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\vi.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\zh-cn.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\locales\zh-tw.pak.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\pepperflash\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\application\47.0.2526.106\pepperflash\pepflashplayer.dll.nbl
%LOCALAPPDATA%\google\chrome\user data\first run.nbl
%LOCALAPPDATA%\google\chrome\user data\local state.nbl
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies.nbl
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\chromedwritefontcache.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cookies.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cookies-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\current session.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension cookies.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension cookies-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\favicons.nbl
%LOCALAPPDATA%\google\chrome\user data\default\favicons-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\google profile.ico.nbl
%LOCALAPPDATA%\google\chrome\user data\default\history.nbl
%LOCALAPPDATA%\google\chrome\user data\default\history provider cache.nbl
%LOCALAPPDATA%\google\chrome\user data\default\history-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\login data.nbl
%LOCALAPPDATA%\google\chrome\user data\default\login data-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\network action predictor.nbl
%LOCALAPPDATA%\google\chrome\user data\default\network action predictor-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\preferences.nbl
%LOCALAPPDATA%\google\chrome\user data\default\quotamanager.nbl
%LOCALAPPDATA%\google\chrome\user data\default\quotamanager-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\readme.nbl
%LOCALAPPDATA%\google\chrome\user data\default\secure preferences.nbl
%LOCALAPPDATA%\google\chrome\user data\default\shortcuts.nbl
%LOCALAPPDATA%\google\chrome\user data\default\shortcuts-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\top sites.nbl
%LOCALAPPDATA%\google\chrome\user data\default\top sites-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\visited links.nbl
%LOCALAPPDATA%\google\chrome\user data\default\web data.nbl
%LOCALAPPDATA%\google\chrome\user data\default\web data-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_0.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_1.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_2.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_3.nbl
%LOCALAPPDATA%\google\chrome\user data\default\cache\index.nbl
%LOCALAPPDATA%\google\chrome\user data\default\databases\databases.db-journal.nbl
%LOCALAPPDATA%\google\chrome\user data\default\data_reduction_proxy_leveldb\000003.log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\data_reduction_proxy_leveldb\current.nbl
%LOCALAPPDATA%\google\chrome\user data\default\data_reduction_proxy_leveldb\lock.nbl
%LOCALAPPDATA%\google\chrome\user data\default\data_reduction_proxy_leveldb\log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\data_reduction_proxy_leveldb\manifest-000001.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\000003.log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\current.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\lock.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\manifest-000001.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension state\000003.log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension state\current.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension state\lock.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension state\log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extension state\manifest-000001.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\main.js.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ar\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\bg\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ca\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\cs\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\da\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\de\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\el\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_gb\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_us\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es_419\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\et\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\eu\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fil\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\he\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hu\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\id\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\it\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ja\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ko\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ms\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\nl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\no\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_br\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_pt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ro\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ru\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\th\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\tr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\uk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\vi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_cn\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_tw\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_br\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_pt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_cn\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_tw\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_gb\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_us\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_br\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_pt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_cn\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_tw\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_br\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_pt\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_cn\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_tw\messages.json.nbl
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\7fd9.tmp.nbl
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\7fda.tmp.nbl
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\b22.tmp.nbl
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\b23.tmp.nbl
%LOCALAPPDATA%\google\chrome\user data\default\session storage\000003.log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\session storage\current.nbl
%LOCALAPPDATA%\google\chrome\user data\default\session storage\lock.nbl
%LOCALAPPDATA%\google\chrome\user data\default\session storage\log.nbl
%LOCALAPPDATA%\google\chrome\user data\default\session storage\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\powershell.exe.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\crashpadmetrics-active.pma.nbl
%LOCALAPPDATA%\microsoft\edge\user data\first run.nbl
%LOCALAPPDATA%\microsoft\edge\user data\firstlaunchafterinstallation.nbl
%LOCALAPPDATA%\microsoft\edge\user data\functional data.nbl
%LOCALAPPDATA%\microsoft\edge\user data\functional san data.nbl
%LOCALAPPDATA%\microsoft\edge\user data\last browser.nbl
%LOCALAPPDATA%\microsoft\edge\user data\last version.nbl
%LOCALAPPDATA%\microsoft\edge\user data\local state.nbl
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69005e22-1180.pma.nbl
