$env:userprofile\appdata\roaming\claws-mail\clawsrc
$env:userprofile\appdata\roaming\comodo\icedragon\profiles.ini
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\roaming\comodo\icedragon\
$env:userprofile\appdata\roaming\k-meleon\profiles.ini
$env:userprofile\appdata\roaming\moonchild productions\pale moon\
$env:userprofile\appdata\local\7star\7star\user data
$env:userprofile\appdata\roaming\postbox\
$env:userprofile\appdata\roaming\coreftp\sites.idx
$env:userprofile\appdata\roaming\psi+\profiles
$env:userprofile\appdata\roaming\microsoft\protect\s-1-5-21-1051304884-625712362-2192934891-1000\8822e32f-be34-41f6-87d4-24e899309d79
$env:userprofile\appdata\local\virtualstore\program files (x86)\foxmail\mail\
$env:userprofile\appdata\roaming\mozilla\icecat\
c:\program files (x86)\uvnc bvba\ultravnc\ultravnc.ini
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\signons.sqlite
$env:userprofile\appdata\roaming\trillian\users\global\accounts.dat
$env:userprofile\appdata\roaming\pocomail\accounts.ini
$env:userprofile\desktop\vbc.exe.config
c:\program files (x86)\common files\apple\apple application support\plutil.exe
$env:userprofile\appdata\local\coowon\coowon\user data
$env:userprofile\appdata\roaming\claws-mail
$env:userprofile\appdata\roaming\8pecxstudios\cyberfox\
$env:userprofile\appdata\local\maplestudio\chromeplus\user data
$env:userprofile\appdata\roaming\mozilla\firefox\profiles.ini
$env:userprofile\appdata\local\sputnik\sputnik\user data
$env:userprofile\appdata\local\google\chrome\user data\cookies
$env:userprofile\appdata\roaming\oakn0vth.20m
$env:userprofile\desktop\folder.lst
$env:userprofile\appdata\local\comodo\dragon\user data
$env:userprofile\appdata\roaming\thunderbird\
$env:userprofile\appdata\local\liebao\user data
$env:userprofile\appdata\local\ucozmedia\uran\user data
$env:userprofile\appdata\roaming\k-meleon\
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome\default\cookies
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome\default
$env:userprofile\appdata\roaming\waterfox\
$env:userprofile\appdata\local\google\chrome\user data\default\cookies
$env:userprofile\appdata\roaming\psi\profiles
$env:userprofile\appdata\local\chromium\user data
$env:userprofile\appdata\local\bravesoftware\brave-browser\user data
$env:userprofile\appdata\local\kometa\user data
$env:userprofile\appdata\roaming\waterfox\profiles.ini
c:\program files (x86)\jdownloader\config\database.script
$env:userprofile\appdata\local\google\chrome\user data\login data
$env:userprofile\appdata\roaming\ftpgetter\servers.xml
$env:userprofile\appdata\local\amigo\user data
$env:userprofile\appdata\local\centbrowser\user data
c:\windows\microsoft.net\framework\v4.0.30319\clrcompression.dll
$env:userprofile\appdata\roaming\fenrir inc\sleipnir5\setting\modules\chromiumviewer
$env:userprofile\appdata\local\torch\user data
$env:userprofile\appdata\roaming
c:\program files\private internet access\data
$env:userprofile\appdata\roaming\postbox\profiles.ini
$env:userprofile\appdata\local\vivaldi\user data
$env:userprofile\appdata\local\iridium\user data
$env:userprofile\appdata\roaming\mozilla\firefox\
c:\private internet access\data
$env:userprofile\appdata\local\coccoc\browser\user data
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles
$env:userprofile\appdata\roaming\mozilla\seamonkey\profiles.ini
c:\windows\microsoft.net\framework\v4.0.30319\config\machine.config
$env:userprofile\appdata\roaming\filezilla\recentservers.xml
$env:userprofile\appdata\local\orbitum\user data
$env:userprofile\appdata\local\ucbrowser\
$env:userprofile\appdata\roaming\opera mail\opera mail\wand.dat
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\roaming\oakn0vth.20m\firefoxprofiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\local\elements browser\user data
$env:userprofile\appdata\local\tencent\qqbrowser\user data
$env:userprofile\appdata\local\virtualstore\program files\foxmail\mail\
$env:userprofile\appdata\local\microsoft\credentials\
$env:userprofile\appdata\local\yandex\yandexbrowser\user data
c:\ftp navigator\ftplist.txt
$env:userprofile\appdata\local\falkon\profiles\profiles.ini
$env:userprofile\appdata\local\tencent\qqbrowser\user data\default\encryptedstorage
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles\w7cr0hor.default
$env:userprofile\appdata\roaming\moonchild productions\pale moon\profiles.ini
$env:userprofile\appdata\local\360chrome\chrome\user data
$env:userprofile\appdata\local\google\chrome\user data\default\login data
c:\users\all users\appdata\roaming\flashfxp\3quick.dat
$env:userprofile\appdata\local\catalinagroup\citrio\user data
$env:userprofile\appdata\roaming\thunderbird\profiles.ini
$env:userprofile\appdata\local\google\chrome\user data\
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\logins.json
$env:userprofile\appdata\local\microsoft\credentials\dfbe70a7e5cc19a398ebf1b96859ce5d
$env:userprofile\appdata\local\qip surf\user data
$env:userprofile\appdata\roaming\flock\browser\profiles.ini
c:\cftp\ftplist.txt
$env:userprofile\appdata\local\epic privacy browser\user data
$env:userprofile\appdata\roaming\microsoft\credentials\
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome
$env:userprofile\desktop\vbc.exe
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox
c:\program files (x86)\ultravnc\ultravnc.ini
c:\storage\
$env:userprofile\appdata\local\mailbird\store\store.db
$env:userprofile\appdata\roaming\em client
$env:userprofile\appdata\roaming\ipswitch\ws_ftp\sites\ws_ftp.ini
$env:userprofile\appdata\roaming\the bat!