%LOCALAPPDATA%\microsoft\edge\user data\crashpad\metadata.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\edge profile.ico.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\favicons.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\history.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\history-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\login data.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\login data-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\media history.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\media history-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\network persistent state.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\preferences.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\readme.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\secure preferences.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\top sites.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\top sites-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\visited links.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\web data.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\the-real-index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\wasm\index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\wasm\index-dir\the-real-index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\platform notifications\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\platform notifications\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\platform notifications\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\platform notifications\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\platform notifications\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log.old.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\current.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\lock.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log.old.nbl
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\manifest-000001.nbl
%LOCALAPPDATA%\microsoft\edge\user data\grshadercache\gpucache\data_0.nbl
%LOCALAPPDATA%\microsoft\edge\user data\grshadercache\gpucache\data_1.nbl
%LOCALAPPDATA%\microsoft\edge\user data\grshadercache\gpucache\data_2.nbl
%LOCALAPPDATA%\microsoft\edge\user data\grshadercache\gpucache\data_3.nbl
%LOCALAPPDATA%\microsoft\edge\user data\grshadercache\gpucache\index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\shadercache\gpucache\data_0.nbl
%LOCALAPPDATA%\microsoft\edge\user data\shadercache\gpucache\data_1.nbl
%LOCALAPPDATA%\microsoft\edge\user data\shadercache\gpucache\data_2.nbl
%LOCALAPPDATA%\microsoft\edge\user data\shadercache\gpucache\data_3.nbl
%LOCALAPPDATA%\microsoft\edge\user data\shadercache\gpucache\index.nbl
%LOCALAPPDATA%\microsoft\edge\user data\smartscreen\local\cache.nbl
%LOCALAPPDATA%\microsoft\edge\user data\smartscreen\local\download_cache.nbl
%LOCALAPPDATA%\microsoft\edge\user data\smartscreen\local\warnstatecache.nbl
%LOCALAPPDATA%\microsoft\gamedvr\knowngamelist.bin.nbl
%LOCALAPPDATA%\microsoft\internet explorer\brndlog.txt.nbl
%LOCALAPPDATA%\microsoft\internet explorer\ie4uinit-cleariconcache.log.nbl
%LOCALAPPDATA%\microsoft\internet explorer\ie4uinit-userconfig.log.nbl
%LOCALAPPDATA%\microsoft\internet explorer\domainsuggestions\en-us.1.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\01_music_auto_rated_at_5_stars.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\02_music_added_in_the_last_month.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\03_music_rated_at_4_or_5_stars.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\04_music_played_in_the_last_month.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\05_pictures_taken_in_the_last_month.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\06_pictures_rated_4_or_5_stars.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\07_tv_recorded_in_the_last_week.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\08_video_rated_at_4_or_5_stars.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\09_music_played_the_most.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\10_all_music.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\11_all_pictures.wpl.nbl
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00018047\12_all_video.wpl.nbl
%LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres.nbl
%LOCALAPPDATA%\microsoft\vault\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\policy.vpol.nbl
%LOCALAPPDATA%\microsoft\windows\1033\structuredqueryschema.bin.nbl
%LOCALAPPDATA%\microsoft\windows\application shortcuts\desktop.ini.nbl
%LOCALAPPDATA%\microsoft\windows\burn\burn\desktop.ini.nbl
%LOCALAPPDATA%\microsoft\windows\caches\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000021.db.nbl
%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog.etl.nbl
%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl.nbl
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.word\~wrs{0aff12cb-9561-4537-9cc9-8fd12d76fa4b}.tmp.nbl
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\ie\qq78aq1y\suggestions[1].en-us.nbl
%LOCALAPPDATA%\microsoft\windows\powershell\startupprofiledata-noninteractive.nbl
%LOCALAPPDATA%\microsoft\windows\safety\edge\local\local\cache.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v01.chk.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100003.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100004.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100005.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100006.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100007.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v0100008.log.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v01res00001.jrs.nbl
%LOCALAPPDATA%\microsoft\windows\webcache\v01res00002.jrs.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group1\1 - desktop.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group1\desktop.ini.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\1 - run.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\2 - search.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\3 - windows explorer.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\4 - control panel.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\5 - task manager.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group2\desktop.ini.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\01 - command prompt.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\01a - windows powershell.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\02 - command prompt.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\02a - windows powershell.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\03 - computer management.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\04 - disk management.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\04-1 - networkstatus.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\05 - device manager.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\06 - systemabout.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\07 - event viewer.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\08 - powerandsleep.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\09 - mobility center.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\10 - appsandfeatures.lnk.nbl
%LOCALAPPDATA%\microsoft\windows\winx\group3\desktop.ini.nbl
%LOCALAPPDATA%\microsoft\windows sidebar\settings.ini.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\22914084a5d64db047ed122362f901e86268812e.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\2c4bc57b224fc0d540c271f408565b4423e35aa5.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\2cb84dd9abb4e1485d83397c59b193094e1abfc7.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\2ceedfe9ca8e7fc8ecf3f6fad8dc043e9ce5e905.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\2d343b145271af40f034adf8c49098403aab44be.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\38ff788a718c79ddc3d1e23eaa975517d9ba3bb0.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\39d80535a21e286b3c662765c5f09aceb927e77d.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\3de122af51e9c396743da36d6f24fc9288ba6d86.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\4eaf8b5e26e3366fa3cc908d7105ed514a4f1408.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\535362d505e47b0f250e84b8972968e16ef0b9b4.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\54e0ba3f96a1c83fa5c93e20aefb40ca46674abf.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\5f204cbbeaaca93a886dec976883edfb69955e3a.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\606b8f565718b076f7f0a603dea9a9b455a0a2be.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\656880559790fe4b926371cc3c026d9b3c516a2f.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\6f0c5731745aaa0553e2cde6d5a7086652eb9f5e.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\75330efe55b8ffddca9f199e1f6319a10ed9d829.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\76577c137f0c7676b6d17117d736b2e52f70f052.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\7943793ad6ef12ca229a1df7a721b44c210bbc82.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\80eb98c1db7b559c9e80a86c97a63a602e0fbda3.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\82c47fa9f5f29d08908329a836215460fd85b37b.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\850e8e053b50485075a324ff88bc9c5f8abb94f9.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\89c9b59023c6004c5fca8e641b2bd533baa7f06e.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\89f2f7b5ac6c606ca6223b1c39fb4ed3a611b5c0.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\8af5d98ea49bfc5f75dbbb8cbe9cadf11b63e0f4.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\8ebe2e1a6aaee804af656ee504abc2e11a169551.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\90e321ee94230dcdbdcd2ec0b77c695a4fc21f78.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\948cb11b2cd60886d449b527d693f212461f32b7.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\9648808b6c63cd1aad97a7b68f84f35c95682143.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\9b5ba1a329c1608155921cda2dcad2726913ac23.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\9deeff51b75006e683d382d3fcad88123cbc6a3c.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\9e24f2fbe436912f5fe46520277cc7d886375eb3.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\a463ab67f04ca93850eef869c404c62674ab387d.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\a816a4917a437c2c50a1e80ffb8dcc9e921bf4f6.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\b078d6612449a02ba2a6ff7fbc74b09085511e91.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\b6f3ce4c2ae7120330ba1b1d0708da88f53ffcdb.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\ba59279cc6cfd1073638f657233f1d59e22b0b47.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\be13857faf251cca8c4ae07311778b6623ef86dc.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\c1aa5f3412694f39c57874190d3f36e8e7fd6474.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\c53fff027948b9d0c07e3c92c8b6a2e017f25aca.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\c92efbf649720259c09698d33e7efabb004490e9.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\cda62003b1b987a64f1fac75d1484dbff94f08fb.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\cdb7fb7776f6c1bb8787863d3d07f555e142148b.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\d395239c6c600503c9cef2d913be946b55976a23.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\d6b0add0daea00708cbb4290b85cca0e0fa79061.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\f7d0ce5f67bbf807647cadca3476fb65823ade6c.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\ff51e0afd58cb9385f8e43799fc940f80f939a0c.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\cache2\entries\ff63a96cb0ee05c4e8600cafada617eba0bab35d.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\scriptcache-child-current.bin.nbl
%TEMP%\{e76cb8f4-6bda-4f20-a288-1dd7b6084b0e}.png
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\scriptcache-child.bin.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\scriptcache-current.bin.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\scriptcache.bin.nbl
%LOCALAPPDATA%\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.{f3021280-8b71-ae51-7bf9-daa692344272}.png
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\startupcache.8.little.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\urlcache-current.bin.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\urlcache.bin.nbl
%LOCALAPPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\startupcache\webext.sc.lz4.nbl
%LOCALAPPDATA%\opera software\opera stable\cache\data_0.nbl
%LOCALAPPDATA%\opera software\opera stable\cache\data_1.nbl
%LOCALAPPDATA%\opera software\opera stable\cache\data_2.nbl
%LOCALAPPDATA%\opera software\opera stable\cache\data_3.nbl
%LOCALAPPDATA%\opera software\opera stable\cache\index.nbl
%LOCALAPPDATA%\packages\1527c705-839a-4832-9118-54d4bd6a0c89_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\e2a4f912-2574-4a75-9bb0-0d023378592b_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\f46d4000-fd22-4db4-ac8e-4e1ddde828fe_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.549981c3f5f10_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.549981c3f5f10_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.549981c3f5f10_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.aad.brokerplugin_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.aad.brokerplugin_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.aad.brokerplugin_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.accountscontrol_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.asynctextservice_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.bingweather_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.bingweather_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.bingweather_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.bioenrollment_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.bioenrollment_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.bioenrollment_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.creddialoghost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.desktopappinstaller_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.desktopappinstaller_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.desktopappinstaller_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.ecapp_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.gethelp_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.getstarted_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.heifimageextension_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.lockapp_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.lockapp_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.lockapp_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.microsoft3dviewer_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftedgedevtoolsclient_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\ac\microsoft\clr_v4.0\usagelogs\backgroundtaskhost.exe.log.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\localcache\local\microsoft\clr_v4.0\usagelogs\localbridge.exe.log.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\systemappdata\helium\user.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\systemappdata\helium\user.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\systemappdata\helium\userclasses.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\systemappdata\helium\userclasses.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.microsoftstickynotes_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.mixedreality.portal_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.mspaint_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.office.onenote_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.people_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.screensketch_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\dtlscert.der.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\dtlskey.der.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\slimcore-aria-cache.data.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\slimcore-aria-cache.data-shm.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\slimcore-aria-cache.data-wal.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\asyncstorage\firsttimesignin.data.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\asyncstorage\saveullog.data.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\cs_localstate\cs_shared.conf.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\diagoutputdir\skypeapp0.txt.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\localstate\skypert\persistent.conf.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.skypeapp_kzf8qxf38zg5c\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.storepurchaseapp_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.vp9videoextensions_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.wallet_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.webmediaextensions_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.webpimageextension_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.win32webviewhost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.apprep.chxapp_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.callingshellapp_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.capturepicker_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\ac\tokenbroker\cache\e71e1300703d5395820e448840a760f0dd25ad50.tbres.nbl