$env:userprofile\appdata\roaming\netgate technologies\blackhawk\profiles.ini
$env:userprofile\appdata\roaming\mozilla\seamonkey\
$env:userprofile\appdata\roaming\mozilla\icecat\profiles.ini
$env:userprofile\appdata\roaming\8pecxstudios\cyberfox\profiles.ini
$env:userprofile\appdata\local\microsoft\edge\user data
c:\mail\
$env:userprofile\appdata\local\chedot\user data
$env:userprofile\appdata\roaming\flock\browser\
$env:userprofile\appdata\roaming\mysql\workbench\workbench_user_data.dat
$env:userprofile\appdata\local\fenrir inc\sleipnir5\setting\modules\chromiumviewer
$env:userprofile\appdata\roaming\netgate technologies\blackhawk\
$env:userprofile\appdata\local\nordvpn
$env:userprofile\appdata\roaming\opera software\opera stable
$env:userprofile\appdata\roaming\comodo\icedragon\profiles.ini
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\roaming\comodo\icedragon\
$env:userprofile\appdata\roaming\k-meleon\profiles.ini
$env:userprofile\appdata\roaming\moonchild productions\pale moon\
$env:userprofile\appdata\local\7star\7star\user data
$env:userprofile\appdata\roaming\postbox\
$env:userprofile\appdata\roaming\coreftp\sites.idx
$env:userprofile\appdata\roaming\psi+\profiles
$env:userprofile\appdata\roaming\microsoft\protect\s-1-5-21-1051304884-625712362-2192934891-1000\8822e32f-be34-41f6-87d4-24e899309d79
$env:userprofile\appdata\local\virtualstore\program files (x86)\foxmail\mail\
$env:userprofile\appdata\roaming\mozilla\icecat\
c:\program files (x86)\uvnc bvba\ultravnc\ultravnc.ini
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\signons.sqlite
$env:userprofile\appdata\roaming\trillian\users\global\accounts.dat
$env:userprofile\appdata\roaming\pocomail\accounts.ini
$env:userprofile\desktop\vbc.exe.config
c:\program files (x86)\common files\apple\apple application support\plutil.exe
$env:userprofile\appdata\local\coowon\coowon\user data
$env:userprofile\appdata\roaming\claws-mail
$env:userprofile\appdata\roaming\8pecxstudios\cyberfox\
$env:userprofile\appdata\local\maplestudio\chromeplus\user data
$env:userprofile\appdata\roaming\mozilla\firefox\profiles.ini
$env:userprofile\appdata\local\sputnik\sputnik\user data
$env:userprofile\appdata\local\google\chrome\user data\cookies
$env:userprofile\appdata\roaming\oakn0vth.20m
$env:userprofile\desktop\folder.lst
$env:userprofile\appdata\local\comodo\dragon\user data
$env:userprofile\appdata\roaming\thunderbird\
$env:userprofile\appdata\local\liebao\user data
$env:userprofile\appdata\local\ucozmedia\uran\user data
$env:userprofile\appdata\roaming\k-meleon\
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome\default\cookies
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome\default
$env:userprofile\appdata\roaming\waterfox\
$env:userprofile\appdata\local\google\chrome\user data\default\cookies
$env:userprofile\appdata\roaming\psi\profiles
$env:userprofile\appdata\local\chromium\user data
$env:userprofile\appdata\local\bravesoftware\brave-browser\user data
$env:userprofile\appdata\local\kometa\user data
$env:userprofile\appdata\roaming\waterfox\profiles.ini
c:\program files (x86)\jdownloader\config\database.script
$env:userprofile\appdata\local\google\chrome\user data\login data
$env:userprofile\appdata\roaming\ftpgetter\servers.xml
$env:userprofile\appdata\local\amigo\user data
$env:userprofile\appdata\local\centbrowser\user data
c:\windows\microsoft.net\framework\v4.0.30319\clrcompression.dll
$env:userprofile\appdata\roaming\fenrir inc\sleipnir5\setting\modules\chromiumviewer