%LOCALAPPDATA%\packages\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkcaptiveportal_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkcaptiveportal_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkcaptiveportal_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\mediadb.v1.sqlite.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\mediadb.v1.sqlite-shm.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\mediadb.v1.sqlite-wal.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosapptracing_startedinbgmode.etl.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.photos_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\appcache[1].man.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_10[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_11[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_12[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_13[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_14[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_15[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_16[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_17[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_18[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_19[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_20[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_21[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_22[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_23[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_24[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_25[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_26[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_27[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_28[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_29[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_2[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_3[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_4[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_5[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_6[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_7[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_8[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\appcache\dfgt9a84\1\c__windows_systemapps_microsoft.windows.search_cw5n1h2txyewy_cache_desktop_9[1].txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\content\57c8edb95df3f0ad4ee2dc2b8cfd4157.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\content\77ec63bda74bd0d0e0426dc8f8008506.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\content\e2c6cbaf0af08cf203ba74bf0d0ab6d5_363582827213c09529a76f35fb615187.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\content\fb0d848f74f70bb2eaa93746d24d9749.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\metadata\57c8edb95df3f0ad4ee2dc2b8cfd4157.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\metadata\77ec63bda74bd0d0e0426dc8f8008506.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\metadata\e2c6cbaf0af08cf203ba74bf0d0ab6d5_363582827213c09529a76f35fb615187.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\microsoft\cryptneturlcache\metadata\fb0d848f74f70bb2eaa93746d24d9749.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\ac\tokenbroker\cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\308046b0af4a39cb.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\34tl`i`z5(n32&(jf{)!readerprogramfiles_fwdk6qbnd93&(s^fji40.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\chrome_75p34jt5mtmxb4uorldk27pj4u.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\c__users_user_appdata_roaming_telegram desktop_telegram_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\c__users_user_appdata_roaming_telegram desktop_unins000_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\d78bf5dd33499ec2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\http___java_com_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\http___java_com_help.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\http___support_steampowered_com_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_549981c3f5f10_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{8aa47365-b2b3-1961-69eb-f866e376b12f}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{8abd94fb-e7d6-84a6-a997-c918edde0ae5}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{923dd477-5846-686b-a659-0fccd73851a8}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{b994e73c-a04f-5ddb-a2b2-b093ba9d8a78}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{bb044bfd-25b7-2faa-22a8-6371a93e0456}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{bd3f924e-55fb-a1ba-9de6-b50f9f2460ac}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{c1c6f8ac-40a3-0f5c-146f-65a9dc70bbb4}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{c804bba7-fa5f-cbf7-8b55-2096e5f972cb}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{d9ac705f-2d61-6969-a9c9-b8ec52f7b9c9}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_autogenerated_{daa168de-4306-c8bc-8c11-b596240bdded}.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_bingweather_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_gethelp_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_getstarted_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_internetexplorer_default.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_microsoft3dviewer_8wekyb3d8bbwe!microsoft_microsoft3dviewer.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_microsoftofficehub_8wekyb3d8bbwe!microsoft_microsoftofficehub.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_microsoftsolitairecollection_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_microsoftstickynotes_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_mixedreality_portal_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_mspaint_8wekyb3d8bbwe!microsoft_mspaint.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_office_onenote_8wekyb3d8bbwe!microsoft_onenoteim.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_office_outlook_exe_16.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_people_8wekyb3d8bbwe!x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_screensketch_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_skydrive_desktop.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_skypeapp_kzf8qxf38zg5c!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowsalarms_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowscalculator_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowscamera_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_calendar.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_mail.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowsfeedbackhub_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowsmaps_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowssoundrecorder_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windowsstore_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_administrativetools.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_computer.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_controlpanel.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_explorer.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_mediaplayer32.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_photos_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_remotedesktop.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_sechealthui_cw5n1h2txyewy!sechealthui.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_windows_shell_rundialog.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_xboxapp_8wekyb3d8bbwe!microsoft_xboxapp.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_xboxgamingoverlay_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_yourphone_8wekyb3d8bbwe!app.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_zunemusic_8wekyb3d8bbwe!microsoft_zunemusic.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\microsoft_zunevideo_8wekyb3d8bbwe!microsoft_zunevideo.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\msedge.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\operasoftware_operawebbrowser_1723426318.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\windows_immersivecontrolpanel_cw5n1h2txyewy!microsoft_windows_immersivecontrolpanel.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskaccessfiles_n8f'ro}vg@{g8gc8rf-7.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskdcfdatabasecompare_w6f_&aw%l9xv1qaxc_[x.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskdcfspreadsheetcompare_pnd-oez!q=wt&bhvvafh.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskexcelfiles__%8gickcv9oi`kw$=[u[.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkksklync_corefiles_pwruq7^c^ap,f'm!t7ym.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkksklync_corefiles__e[jg))gz@]wuy^5sa=v.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskonenotefiles_cvfb13ea!_]fwd8+f)le.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskosmadminux_6gwy9+-=2=_rw2htvkpt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskosmclientux_dk}lwy1$y8y(jfk(!d}t.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskpptfiles_x5hwz+5wj@!e-!bm4-,g.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskpubprimary_p_kgq{7@%ajw%ma)u_&_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkksksetlanguagefiles_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskwordfiles_%qyb3i=kw_h[gnv'^a,_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\zn=bv5!!!!!!!!!mkkskwxpfiles_.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_charmap_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_cleanmgr_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_cmd_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_comexp_msc.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_dfrgui_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_iscsicpl_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_magnify_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_mdsched_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_msconfig_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_msinfo32_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_mspaint_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_narrator_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_notepad_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_odbcad32_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_osk_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_printmanagement_msc.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_psr_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_quickassist_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_recoverydrive_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_services_msc.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_snippingtool_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_wfs_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_wf_msc.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_windowspowershell_v1_0_powershell_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{1ac14e77-02e7-4e5d-b744-2eb1ae5198b7}_windowspowershell_v1_0_powershell_ise_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_common files_microsoft shared_ink_mip_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_java_jre1_8_0_77_bin_javacpl_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_windows nt_accessories_wordpad_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_winrar_rar_txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_winrar_whatsnew_txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_winrar_winrar_chm.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{6d809377-6af0-444b-8957-a3773f02200e}_winrar_winrar_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_adobe_acrobat reader dc_reader_acrord32_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_dcf_databasecompare_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_dcf_spreadsheetcompare_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_excel_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_lync_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_msaccess_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_msoev_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_msotd_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_mspub_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_ocpubmgr_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_onenote_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_powerpnt_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_microsoft office_office16_winword_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}_steam_steam_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{d65231b0-b2f1-4857-a4ce-a8e7c6ea7d27}_odbcad32_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{d65231b0-b2f1-4857-a4ce-a8e7c6ea7d27}_windowspowershell_v1_0_powershell_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{d65231b0-b2f1-4857-a4ce-a8e7c6ea7d27}_windowspowershell_v1_0_powershell_ise_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\appiconcache\100\{f38bf404-1d43-42f2-9305-67de0b28fc23}_regedit_exe.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{57061e4e-1e16-4c61-b18c-11c132e74233}\0.0.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{57061e4e-1e16-4c61-b18c-11c132e74233}\0.1.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{57061e4e-1e16-4c61-b18c-11c132e74233}\0.2.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{57061e4e-1e16-4c61-b18c-11c132e74233}\apps.ft.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{57061e4e-1e16-4c61-b18c-11c132e74233}\apps.index.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{e1d25c92-9e2f-468f-b31e-8ea94f6c0fac}\0.0.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{e1d25c92-9e2f-468f-b31e-8ea94f6c0fac}\0.1.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{e1d25c92-9e2f-468f-b31e-8ea94f6c0fac}\0.2.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{e1d25c92-9e2f-468f-b31e-8ea94f6c0fac}\apps.ft.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\apps_{e1d25c92-9e2f-468f-b31e-8ea94f6c0fac}\apps.index.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\apps.csg.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\apps.schema.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\appsconversions.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\appsglobals.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\appssynonyms.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\settings.csg.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\settings.schema.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\settingsconversions.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\settingsglobals.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\input_{64c6d362-453e-4f77-ac86-adaf4fc0bc55}\settingssynonyms.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{b8923a2c-9ca7-4024-b14f-30794afe5664}\0.0.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{b8923a2c-9ca7-4024-b14f-30794afe5664}\0.1.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{b8923a2c-9ca7-4024-b14f-30794afe5664}\0.2.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{b8923a2c-9ca7-4024-b14f-30794afe5664}\settings.ft.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{b8923a2c-9ca7-4024-b14f-30794afe5664}\settings.index.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{c962daa5-3c13-4c53-b573-e2ac874a52a3}\0.0.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{c962daa5-3c13-4c53-b573-e2ac874a52a3}\0.1.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{c962daa5-3c13-4c53-b573-e2ac874a52a3}\0.2.filtertrie.intermediate.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{c962daa5-3c13-4c53-b573-e2ac874a52a3}\settings.ft.