$env:userprofile\appdata\local\torch\user data
$env:userprofile\appdata\roaming
c:\program files\private internet access\data
$env:userprofile\appdata\roaming\postbox\profiles.ini
$env:userprofile\appdata\local\vivaldi\user data
$env:userprofile\appdata\local\iridium\user data
$env:userprofile\appdata\roaming\mozilla\firefox\
c:\private internet access\data
$env:userprofile\appdata\local\coccoc\browser\user data
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles
$env:userprofile\appdata\roaming\mozilla\seamonkey\profiles.ini
c:\windows\microsoft.net\framework\v4.0.30319\config\machine.config
$env:userprofile\appdata\roaming\filezilla\recentservers.xml
$env:userprofile\appdata\local\orbitum\user data
$env:userprofile\appdata\local\ucbrowser\
$env:userprofile\appdata\roaming\opera mail\opera mail\wand.dat
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\roaming\oakn0vth.20m\firefoxprofiles\w7cr0hor.default\cookies.sqlite
$env:userprofile\appdata\local\elements browser\user data
$env:userprofile\appdata\local\tencent\qqbrowser\user data
$env:userprofile\appdata\local\virtualstore\program files\foxmail\mail\
$env:userprofile\appdata\local\microsoft\credentials\
$env:userprofile\appdata\local\yandex\yandexbrowser\user data
c:\ftp navigator\ftplist.txt
$env:userprofile\appdata\local\falkon\profiles\profiles.ini
$env:userprofile\appdata\local\tencent\qqbrowser\user data\default\encryptedstorage
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox\profiles\w7cr0hor.default
$env:userprofile\appdata\roaming\moonchild productions\pale moon\profiles.ini
$env:userprofile\appdata\local\360chrome\chrome\user data
$env:userprofile\appdata\local\google\chrome\user data\default\login data
c:\users\all users\appdata\roaming\flashfxp\3quick.dat
$env:userprofile\appdata\local\catalinagroup\citrio\user data
$env:userprofile\appdata\roaming\thunderbird\profiles.ini
$env:userprofile\appdata\local\google\chrome\user data\
$env:userprofile\appdata\roaming\mozilla\firefox\profiles\w7cr0hor.default\logins.json
$env:userprofile\appdata\local\microsoft\credentials\dfbe70a7e5cc19a398ebf1b96859ce5d
$env:userprofile\appdata\local\qip surf\user data
$env:userprofile\appdata\roaming\flock\browser\profiles.ini
c:\cftp\ftplist.txt
$env:userprofile\appdata\local\epic privacy browser\user data
$env:userprofile\appdata\roaming\microsoft\credentials\
$env:userprofile\appdata\roaming\oakn0vth.20m\chrome
$env:userprofile\desktop\vbc.exe
$env:userprofile\appdata\roaming\oakn0vth.20m\firefox
c:\program files (x86)\ultravnc\ultravnc.ini
c:\storage\
$env:userprofile\appdata\local\mailbird\store\store.db
$env:userprofile\appdata\roaming\em client
$env:userprofile\appdata\roaming\ipswitch\ws_ftp\sites\ws_ftp.ini
$env:userprofile\appdata\roaming\the bat!
$env:userprofile\appdata\roaming\netgate technologies\blackhawk\profiles.ini
$env:userprofile\appdata\roaming\mozilla\seamonkey\
$env:userprofile\appdata\roaming\mozilla\icecat\profiles.ini
$env:userprofile\appdata\roaming\8pecxstudios\cyberfox\profiles.ini
$env:userprofile\appdata\local\microsoft\edge\user data
c:\mail\
$env:userprofile\appdata\local\chedot\user data
$env:userprofile\appdata\roaming\flock\browser\
$env:userprofile\appdata\roaming\mysql\workbench\workbench_user_data.dat
$env:userprofile\appdata\local\fenrir inc\sleipnir5\setting\modules\chromiumviewer
$env:userprofile\appdata\roaming\netgate technologies\blackhawk\
$env:userprofile\appdata\local\nordvpn
$env:userprofile\appdata\roaming\opera software\opera stable