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\constraintindex\settings_{c962daa5-3c13-4c53-b573-e2ac874a52a3}\settings.index.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678985908530147.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678986116913057.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678986733179726.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678987880972005.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678989939868207.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678992605195845.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678993617257337.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678994176510543.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678994514315348.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678997188779717.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678998364928099.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678998646131207.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678999296595607.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133678999588120541.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679000033359704.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679000600569277.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679000729483910.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679004887860863.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679006410337295.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\appcache133679008721437407.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\localstate\devicesearchcache\settingscache.txt.nbl
%LOCALAPPDATA%\packages\microsoft.windows.search_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windows.xgpuejectdialog_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowsalarms_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowsalarms_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windowsalarms_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windowscalculator_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowscamera_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowscamera_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windowscamera_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\hxcommalwaysonlog.etl.nbl
%LOCALAPPDATA%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\hxstore.hxd.nbl
%LOCALAPPDATA%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowsmaps_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowsstore_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.windowsstore_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.windowsstore_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxapp_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxapp_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.xboxapp_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\localstate\diagoutputdir\logfile_august_11_2024__6_41_11.txt.nbl
%LOCALAPPDATA%\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.yourphone_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.zunemusic_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoft.zunevideo_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoftwindows.client.cbs_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\microsoftwindows.undockeddevkit_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\microsoftwindows.undockeddevkit_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\microsoftwindows.undockeddevkit_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\ncsiuwpapp_8wekyb3d8bbwe\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\windows.cbspreview_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\settings\roaming.lock.nbl
%LOCALAPPDATA%\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\settings\settings.dat.log1.nbl
%LOCALAPPDATA%\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\settings\settings.dat.log2.nbl
%LOCALAPPDATA%\packages\windows.printdialog_cw5n1h2txyewy\settings\roaming.lock.nbl
%TEMP%\.ses.nbl
%TEMP%\msedge_installer.log.nbl
%TEMP%\ransom.exe.nbl
%TEMP%\content\1160-4496-powershell.exe-23-10-34-958.dump.nbl
%TEMP%\content\1160-4496-powershell.exe-23-10-35-436.dump.nbl
%TEMP%\content\1160-4496-powershell.exe-23-10-35-706.dump.nbl
%TEMP%\content\1160-4496-powershell.exe-23-10-35-992.dump.nbl
%TEMP%\content\1160-4496-powershell.exe-23-10-37-598.dump.nbl
%TEMP%\content\1692-4068-powershell.exe-23-01-17-697.dump.nbl
%TEMP%\content\1692-4068-powershell.exe-23-01-17-947.dump.nbl
%TEMP%\content\1692-4068-powershell.exe-23-01-18-072.dump.nbl
%TEMP%\content\1692-4068-powershell.exe-23-01-18-275.dump.nbl
%TEMP%\content\1692-4068-powershell.exe-23-01-19-040.dump.nbl
%TEMP%\content\2448-2364-powershell.exe-23-22-54-265.dump.nbl
%TEMP%\content\2448-2364-powershell.exe-23-22-54-877.dump.nbl
%TEMP%\content\2448-2364-powershell.exe-23-22-55-326.dump.nbl
%TEMP%\content\2448-2364-powershell.exe-23-22-55-849.dump.nbl
%TEMP%\content\2448-2364-powershell.exe-23-23-00-659.dump.nbl
%TEMP%\content\2584-1644-powershell.exe-23-01-48-353.dump.nbl
%TEMP%\content\2584-1644-powershell.exe-23-01-48-493.dump.nbl
%TEMP%\content\3048-1468-wscript.exe-23-23-27-699.dump.nbl
%TEMP%\content\3588-1248-powershell.exe-23-01-41-665.dump.nbl
%TEMP%\content\3588-1248-powershell.exe-23-01-41-962.dump.nbl
%TEMP%\content\3588-1248-powershell.exe-23-01-42-275.dump.nbl
%TEMP%\content\3588-1248-powershell.exe-23-01-42-540.dump.nbl
%TEMP%\content\3588-1248-powershell.exe-23-01-43-822.dump.nbl
%TEMP%\content\3700-2720-cscript.exe-23-03-11-337.dump.nbl
%TEMP%\content\3700-2720-cscript.exe-23-03-11-353.dump.nbl
%TEMP%\content\3700-2720-cscript.exe-23-03-11-369.dump.nbl
%TEMP%\content\3700-2720-cscript.exe-23-03-13-275.dump.nbl
%TEMP%\content\4488-2208-wscript.exe-23-23-31-238.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-40-781.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-41-067.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-41-168.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-41-369.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-41-655.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-42-443.dump.nbl
%TEMP%\content\4520-4064-powershell.exe-23-10-42-966.dump.nbl
%TEMP%\content\4648-1780-powershell.exe-23-23-18-985.dump.nbl
%TEMP%\content\4648-1780-powershell.exe-23-23-19-796.dump.nbl
%TEMP%\content\4648-1780-powershell.exe-23-23-20-104.dump.nbl
%TEMP%\content\4648-1780-powershell.exe-23-23-20-810.dump.nbl
%TEMP%\content\4648-1780-powershell.exe-23-23-25-700.dump.nbl
%LOCALAPPDATA%\thunderbird\profiles\gbmwccb6.default-release\.startup-incomplete.nbl
%LOCALAPPDATA%\thunderbird\profiles\gbmwccb6.default-release\cache2\entries\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.nbl
%LOCALAPPDATA%\thunderbird\profiles\gbmwccb6.default-release\startupcache\startupcache.8.little.nbl
%LOCALAPPDATA%\thunderbird\profiles\gbmwccb6.default-release\startupcache\webext.sc.lz4.nbl
%APPDATA%\microsoft\bibliography\style\apasixtheditionofficeonline.xsl.nbl
%APPDATA%\microsoft\bibliography\style\chicago.xsl.nbl
%APPDATA%\microsoft\bibliography\style\gb.xsl.nbl
%APPDATA%\microsoft\bibliography\style\gostname.xsl.nbl
%APPDATA%\microsoft\bibliography\style\gosttitle.xsl.nbl
%APPDATA%\microsoft\bibliography\style\harvardanglia2008officeonline.xsl.nbl
%APPDATA%\microsoft\bibliography\style\ieee2006officeonline.xsl.nbl
%APPDATA%\microsoft\bibliography\style\iso690.xsl.nbl
%APPDATA%\microsoft\bibliography\style\iso690nmerical.xsl.nbl
%APPDATA%\microsoft\bibliography\style\mlaseventheditionofficeonline.xsl.nbl
%APPDATA%\microsoft\bibliography\style\sist02.xsl.nbl
%APPDATA%\microsoft\bibliography\style\turabian.xsl.nbl
%APPDATA%\microsoft\crypto\keys\de7cf8a7901d2ad13e5c67c29e5d1662_8cf7b530-613e-439b-a8c5-ccfc0e745400.nbl
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-4226853953-3309226944-3078887307-1000\f58155b4b1d5a524ca0261c3ee99fb50_8cf7b530-613e-439b-a8c5-ccfc0e745400.nbl
%APPDATA%\microsoft\internet explorer\quick launch\desktop.ini.nbl
%APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk.nbl
%APPDATA%\microsoft\internet explorer\quick launch\microsoft edge.lnk.nbl
%APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk.nbl
%APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk.nbl
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini.nbl
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\file explorer.lnk.nbl
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\microsoft edge.lnk.nbl
%APPDATA%\microsoft\network\connections\pbk\_hiddenpbk\rasphone.pbk.nbl
%APPDATA%\microsoft\office\mso1033.acl.nbl
%APPDATA%\microsoft\office\recent\templates.lnk.nbl
%APPDATA%\microsoft\protect\credhist.nbl
%APPDATA%\microsoft\protect\s-1-5-21-4226853953-3309226944-3078887307-1000\38ccf745-2ede-4301-8248-5a19e1f1901a.nbl
%APPDATA%\microsoft\protect\s-1-5-21-4226853953-3309226944-3078887307-1000\e799a09c-58e9-42fd-8b47-7fc6abbe3a1a.nbl
%APPDATA%\microsoft\protect\s-1-5-21-4226853953-3309226944-3078887307-1000\preferred.nbl
%APPDATA%\microsoft\systemcertificates\my\appcontainerusercertread.nbl
%APPDATA%\microsoft\templates\normal.dotm.nbl
%APPDATA%\microsoft\templates\~$normal.dotm.nbl
%APPDATA%\microsoft\uproof\custom.dic.nbl
%APPDATA%\microsoft\windows\accountpictures\desktop.ini.nbl
%APPDATA%\microsoft\windows\libraries\cameraroll.library-ms.nbl
%APPDATA%\microsoft\windows\libraries\desktop.ini.nbl
%APPDATA%\microsoft\windows\libraries\documents.library-ms.nbl
%APPDATA%\microsoft\windows\libraries\music.library-ms.nbl
%APPDATA%\microsoft\windows\libraries\pictures.library-ms.nbl
%APPDATA%\microsoft\windows\libraries\videos.library-ms.nbl
%APPDATA%\microsoft\windows\recent\desktop.ini.nbl
%APPDATA%\microsoft\windows\recent\automaticdestinations\5f7b5f1e01b83767.automaticdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\automaticdestinations\6824f4a902c78fbd.automaticdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\automaticdestinations\f01b4d95cf55d32a.automaticdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\automaticdestinations\f8f05350c84c9d76.automaticdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\4ee0ff9da153c9a7.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\5cc8a0f642693576.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\6824f4a902c78fbd.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\7e4dca80246863e3.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\ccba5a5986c77e43.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\recent\customdestinations\f01b4d95cf55d32a.customdestinations-ms.nbl
%APPDATA%\microsoft\windows\sendto\bluetooth file transfer.lnk.nbl
%APPDATA%\microsoft\windows\sendto\compressed (zipped) folder.zfsendtotarget.nbl
%APPDATA%\microsoft\windows\sendto\desktop (create shortcut).desklink.nbl
%APPDATA%\microsoft\windows\sendto\desktop.ini.nbl
%APPDATA%\microsoft\windows\sendto\documents.mydocs.nbl
%APPDATA%\microsoft\windows\sendto\fax recipient.lnk.nbl
%APPDATA%\microsoft\windows\sendto\mail recipient.mapimail.nbl
%APPDATA%\microsoft\windows\start menu\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\onedrive.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessibility\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessibility\magnify.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessibility\narrator.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessibility\on-screen keyboard.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessories\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\accessories\internet explorer.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\administrative tools\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\google chrome\google chrome.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\maintenance\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\administrative tools.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\command prompt.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\computer.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\control panel.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\desktop.ini.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\file explorer.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\system tools\run.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\telegram desktop\telegram.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\telegram desktop\uninstall telegram.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\windows powershell\windows powershell (x86).lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\windows powershell\windows powershell.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\winrar\console rar manual.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\winrar\what is new in the latest version.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\winrar\winrar help.lnk.nbl
%APPDATA%\microsoft\windows\start menu\programs\winrar\winrar.lnk.nbl
%APPDATA%\microsoft\windows\themes\transcodedwallpaper.nbl
%APPDATA%\microsoft\word\~wra0003.wbk.nbl
%APPDATA%\mozilla\firefox\installs.ini.nbl
%APPDATA%\mozilla\firefox\profiles.ini.nbl
%APPDATA%\mozilla\firefox\crash reports\installtime20210823123856.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\addons.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\addonstartup.json.lz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\broadcast-listeners.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\compatibility.ini.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\containers.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\extension-preferences.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\extensions.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\formhistory.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\handlers.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\pkcs11.txt.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\prefs.js.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\search.json.mozlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sessioncheckpoints.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\shield-preference-experiments.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sitesecurityservicestate.txt.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\times.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\user.js.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\xulstore.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\bookmarkbackups\bookmarks-2025-10-27_11_kx2i12ignwmokjfhtrtlyq==.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\crashes\store.json.mozlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\session-state.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\state.json.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\archived\2024-08\1723427186024.607ca866-e4d6-4cd9-8292-f41050b95703.new-profile.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\archived\2024-08\1723427186237.f25f5a62-89ef-4fa6-bcd1-17fb20e245e0.event.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\archived\2024-08\1723427186300.bf64c134-4580-4cec-a821-b1c0a18188bf.main.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\archived\2024-08\1723427186304.df151785-6317-4a9b-a34f-33db9e13ed66.first-shutdown.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\datareporting\glean\db\data.safe.bin.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\saved-telemetry-pings\607ca866-e4d6-4cd9-8292-f41050b95703.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\saved-telemetry-pings\bf64c134-4580-4cec-a821-b1c0a18188bf.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\saved-telemetry-pings\df151785-6317-4a9b-a34f-33db9e13ed66.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\saved-telemetry-pings\f25f5a62-89ef-4fa6-bcd1-17fb20e245e0.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sessionstore-backups\previous.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sessionstore-backups\recovery.baklz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sessionstore-backups\recovery.jsonlz4.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\sessionstore-backups\upgrade.jsonlz4-20210823123856.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\default\moz-extension+++dbda0cde-7d0a-4e53-a3f9-27dc54886ff6^usercontextid=4294967295\.metadata-v2.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\default\moz-extension+++dbda0cde-7d0a-4e53-a3f9-27dc54886ff6^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql...
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\.metadata-v2.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.nbl
%APPDATA%\mozilla\firefox\profiles\mlxv8edx.default\times.json.nbl
%APPDATA%\mozilla\firefox\profiles\mlxv8edx.default\user.js.nbl
%APPDATA%\opera software\opera stable\91bb.tmp.nbl
%APPDATA%\opera software\opera stable\bookmarks.nbl
%APPDATA%\opera software\opera stable\current session.nbl
%APPDATA%\opera software\opera stable\default_partner_content.json.nbl
%APPDATA%\opera software\opera stable\favicons.nbl
%APPDATA%\opera software\opera stable\favicons-journal.nbl
%APPDATA%\opera software\opera stable\history.nbl
%APPDATA%\opera software\opera stable\history-journal.nbl
%APPDATA%\opera software\opera stable\local state.nbl
%APPDATA%\opera software\opera stable\login data.nbl
%APPDATA%\opera software\opera stable\login data-journal.nbl
%APPDATA%\opera software\opera stable\network persistent state.nbl
%APPDATA%\opera software\opera stable\opera_autoupdate.log.nbl
%APPDATA%\opera software\opera stable\preferences.nbl
%APPDATA%\opera software\opera stable\ssdfp1252.0.1802400714.nbl
%APPDATA%\opera software\opera stable\ssdfp1252.6.1555693585.nbl
%APPDATA%\opera software\opera stable\transportsecurity.nbl
%APPDATA%\opera software\opera stable\update_prefs.json.nbl
%APPDATA%\opera software\opera stable\visited links.nbl
%APPDATA%\opera software\opera stable\web data.nbl
%APPDATA%\opera software\opera stable\web data-journal.nbl
%APPDATA%\opera software\opera stable\extension state\000003.log.nbl
%APPDATA%\opera software\opera stable\extension state\current.nbl
%APPDATA%\opera software\opera stable\extension state\lock.nbl
%APPDATA%\opera software\opera stable\extension state\log.nbl
%APPDATA%\opera software\opera stable\extension state\manifest-000001.nbl
%APPDATA%\opera software\opera stable\jump list icons\b42b.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b42c.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b42d.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b42e.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b43e.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b43f.tmp.nbl
%APPDATA%\opera software\opera stable\jump list icons\b440.tmp.nbl
%APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage.nbl
%APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage-journal.nbl
%APPDATA%\telegram desktop\telegram.exe.nbl
%APPDATA%\telegram desktop\unins000.exe.nbl
%APPDATA%\telegram desktop\updater.exe.nbl
%APPDATA%\thunderbird\installs.ini.nbl
%APPDATA%\thunderbird\profiles.ini.nbl
%APPDATA%\thunderbird\crash reports\installtime20210406220621.nbl
%APPDATA%\thunderbird\profiles\b376zl1q.default\times.json.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\abook.sqlite.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\addons.json.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\addonstartup.json.lz4.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\alternateservices.txt.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\blist.sqlite.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\compatibility.ini.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\cookies.sqlite.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\directorytree.json.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\enigmail.sqlite.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\extension-preferences.json.nbl
%APPDATA%\thunderbird\profiles\gbmwccb6.default-release\extensions.json.nbl

Deletes following files that it created itself

%TEMP%\{e76cb8f4-6bda-4f20-a288-1dd7b6084b0e}.png
%LOCALAPPDATA%\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.{f3021280-8b71-ae51-7bf9-daa692344272}.png
%TEMP%\ransom.exe
%TEMP%\content\2448-2364-powershell.exe-23-22-54-265.dump
%TEMP%\content\2448-2364-powershell.exe-23-22-54-877.dump
%TEMP%\content\2448-2364-powershell.exe-23-22-55-326.dump
%TEMP%\content\2448-2364-powershell.exe-23-22-55-849.dump
%TEMP%\content\2448-2364-powershell.exe-23-23-00-659.dump
%TEMP%\content\3048-1468-wscript.exe-23-23-27-699.dump
%TEMP%\content\4488-2208-wscript.exe-23-23-31-238.dump
%TEMP%\content\4648-1780-powershell.exe-23-23-18-985.dump
%TEMP%\content\4648-1780-powershell.exe-23-23-19-796.dump
%TEMP%\content\4648-1780-powershell.exe-23-23-20-104.dump
%TEMP%\content\4648-1780-powershell.exe-23-23-20-810.dump
%TEMP%\content\4648-1780-powershell.exe-23-23-25-700.dump
%APPDATA%\mozilla\firefox\profiles\dnyauhh1.default-release\prefs.js
%LOCALAPPDATA%\microsoft\windows\caches\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000021.db.nbl

Modifies the following files

%LOCALAPPDATA%\microsoft\windows\explorer\thumbcache_idx.db

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Executes the following

'<SYSTEM32>\wscript.exe' "<PATH_SAMPLE>.vbs" /elevate
'<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%TEMP%\ransom.exe"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp610ed9f19c7647e4a4be622507c856e0.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp377a8e42c159447293512badda544773.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp2f0521976c614678863f1c42fe3e9112.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp235c864182fd4d65a563ff9440cfad2d.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp2d4fd5eab85d45cabcf70745df465f72.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\temp8902bd9da639482d8a5214d69d22c545.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\tempad52ea4d34184898816ee6135ca83955.vbs"
'%WINDIR%\syswow64\wscript.exe' "%TEMP%\tempeed284364879433eb6a3f79e266e02e2.vbs"
'%TEMP%\ransom.exe' ' (with hidden window)

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial