; Version: 260729 ; # of entries: 4,058 ; ; Winapp2.ini is fully licensed under the CC-BY-SA-4.0 license agreement. Please refer to our license agreement before using Winapp2.ini: https://github.com/MoscaDotTo/Winapp2/blob/master/License.md ; You may copy, modify, remix, share, show, and transmit Winapp2 but you must redistribute under the same license and you must attribute the original work to the winapp2 project ; ; You can get the latest Winapp2.ini here: https://github.com/MoscaDotTo/Winapp2 ; Any contributions are appreciated. Please refer to our ReadMe to learn to make your own entries here: https://github.com/MoscaDotTo/Winapp2/blob/master/README.md ; ; Try out Winapp2ool for many useful additional features including updating and trimming Winapp2.ini: https://github.com/MoscaDotTo/Winapp2/raw/master/winapp2ool/bin/Release/winapp2ool.exe ; You can find the Winapp2ool ReadMe here: https://github.com/MoscaDotTo/Winapp2/blob/master/winapp2ool/Readme.md [.NET Framework *] Detect1=HKLM\Software\CBSTEST Detect2=HKLM\Software\Microsoft\.NETFramework FileKey1=%LocalAppData%\ApplicationHistory|*|RECURSE FileKey2=%LocalAppData%\IsolatedStorage|*|RECURSE FileKey3=%LocalAppData%\Microsoft\CLR_v*|*|RECURSE FileKey4=%SystemDrive%\BVTBin\Tests\installpackage|csilogfile.log FileKey5=%SystemDrive%\BVTBin\Tests\installpackage\cbstest\*|CBSTest-*.wtl;CBSTestWDS.log FileKey6=%SystemDrive%\Documents and Settings\LocalService\Local Settings\Application Data|*FontCache*.dat FileKey7=%WinDir%\assembly\NativeImages_*\Temp|*|RECURSE FileKey8=%WinDir%\assembly\t*mp|*|REMOVESELF FileKey9=%WinDir%\Microsoft.NET\Framework*\*|*.log FileKey10=%WinDir%\Microsoft.NET\Framework*\*\*\Logs|*|RECURSE FileKey11=%WinDir%\Microsoft.NET\Framework*\*\Temporary ASP.NET Files|*|RECURSE FileKey12=%WinDir%\Microsoft.NET\Framework*\v4.0.30319\SetupCache|*|RECURSE FileKey13=%WinDir%\ServiceProfiles\LocalService\AppData\Local|*FontCache*.dat FileKey14=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\CLR_v*|*|RECURSE FileKey15=%WinDir%\System32\config\systemprofile\Local Settings\Application Data\Microsoft\CLR_v*|*|RECURSE FileKey16=%WinDir%\System32\URTTemp|*|RECURSE FileKey17=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v*|*|RECURSE FileKey18=%WinDir%\SysWOW64\config\systemprofile\Local Settings\Application Data\Microsoft\CLR_v*|*|RECURSE RegKey1=HKCU\Software\Microsoft\.NETFramework\SQM\Apps RegKey2=HKLM\Software\CBSTEST|CBSTestWDSLogFile RegKey3=HKLM\Software\CBSTEST|CBSTestWTTLogFile Tags=ccwindows ID=.NET Framework * Author=Winapp2.ini Project [.NET Platform *] DetectFile=%UserProfile%\.dotnet FileKey1=%SystemDrive%\Users\Default\.dotnet|*.dotnetUserLevelCache FileKey2=%SystemDrive%\Users\Default\.dotnet\TelemetryStorageService|* FileKey3=%UserProfile%\.dotnet|*.dotnetUserLevelCache FileKey4=%UserProfile%\.dotnet\TelemetryStorageService|* Tags=ccwindows ID=.NET Platform * Author=Winapp2.ini Project [.NET Reflector *] DetectFile=%LocalAppData%\Red Gate\.NET Reflector 6 FileKey1=%LocalAppData%\Red Gate\.NET Reflector 6|Reflector.cfg FileKey2=%LocalAppData%\Red Gate\.NET Reflector 6\Cache|*|RECURSE Tags=ccapps ID=.NET Reflector * Author=Winapp2.ini Project [.Thumbnails *] DetectFile=%UserProfile%\.Thumbnails FileKey1=%UserProfile%\.Thumbnails|*|RECURSE Tags=ccapps ID=.Thumbnails * Author=Winapp2.ini Project [//N.P.P.D. RUSH// - The Milk of Ultra Violet *] DetectFile=%LocalAppData%\NPPDRUSH FileKey1=%LocalAppData%\NPPDRUSH|Web Data*|RECURSE FileKey2=%LocalAppData%\NPPDRUSH\*Cache|*|RECURSE Tags=ccapps ID=//N.P.P.D. RUSH// - The Milk of Ultra Violet * Author=Winapp2.ini Project [1Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|*Web Data FileKey2=%LocalAppData%\1browser\1browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\1browser\1browser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=1Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [1Browser Autoplay Preferences *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=1Browser Autoplay Preferences * Author=Winapp2.ini Project [1Browser Bookmark Backups *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|Bookmarks.bak Tags=ccapps ID=1Browser Bookmark Backups * Author=Winapp2.ini Project [1Browser Bookmark Favicons *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|favicons* Tags=ccapps ID=1Browser Bookmark Favicons * Author=Winapp2.ini Project [1Browser Caches *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\1browser\1browser\User Data|Module Info Cache FileKey3=%LocalAppData%\1browser\1browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\1browser\1browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\1browser\1browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\1browser\1browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\1browser\1browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\1browser\1browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\1browser\1browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\1browser\1browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\1browser\1browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\1browser\1browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\1browser\1browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\1browser\1browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\1browser\1browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\1browser\1browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\1browser\1browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\1browser\1browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\1browser\1browser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=1Browser Caches * Author=Winapp2.ini Project [1Browser Default App Handlers *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|PreferredApps Tags=ccapps ID=1Browser Default App Handlers * Author=Winapp2.ini Project [1Browser Download History *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\1browser\1browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=1Browser Download History * Author=Winapp2.ini Project [1Browser DRM Data *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\1browser\1browser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=1Browser DRM Data * Author=Winapp2.ini Project [1Browser Extension Cookies *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|Extension Cookies Tags=ccapps ID=1Browser Extension Cookies * Author=Winapp2.ini Project [1Browser Pinned Tabs *] DetectFile=%LocalAppData%\1browser\1browser\User Data RegKey1=HKCU\Software\1browser\1browser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=1Browser Pinned Tabs * Author=Winapp2.ini Project [1Browser Privacy Sandbox *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\1browser\1browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\1browser\1browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\1browser\1browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\1browser\1browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\1browser\1browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\1browser\1browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\1browser\1browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=1Browser Privacy Sandbox * Author=Winapp2.ini Project [1Browser Progressive Web Apps *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=1Browser Progressive Web Apps * Author=Winapp2.ini Project [1Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|Login Data* Tags=ccapps ID=1Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [1Browser Security & Threat Detection *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|DIPS* FileKey2=%LocalAppData%\1browser\1browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\1browser\1browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\1browser\1browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\1browser\1browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\1browser\1browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\1browser\1browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\1browser\1browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\1browser\1browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\1browser\1browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\1browser\1browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\1browser\1browser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=1Browser Security & Threat Detection * Author=Winapp2.ini Project [1Browser Shopping Insights *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\1browser\1browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\1browser\1browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\1browser\1browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\1browser\1browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=1Browser Shopping Insights * Author=Winapp2.ini Project [1Browser Storage Quota Manager *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|QuotaManager Tags=ccapps ID=1Browser Storage Quota Manager * Author=Winapp2.ini Project [1Browser Sync Data *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=1Browser Sync Data * Author=Winapp2.ini Project [1Browser Telemetry *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\Application|debug.log FileKey2=%LocalAppData%\1browser\1browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\1browser\1browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\1browser\1browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\1browser\1browser\User Data\*|*.log FileKey6=%LocalAppData%\1browser\1browser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\1browser\1browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\1browser\1browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\1browser\1browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\1browser\1browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\1browser\1browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\1browser\1browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\1browser\1browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\1browser\1browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\1browser\1browser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\1browser\1browser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\1browser\1browser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\1browser\1browser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\1browser\1browser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\1browser\1browser\Application|debug.log FileKey21=%ProgramFiles%\1browser\1browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\1browser\1browser\BlBeacon|failed_count RegKey2=HKCU\Software\1browser\1browser\BlBeacon|state RegKey3=HKCU\Software\1browser\1browser\Installer|LastChecked RegKey4=HKCU\Software\1browser\1browser\StabilityMetrics Tags=ccapps ID=1Browser Telemetry * Author=Winapp2.ini Project [1Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=1Browser Web Browsing Cookies * Author=Winapp2.ini Project [1Browser Web Browsing History *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=1Browser Web Browsing History * Author=Winapp2.ini Project [1Browser Web Browsing Session *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\1browser\1browser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=1Browser Web Browsing Session * Author=Winapp2.ini Project [1Browser Web Storage *] DetectFile=%LocalAppData%\1browser\1browser\User Data FileKey1=%LocalAppData%\1browser\1browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\1browser\1browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\1browser\1browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\1browser\1browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\1browser\1browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\1browser\1browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\1browser\1browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\1browser\1browser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=1Browser Web Storage * Author=Winapp2.ini Project [3 Stars of Destiny *] DetectFile=%AppData%\3Stars FileKey1=%AppData%\3Stars|*.tmp Tags=ccapps ID=3 Stars of Destiny * Author=Winapp2.ini Project [3delite Filesystem Dialogs Library *] Detect=HKCU\Software\3delite\Filesystem Dialogs RegKey1=HKCU\Software\3delite\Filesystem Dialogs\Last config folder|Folder Tags=ccutil ID=3delite Filesystem Dialogs Library * Author=Winapp2.ini Project [3DMark *] DetectFile=%UserProfile%\Documents\3DMark FileKey1=%ProgramData%\UL\3DMark\tmp|*|REMOVESELF FileKey2=%ProgramFiles%\Steam\SteamApps\common\3DMark|*.log|RECURSE FileKey3=%UserProfile%\Documents\3DMark|*.log FileKey4=%UserProfile%\Documents\3DMark\Log|*|REMOVESELF Tags=ccapps ID=3DMark * Author=Winapp2.ini Project [3SwitcheD *] DetectFile=%LocalAppData%\3SwitcheD FileKey1=%LocalAppData%\3SwitcheD\cache|*|RECURSE Tags=ccapps ID=3SwitcheD * Author=Winapp2.ini Project [4K Video Downloader *] Detect=HKCU\Software\4kdownload.com\4K Video Downloader FileKey1=%LocalAppData%\4kdownload.com\4K Video Downloader\4K Video Downloader|*.bak;*.log;*.sqlite;*.xml FileKey2=%LocalAppData%\4kdownload.com\4K Video Downloader\crashdb|*|RECURSE FileKey3=%LocalAppData%\4kdownload.com\4K Video Downloader\QtWebEngine\Default|*|RECURSE FileKey4=%ProgramFiles%\4KDownload\4KVideoDownloader|*.rtf;*.txt RegKey1=HKCU\Software\4kdownload.com\4K Video Downloader\Download|downloadedItems RegKey2=HKCU\Software\4kdownload.com\4K Video Downloader\Download|downloadedItemsDb RegKey3=HKCU\Software\4kdownload.com\4K Video Downloader\FileWatcher RegKey4=HKCU\Software\4kdownload.com\4K Video Downloader\Gamification RegKey5=HKCU\Software\4kdownload.com\4K Video Downloader\Settings|outputPath Tags=ccmedia ID=4K Video Downloader * Author=Winapp2.ini Project [4K YouTube to MP3 *] Detect=HKCU\Software\4kdownload.com\4K YouTube to MP3 FileKey1=%LocalAppData%\4kdownload.com\4K YouTube to MP3\4K YouTube to MP3|*.xml RegKey1=HKCU\Software\4kdownload.com\4K YouTube to MP3\Download|downloadedItems RegKey2=HKCU\Software\4kdownload.com\4K YouTube to MP3\Settings|outputPath Tags=ccmedia ID=4K YouTube to MP3 * Author=Winapp2.ini Project [4shared Desktop *] DetectFile=%AppData%\4shared desktop FileKey1=%AppData%\4shared desktop|*.log FileKey2=%AppData%\4shared desktop\*|dhistory.xml Tags=ccinternet ID=4shared Desktop * Author=Winapp2.ini Project [4Sync *] Detect=HKCU\Software\4Sync FileKey1=%AppData%\4Sync|*.log Tags=ccutil ID=4Sync * Author=Winapp2.ini Project [4t Tray Minimizer *] DetectFile=%AppData%\4t Niagara Software\4t Tray Minimizer FileKey1=%AppData%\4t Niagara Software\4t Tray Minimizer|*.log Tags=ccutil ID=4t Tray Minimizer * Author=Winapp2.ini Project [4Team MOM *] DetectFile=%AppData%\4Team\MOM FileKey1=%AppData%\4Team\MOM|*.err;*.log FileKey2=%AppData%\4Team\MOM\Logs|* Tags=ccinternet ID=4Team MOM * Author=Winapp2.ini Project [4Team OST2 *] DetectFile=%AppData%\4Team\Ost2 FileKey1=%AppData%\4Team\Ost2|*.err;*.log FileKey2=%AppData%\4Team\Ost2\Logs|* Tags=ccinternet ID=4Team OST2 * Author=Winapp2.ini Project [4Team Plug2Sync *] DetectFile=%AppData%\4Team\Plug2Sync FileKey1=%AppData%\4Team\Plug2Sync|*.err;*.log FileKey2=%AppData%\4Team\Plug2Sync\Logs|* Tags=ccinternet ID=4Team Plug2Sync * Author=Winapp2.ini Project [4Team PSTMerger *] DetectFile=%AppData%\4Team\PSTMerger FileKey1=%AppData%\4Team\PSTMerger|*.err;*.log FileKey2=%AppData%\4Team\PSTMerger\Logs|* Tags=ccinternet ID=4Team PSTMerger * Author=Winapp2.ini Project [4Team PSTMover *] DetectFile=%AppData%\4Team\PSTMover FileKey1=%AppData%\4Team\PSTMover|*.err;*.log FileKey2=%AppData%\4Team\PSTMover\Logs|* Tags=ccinternet ID=4Team PSTMover * Author=Winapp2.ini Project [4Team PSTSplitter *] DetectFile=%AppData%\4Team\PSTSplitter FileKey1=%AppData%\4Team\PSTSplitter|*.err;*.log FileKey2=%AppData%\4Team\PSTSplitter\Logs|* Tags=ccinternet ID=4Team PSTSplitter * Author=Winapp2.ini Project [4Team SafePSTBackup *] DetectFile=%AppData%\4Team\SafePSTBackup FileKey1=%AppData%\4Team\SafePSTBackup|*.err;*.log FileKey2=%AppData%\4Team\SafePSTBackup\Logs|* FileKey3=%ProgramFiles%\4Team Corporation\SafePSTBackup Shadow Copy Service|*.InstallLog Tags=ccinternet ID=4Team SafePSTBackup * Author=Winapp2.ini Project [4Team Sync2 *] DetectFile=%AppData%\4Team\Sync2 FileKey1=%AppData%\4Team\Sync2|*.err;*.log FileKey2=%AppData%\4Team\Sync2\Logs|* FileKey3=%LocalAppData%\4Team\Sync2Cloud|*.log Tags=ccinternet ID=4Team Sync2 * Author=Winapp2.ini Project [4Team SyncWiz *] DetectFile=%AppData%\4Team\SyncWiz FileKey1=%AppData%\4Team\SyncWiz|*.err;*.log FileKey2=%AppData%\4Team\SyncWiz\Logs|* Tags=ccinternet ID=4Team SyncWiz * Author=Winapp2.ini Project [4Team Updater *] DetectFile=%AppData%\4Team\4Team-Updater FileKey1=%AppData%\4Team\4Team-Updater\Logs|* Tags=ccinternet ID=4Team Updater * Author=Winapp2.ini Project [4Team vCardWizard *] DetectFile=%AppData%\4Team\vCardWizard FileKey1=%AppData%\4Team\vCardWizard|*.err;*.log FileKey2=%AppData%\4Team\vCardWizard\Logs|* Tags=ccinternet ID=4Team vCardWizard * Author=Winapp2.ini Project [4Team WorkgroupCalendar *] DetectFile=%AppData%\4Team\WorkgroupCalendar FileKey1=%AppData%\4Team\WorkgroupCalendar|*.err;*.log FileKey2=%AppData%\4Team\WorkgroupCalendar\Logs|* Tags=ccinternet ID=4Team WorkgroupCalendar * Author=Winapp2.ini Project [7-Zip *] Detect=HKU\.DEFAULT\Software\7-Zip RegKey1=HKCU\Software\7-Zip\Compression|ArcHistory RegKey2=HKCU\Software\7-Zip\FM|CopyHistory RegKey3=HKU\.DEFAULT\Software\7-Zip\Compression|ArcHistory RegKey4=HKU\.DEFAULT\Software\7-Zip\Compression\ArcHistory RegKey5=HKU\.DEFAULT\Software\7-Zip\Extraction|PathHistory RegKey6=HKU\.DEFAULT\Software\7-Zip\Extraction\PathHistory RegKey7=HKU\.DEFAULT\Software\7-Zip\FM|CopyHistory RegKey8=HKU\.DEFAULT\Software\7-Zip\FM|FolderHistory RegKey9=HKU\.DEFAULT\Software\7-Zip\FM|PanelPath0 Tags=ccutil ID=7-Zip * Author=Winapp2.ini Project [7-Zip ZS *] Detect=HKCU\Software\7-Zip-Zstandard RegKey1=HKCU\Software\7-Zip-Zstandard\Compression|ArcHistory RegKey2=HKCU\Software\7-Zip-Zstandard\Extraction|PathHistory RegKey3=HKCU\Software\7-Zip-Zstandard\FM|CopyHistory RegKey4=HKCU\Software\7-Zip-Zstandard\FM|FolderHistory RegKey5=HKCU\Software\7-Zip-Zstandard\FM|PanelPath0 RegKey6=HKCU\Software\7-Zip-Zstandard\FM|PanelPath1 Tags=ccutil ID=7-Zip ZS * Author=Winapp2.ini Project [7+ Taskbar Tweaker *] Detect=HKCU\Software\7 Taskbar Tweaker RegKey1=HKCU\Software\7 Taskbar Tweaker|MementoSectionUsed Tags=ccutil ID=7+ Taskbar Tweaker * Author=Winapp2.ini Project [7z SFX Builder *] Detect=HKCU\Software\7z SFX Builder RegKey1=HKCU\Software\7z SFX Builder\MRU Tags=ccutil ID=7z SFX Builder * Author=Winapp2.ini Project [10 Years After *] Detect=HKCU\Software\Valve\Steam\Apps\339240 FileKey1=%ProgramFiles%\Steam\SteamApps\common\10 Years After\10 Years After_Data|output_log.txt Tags=ccapps ID=10 Years After * Author=Winapp2.ini Project [18 Wheels of Steel *] Detect=HKCU\Software\ValuSoft FileKey1=%UserProfile%\Documents\18 WoS*|*.crash;*.log Tags=ccapps ID=18 Wheels of Steel * Author=Winapp2.ini Project [32bit Web Browser *] DetectFile=%ProgramFiles%\32BITWEB FileKey1=%ProgramFiles%\32BITWEB\Data|LastURL.da* FileKey2=%SystemDrive%\32bw\data|LastURL.da* RegKey1=HKCU\Software\ElectaSoft\Applications\323bw\Configure|LastOpenWebPageDir RegKey2=HKCU\Software\ElectaSoft\Applications\323bw\Configure|LastURL Tags=ccinternet ID=32bit Web Browser * Author=Winapp2.ini Project [140 *] Detect=HKCU\Software\Valve\Steam\Apps\242820 FileKey1=%ProgramFiles%\Steam\SteamApps\common\140\140_Data|output_log.txt Tags=ccapps ID=140 * Author=Winapp2.ini Project [360 Internet Security *] Detect=HKCU\Software\360Safe FileKey1=%AppData%\360DesktopLite\DTFence|*.bk FileKey2=%AppData%\360Safe\360ScanLog|* FileKey3=%AppData%\360Safe\Clean\OKClean|*.log FileKey4=%ProgramFiles%\360\360 Internet Security|*.log*|RECURSE FileKey5=%SystemDrive%\360SANDBOX|*.log*|RECURSE Tags=ccutil ID=360 Internet Security * Author=Winapp2.ini Project [360 Secure Browser Autofill Data & Search Engine Preferences *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|*Web Data FileKey2=%AppData%\360se6\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%AppData%\360se6\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [360 Secure Browser Autoplay Preferences *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Autoplay Preferences * Author=Winapp2.ini Project [360 Secure Browser Bookmark Backups *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|Bookmarks.bak Tags=ccapps ID=360 Secure Browser Bookmark Backups * Author=Winapp2.ini Project [360 Secure Browser Bookmark Favicons *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|favicons* Tags=ccapps ID=360 Secure Browser Bookmark Favicons * Author=Winapp2.ini Project [360 Secure Browser Caches *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360safe\SoftMgr\Cache|*|RECURSE FileKey2=%AppData%\360safe\SoftMgr\Message\Cache|*|RECURSE FileKey3=%AppData%\360se6\User Data|*-journal|RECURSE FileKey4=%AppData%\360se6\User Data|Module Info Cache FileKey5=%AppData%\360se6\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey6=%AppData%\360se6\User Data\*\*Cache*|*|REMOVESELF FileKey7=%AppData%\360se6\User Data\*\blob_storage|*|REMOVESELF FileKey8=%AppData%\360se6\User Data\*\BudgetDatabase|*|REMOVESELF FileKey9=%AppData%\360se6\User Data\*\Download Service|*|REMOVESELF FileKey10=%AppData%\360se6\User Data\*\File System|*|REMOVESELF FileKey11=%AppData%\360se6\User Data\*\GCM Store|*|REMOVESELF FileKey12=%AppData%\360se6\User Data\*\JumpListIcons*|*|REMOVESELF FileKey13=%AppData%\360se6\User Data\*\optimization*|*|REMOVESELF FileKey14=%AppData%\360se6\User Data\*\Platform Notifications|*|REMOVESELF FileKey15=%AppData%\360se6\User Data\*\Service Worker|*|REMOVESELF FileKey16=%AppData%\360se6\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey17=%AppData%\360se6\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey18=%AppData%\360se6\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey19=%AppData%\360se6\User Data\*Cache*|*|REMOVESELF FileKey20=%AppData%\360se6\User Data\Avatars|*|REMOVESELF FileKey21=%AppData%\360se6\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Caches * Author=Winapp2.ini Project [360 Secure Browser Default App Handlers *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|PreferredApps Tags=ccapps ID=360 Secure Browser Default App Handlers * Author=Winapp2.ini Project [360 Secure Browser Download History *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|DownloadMetadata FileKey2=%AppData%\360se6\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Download History * Author=Winapp2.ini Project [360 Secure Browser DRM Data *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%AppData%\360se6\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=360 Secure Browser DRM Data * Author=Winapp2.ini Project [360 Secure Browser Extension Cookies *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|Extension Cookies Tags=ccapps ID=360 Secure Browser Extension Cookies * Author=Winapp2.ini Project [360 Secure Browser Pinned Tabs *] DetectFile=%AppData%\360se6\User Data RegKey1=HKCU\360\360se6\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=360 Secure Browser Pinned Tabs * Author=Winapp2.ini Project [360 Secure Browser Privacy Sandbox *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data|*first_party_sets* FileKey2=%AppData%\360se6\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%AppData%\360se6\User Data\*\Network|Trust Tokens* FileKey4=%AppData%\360se6\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%AppData%\360se6\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%AppData%\360se6\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%AppData%\360se6\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%AppData%\360se6\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Privacy Sandbox * Author=Winapp2.ini Project [360 Secure Browser Progressive Web Apps *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Progressive Web Apps * Author=Winapp2.ini Project [360 Secure Browser Saved Usernames & Passwords *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|Login Data* Tags=ccapps ID=360 Secure Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [360 Secure Browser Security & Threat Detection *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|DIPS* FileKey2=%AppData%\360se6\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%AppData%\360se6\User Data\*\Network|TransportSecurity* FileKey4=%AppData%\360se6\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%AppData%\360se6\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%AppData%\360se6\User Data\Crowd Deny|*|REMOVESELF FileKey7=%AppData%\360se6\User Data\PKIMetadata|*|REMOVESELF FileKey8=%AppData%\360se6\User Data\Safe Browsing|*|REMOVESELF FileKey9=%AppData%\360se6\User Data\SafetyTips|*|REMOVESELF FileKey10=%AppData%\360se6\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%AppData%\360se6\User Data\Subresource Filter|*|REMOVESELF FileKey12=%AppData%\360se6\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Security & Threat Detection * Author=Winapp2.ini Project [360 Secure Browser Shopping Insights *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%AppData%\360se6\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%AppData%\360se6\User Data\*\coupon_db|*|REMOVESELF FileKey4=%AppData%\360se6\User Data\*\discount*_db|*|REMOVESELF FileKey5=%AppData%\360se6\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Shopping Insights * Author=Winapp2.ini Project [360 Secure Browser Storage Quota Manager *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|QuotaManager Tags=ccapps ID=360 Secure Browser Storage Quota Manager * Author=Winapp2.ini Project [360 Secure Browser Sync Data *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Sync Data * Author=Winapp2.ini Project [360 Secure Browser Telemetry *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\Application|debug.log FileKey2=%AppData%\360se6\Application\SetupMetrics|*|REMOVESELF FileKey3=%AppData%\360se6\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%AppData%\360se6\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%AppData%\360se6\User Data\*|*.log FileKey6=%AppData%\360se6\User Data\*\DataSharing|*|REMOVESELF FileKey7=%AppData%\360se6\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%AppData%\360se6\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%AppData%\360se6\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%AppData%\360se6\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%AppData%\360se6\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%AppData%\360se6\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%AppData%\360se6\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%AppData%\360se6\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%AppData%\360se6\User Data\Crash Reports|*|REMOVESELF FileKey16=%AppData%\360se6\User Data\Crashpad|*|REMOVESELF FileKey17=%AppData%\360se6\User Data\Local Traces|*|REMOVESELF FileKey18=%AppData%\360se6\User Data\OriginTrials|*|REMOVESELF FileKey19=%AppData%\360se6\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\360se6\Application|debug.log FileKey21=%ProgramFiles%\360se6\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\360\360se6\BlBeacon|failed_count RegKey2=HKCU\360\360se6\BlBeacon|state RegKey3=HKCU\360\360se6\Installer|LastChecked RegKey4=HKCU\360\360se6\StabilityMetrics Tags=ccapps ID=360 Secure Browser Telemetry * Author=Winapp2.ini Project [360 Secure Browser Web Browsing Cookies *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=360 Secure Browser Web Browsing Cookies * Author=Winapp2.ini Project [360 Secure Browser Web Browsing History *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|360History*;History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=360 Secure Browser Web Browsing History * Author=Winapp2.ini Project [360 Secure Browser Web Browsing History Backups *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\HisDailyBackup|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Web Browsing History Backups * Author=Winapp2.ini Project [360 Secure Browser Web Browsing Session *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*|UnClosed Pages FileKey2=%AppData%\360se6\User Data\*\Extension State|*|REMOVESELF FileKey3=%AppData%\360se6\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Web Browsing Session * Author=Winapp2.ini Project [360 Secure Browser Web Storage *] DetectFile=%AppData%\360se6\User Data FileKey1=%AppData%\360se6\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%AppData%\360se6\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%AppData%\360se6\User Data\*\Local Storage\*\Session Storage|* FileKey4=%AppData%\360se6\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%AppData%\360se6\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%AppData%\360se6\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%AppData%\360se6\User Data\*\Session Storage|*|REMOVESELF FileKey8=%AppData%\360se6\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=360 Secure Browser Web Storage * Author=Winapp2.ini Project [1000 Amps *] Detect=HKCU\Software\Valve\Steam\Apps\205690 FileKey1=%ProgramFiles%\Steam\SteamApps\common\1000 Amps|stdout.txt Tags=ccapps ID=1000 Amps * Author=Winapp2.ini Project [1954 Alcatraz *] Detect=HKCU\Software\Valve\Steam\Apps\255280 FileKey1=%ProgramFiles%\Steam\SteamApps\common\1954 Alcatraz\Alcatraz_Data|output_log.txt FileKey2=%UserProfile%\AppData\LocalLow\Daedalic Entertainment\1954 Alcatraz|*.log Tags=ccapps ID=1954 Alcatraz * Author=Winapp2.ini Project [A-PDF PDF Content Splitter *] Detect=HKCU\Software\A-PDF\PDFContentSplitter RegKey1=HKCU\Software\A-PDF\PDFContentSplitter\Setting|hloadpdfpath RegKey2=HKCU\Software\A-PDF\PDFContentSplitter\Setting|hSaveallpdfpath RegKey3=HKCU\Software\A-PDF\PDFContentSplitter\Setting|LastRulename Tags=ccapps ID=A-PDF PDF Content Splitter * Author=Winapp2.ini Project [A-PDF Watermark *] Detect=HKCU\Software\A-PDF\Watermark RegKey1=HKCU\Software\A-PDF\Watermark\Setting|hdIndir RegKey2=HKCU\Software\A-PDF\Watermark\Setting|hdoutDir RegKey3=HKCU\Software\A-PDF\Watermark\Setting|hloadpdfpath RegKey4=HKCU\Software\A-PDF\Watermark\Setting|hSaveallpdfpath RegKey5=HKCU\Software\A-PDF\Watermark\Setting|ptlastprinter Tags=ccapps ID=A-PDF Watermark * Author=Winapp2.ini Project [A Hat in Time *] DetectFile=%ProgramFiles%\Steam\steamapps\common\HatinTime\HatinTimeGame FileKey1=%ProgramFiles%\Steam\steamapps\common\HatinTime\HatinTimeGame\Logs|* Tags=ccapps ID=A Hat in Time * Author=Winapp2.ini Project [A Space Adventure - Remastered Edition *] DetectFile=%LocalAppData%\Simon Says Play\ASA Remastered FileKey1=%LocalAppData%\Simon Says Play\ASA Remastered|*.log Tags=ccapps ID=A Space Adventure - Remastered Edition * Author=Winapp2.ini Project [ABBYY FineReader *] Detect1=HKCU\Software\ABBYY\FineReader Detect2=HKCU\Software\ABBYY\FineReaderSprint Detect3=HKCU\Software\ABBYY\Sprint\5.00 FileKey1=%LocalAppData%\ABBYY\FineReader\*|datafile.bin;SendToWorkFiles.txt FileKey2=%LocalAppData%\ABBYY\FineReader\*\*\Dumps|* FileKey3=%LocalAppData%\ABBYY\FineReader\*\Dumps|* FileKey4=%LocalAppData%\ABBYY\FineReader\*\FineReaderShell|SendToWorkFiles.txt FileKey5=%LocalAppData%\ABBYY\FineReader\16\*\Morphology\CachedUserDictionaries|* FileKey6=%LocalAppData%\ABBYY\FineReader\16\Morphology\CachedUserDictionaries|* FileKey7=%LocalAppData%\ABBYY\ScanManager\*|*.bmp;scantwain.txt;scanwia.txt FileKey8=%ProgramData%\ABBYY\Bonus.ScreenshotReader\*|*.thumbnail FileKey9=%ProgramData%\ABBYY\FineReader\*\*\*Cache|*|RECURSE FileKey10=%ProgramData%\ABBYY\FineReader\*\*\Dumps|* FileKey11=%ProgramData%\ABBYY\FineReader\*\*Cache|* FileKey12=%ProgramData%\ABBYY\FineReader\*\Dumps|* FileKey13=%ProgramData%\ABBYY\FineReader\*\Licenses|*.log FileKey14=%ProgramFiles%\ABBYY FineReader*|*.cnt;*.log FileKey15=%ProgramFiles%\ABBYY FineReader*\Resource\Cmap|*.lst FileKey16=%ProgramFiles%\ABBYY FineReader*\Resource\Font|*.lst FileKey17=%SystemDrive%\Temp\FR*|*|REMOVESELF RegKey1=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|LoadImagePath RegKey2=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|OpenBatchPath RegKey3=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|SaveImagePath RegKey4=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|SaveToPath RegKey5=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|StandardBatchOptionsPath RegKey6=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastBatchPath RegKey7=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastFormatsPage RegKey8=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastOptionsPage RegKey9=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastTAScenario RegKey10=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastWebFoldersNames RegKey11=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|ExportTAPath RegKey12=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|ImportTAPath RegKey13=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|LoadImagePath RegKey14=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|OpenBatchPath RegKey15=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|SaveImagePath RegKey16=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|SaveToPath RegKey17=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|StandardBatchOptionsPath RegKey18=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastBatchPath RegKey19=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastFormatsPage RegKey20=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastOptionsPage RegKey21=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastTAScenario RegKey22=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastWebFoldersNames RegKey23=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|ExportTAPath RegKey24=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|ImportTAPath RegKey25=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|LoadImagePath RegKey26=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|OpenBatchPath RegKey27=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|SaveImagePath RegKey28=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|SaveToPath RegKey29=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|StandardBatchOptionsPath RegKey30=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastBatchPath RegKey31=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastFormatsPage RegKey32=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastOptionsPage RegKey33=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastTAScenario RegKey34=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastWebFoldersNames RegKey35=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|LoadImagePath RegKey36=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|OpenBatchPath RegKey37=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveImagePath RegKey38=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveToPath RegKey39=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|StandardBatchOptionsPath RegKey40=HKCU\Software\ABBYY\FineReader\11.00\Shell\MainFrame\RecentFileList RegKey41=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastBatchPath RegKey42=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastFormatsPage RegKey43=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastOptionsPage RegKey44=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastTAScenario RegKey45=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastWebFoldersNames RegKey46=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|BatchDialogsMRU RegKey47=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|LoadImagePath RegKey48=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|OpenBatchPath RegKey49=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|SaveImagePath RegKey50=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|SaveToPath RegKey51=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|StandardBatchOptionsPath RegKey52=HKCU\Software\ABBYY\FineReader\12.00\Shell\MainFrame\RecentFileList RegKey53=HKCU\Software\ABBYY\FineReader\12.00\Shell\Options|LastBatchPath RegKey54=HKCU\Software\ABBYY\FineReader\12.00\Shell\Options|LastFormatsPage RegKey55=HKCU\Software\ABBYY\FineReader\12.00\Shell\Options|LastOptionsPage RegKey56=HKCU\Software\ABBYY\FineReader\12.00\Shell\Options|LastTAScenario RegKey57=HKCU\Software\ABBYY\FineReader\12.00\Shell\Options|LastWebFoldersNames RegKey58=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader|LaunchCount RegKey59=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LanguagesMRU RegKey60=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LastRecognitionLanguage RegKey61=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LastSaveImagePath RegKey62=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LastUseTime RegKey63=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|SaveTablePath RegKey64=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|SaveTextPath RegKey65=HKCU\Software\ABBYY\FineReader\14.00\Comparator\RateUs|RunCount RegKey66=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell|LaunchCount RegKey67=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|ExportTAPath RegKey68=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|ImportTAPath RegKey69=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|SaveToWebFolderPath RegKey70=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|WebFolderPath RegKey71=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Options|LastTAScenario RegKey72=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Options|LastWebFoldersNames RegKey73=HKCU\Software\ABBYY\FineReader\14.00\FineUI\Dialogs\FROpenFileDialog|LastFolder RegKey74=HKCU\Software\ABBYY\FineReader\14.00\FineUpdate|LaunchCount RegKey75=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer|LaunchCount RegKey76=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\PDFEngine\EraseExtraData|LastDeleteNeedlessExtraData RegKey77=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Frame|ImportDataFolder RegKey78=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Frame|Last signature RegKey79=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Signature|SignatureCertificateLocation RegKey80=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Signature|SignatureImagePath RegKey81=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Statistics|LastUsedBuyMessages RegKey82=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Tips|LastGetSocialTips RegKey83=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentBatchList RegKey84=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentCompareList RegKey85=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentPdfList RegKey86=HKCU\Software\ABBYY\FineReader\14.00\StatisticSender|LastSendStatisticsEvent RegKey87=HKCU\Software\ABBYY\FineReader\14.00\StatisticSender|LaunchCount RegKey88=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader|LaunchCount RegKey89=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LanguagesMRU RegKey90=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LastRecognitionLanguage RegKey91=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LastSaveImagePath RegKey92=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LastUseTime RegKey93=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|SaveTablePath RegKey94=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|SaveTextPath RegKey95=HKCU\Software\ABBYY\FineReader\15\Comparator\RateUs|RunCount RegKey96=HKCU\Software\ABBYY\FineReader\15\Comparator\Shell\Options|MRURecognitionLanguages RegKey97=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|ExportTAPath RegKey98=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|ImportTAPath RegKey99=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|SaveToWebFolderPath RegKey100=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|WebFolderPath RegKey101=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Options|LastTAScenario RegKey102=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Options|LastWebFoldersNames RegKey103=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Tips|LastGetSocialTips RegKey104=HKCU\Software\ABBYY\FineReader\15\FineUI\Dialogs\FROpenFileDialog|LastFolder RegKey105=HKCU\Software\ABBYY\FineReader\15\PDFTransformer|LaunchCount RegKey106=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\PDFEngine\EraseExtraData|LastDeleteNeedlessExtraData RegKey107=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Frame|ImportDataFolder RegKey108=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Frame|Last signature RegKey109=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Signature|SignatureCertificateLocation RegKey110=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Signature|SignatureImagePath RegKey111=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Statistics|LastUsedBuyMessages RegKey112=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Tips|LastGetSocialTips RegKey113=HKCU\Software\ABBYY\FineReader\15\Shell\RecentBatchList RegKey114=HKCU\Software\ABBYY\FineReader\15\Shell\RecentCompareList RegKey115=HKCU\Software\ABBYY\FineReader\15\Shell\RecentPdfList RegKey116=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader|LaunchCount RegKey117=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|LanguagesMRU RegKey118=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|LastRecognitionLanguage RegKey119=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|LastSaveImagePath RegKey120=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|LastUseTime RegKey121=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|SaveTablePath RegKey122=HKCU\Software\ABBYY\FineReader\16\Bonus.ScreenshotReader\Options|SaveTextPath RegKey123=HKCU\Software\ABBYY\FineReader\16\Comparator\RateUs|RunCount RegKey124=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Dialogs|ExportTAPath RegKey125=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Dialogs|ImportTAPath RegKey126=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Dialogs|SaveToWebFolderPath RegKey127=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Dialogs|WebFolderPath RegKey128=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Options|LastTAScenario RegKey129=HKCU\Software\ABBYY\FineReader\16\FineReaderShell\Shell\Options|LastWebFoldersNames RegKey130=HKCU\Software\ABBYY\FineReader\16\FineUI\Dialogs\FROpenFileDialog|LastFolder RegKey131=HKCU\Software\ABBYY\FineReader\16\PDFTransformer|LaunchCount RegKey132=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\PDFEngine\EraseExtraData|LastDeleteNeedlessExtraData RegKey133=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Shell\Frame|ImportDataFolder RegKey134=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Shell\Frame|Last signature RegKey135=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Shell\Signature|SignatureCertificateLocation RegKey136=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Shell\Signature|SignatureImagePath RegKey137=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Shell\Statistics|LastUsedBuyMessages RegKey138=HKCU\Software\ABBYY\FineReader\16\PDFTransformer\Tips|LastGetSocialTips RegKey139=HKCU\Software\ABBYY\FineReader\16\Shell\RecentBatchList RegKey140=HKCU\Software\ABBYY\FineReader\16\Shell\RecentCompareList RegKey141=HKCU\Software\ABBYY\FineReader\16\Shell\RecentPdfList RegKey142=HKCU\Software\ABBYY\Sprint\5.00\Options|ExportToFilePath RegKey143=HKCU\Software\ABBYY\Sprint\5.00\Options|OpenImagePath RegKey144=HKCU\Software\ABBYY\Sprint\5.00\Options|SaveImagePath Tags=ccapps ID=ABBYY FineReader * Author=Winapp2.ini Project [ABBYY Lingvo *] Detect=HKCU\Software\ABBYY\Lingvo\15.0 DetectFile=%ProgramFiles%\ABBYY Lingvo x5 FileKey1=%ProgramData%\ABBYY\Lingvo\*\Licenses|*.log FileKey2=%ProgramFiles%\ABBYY Lingvo x5|*.log;*.rtf RegKey1=HKCU\Software\ABBYY\Lingvo\15.0\Dictionaries\FavoriteDirections RegKey2=HKCU\Software\ABBYY\Lingvo\15.0\View|LastText RegKey3=HKCU\Software\ABBYY\Lingvo\15.0\X3M|LastActivity Tags=ccapps ID=ABBYY Lingvo * Author=Winapp2.ini Project [ABBYY PDFTransformer *] Detect=HKCU\Software\ABBYY\PDFTransformer DetectFile=%LocalAppData%\ABBYY\PDFTransformer FileKey1=%LocalAppData%\ABBYY\PDFTransformer\*|*.log FileKey2=%LocalAppData%\ABBYY\PDFTransformer\*\FontCache|* FileKey3=%ProgramData%\ABBYY\PDFTransformer\*\Licenses|*.log FileKey4=%ProgramFiles%\ABBYY PDF Transformer *.0|*.log FileKey5=%SystemDrive%\Temp\PDFT*|*|REMOVESELF RegKey1=HKCU\Software\ABBYY\PDFTransformer\3.00\Transform|MRURecognitionLanguages RegKey2=HKCU\Software\ABBYY\PDFTransformer\3.00\Transform|TransformOpenPath RegKey3=HKCU\Software\ABBYY\PDFTransformer\12.00\Shell\Statistics Tags=ccapps ID=ABBYY PDFTransformer * Author=Winapp2.ini Project [ABBYY ScreenshotReader *] Detect1=HKCU\Software\ABBYY\Bonus.ScreenshotReader Detect2=HKCU\Software\ABBYY\Retail.ScreenshotReader Detect3=HKCU\Software\ABBYY\ScreenshotReader DetectFile=%ProgramFiles%\ABBYY Screenshot Reader FileKey1=%ProgramData%\ABBYY\*.ScreenshotReader\*|*.xml FileKey2=%ProgramData%\ABBYY\*.ScreenshotReader\*\Licenses|*.log FileKey3=%ProgramFiles%\ABBYY Screenshot Reader|*.log;*.rtf RegKey1=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|LastSaveImagePath RegKey2=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|SaveTablePath RegKey3=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|SaveTextPath RegKey4=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Advertising RegKey5=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|LastSaveImagePath RegKey6=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|SaveTablePath RegKey7=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|SaveTextPath RegKey8=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|LastSaveImagePath RegKey9=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|SaveTablePath RegKey10=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|SaveTextPath Tags=ccapps ID=ABBYY ScreenshotReader * Author=Winapp2.ini Project [Abelssoft AntiBrowserSpy *] DetectFile=%LocalAppData%\Abelssoft\AntiBrowserSpy FileKey1=%LocalAppData%\Abelssoft\AntiBrowserSpy|*.log FileKey2=%LocalAppData%\Abelssoft\AntiBrowserSpy\Backups|* Tags=ccutil ID=Abelssoft AntiBrowserSpy * Author=Winapp2.ini Project [Abelssoft AntiLogger *] DetectFile=%LocalAppData%\Abelssoft\AntiLogger FileKey1=%LocalAppData%\Abelssoft\AntiLogger|*.log Tags=ccutil ID=Abelssoft AntiLogger * Author=Winapp2.ini Project [Abelssoft AntiRansomware *] DetectFile=%LocalAppData%\Abelssoft\AntiRansomware FileKey1=%LocalAppData%\Abelssoft\AntiRansomware|*.log Tags=ccutil ID=Abelssoft AntiRansomware * Author=Winapp2.ini Project [Abelssoft CheckDrive *] DetectFile=%LocalAppData%\Abelssoft\CheckDrive FileKey1=%LocalAppData%\Abelssoft\CheckDrive|*.log|RECURSE Tags=ccutil ID=Abelssoft CheckDrive * Author=Winapp2.ini Project [Abelssoft CleverPrint *] DetectFile=%LocalAppData%\Abelssoft\CleverPrint FileKey1=%LocalAppData%\Abelssoft\CleverPrint|*.log Tags=ccutil ID=Abelssoft CleverPrint * Author=Winapp2.ini Project [Abelssoft Converter4Video *] DetectFile=%LocalAppData%\Abelssoft\Converter4Video FileKey1=%LocalAppData%\Abelssoft\Converter4Video|*.log Tags=ccutil ID=Abelssoft Converter4Video * Author=Winapp2.ini Project [Abelssoft CryptBox *] DetectFile=%LocalAppData%\Abelssoft\CryptBox FileKey1=%LocalAppData%\Abelssoft\CryptBox|*.log Tags=ccutil ID=Abelssoft CryptBox * Author=Winapp2.ini Project [Abelssoft Data2Pocket *] DetectFile=%LocalAppData%\Abelssoft\Data2Pocket FileKey1=%LocalAppData%\Abelssoft\Data2Pocket|*.log Tags=ccutil ID=Abelssoft Data2Pocket * Author=Winapp2.ini Project [Abelssoft Easy PDF *] DetectFile=%LocalAppData%\Abelssoft\Abelssoft Easy PDF FileKey1=%LocalAppData%\Abelssoft\Abelssoft Easy PDF|*.log Tags=ccutil ID=Abelssoft Easy PDF * Author=Winapp2.ini Project [Abelssoft EasyBackup *] DetectFile=%LocalAppData%\Abelssoft\EasyBackup FileKey1=%LocalAppData%\Abelssoft\EasyBackup|*.log Tags=ccutil ID=Abelssoft EasyBackup * Author=Winapp2.ini Project [Abelssoft EasyFirewall *] DetectFile=%LocalAppData%\Abelssoft\EasyFirewall FileKey1=%LocalAppData%\Abelssoft\EasyFirewall|*.log Tags=ccutil ID=Abelssoft EasyFirewall * Author=Winapp2.ini Project [Abelssoft EverDoc *] DetectFile=%LocalAppData%\Abelssoft\EverDoc FileKey1=%LocalAppData%\Abelssoft\EverDoc|*.log Tags=ccutil ID=Abelssoft EverDoc * Author=Winapp2.ini Project [Abelssoft FileCryptor *] DetectFile=%LocalAppData%\Abelssoft\FileCryptor FileKey1=%LocalAppData%\Abelssoft\FileCryptor|*.log Tags=ccutil ID=Abelssoft FileCryptor * Author=Winapp2.ini Project [Abelssoft FileFusion *] DetectFile=%LocalAppData%\Abelssoft\FileFusion FileKey1=%LocalAppData%\Abelssoft\FileFusion|*.log|RECURSE FileKey2=%LocalAppData%\Abelssoft\FileFusion\Backups|* Tags=ccutil ID=Abelssoft FileFusion * Author=Winapp2.ini Project [Abelssoft FileWing Shredder *] DetectFile=%AppData%\Abelssoft\FileWingShredder FileKey1=%AppData%\Abelssoft\FileWingShredder|*.log Tags=ccutil ID=Abelssoft FileWing Shredder * Author=Winapp2.ini Project [Abelssoft FindMyFiles *] DetectFile=%LocalAppData%\Abelssoft\FindMyFiles FileKey1=%LocalAppData%\Abelssoft\FindMyFiles|*.log Tags=ccutil ID=Abelssoft FindMyFiles * Author=Winapp2.ini Project [Abelssoft FolderVisualizer *] DetectFile=%AppData%\Abelssoft\FolderVisualizer FileKey1=%AppData%\Abelssoft\FolderVisualizer|*.log Tags=ccutil ID=Abelssoft FolderVisualizer * Author=Winapp2.ini Project [Abelssoft GClean *] DetectFile1=%LocalAppData%\Abelssoft\GClean DetectFile2=%LocalAppData%\Abelssoft\GoogleClean FileKey1=%LocalAppData%\Abelssoft\GClean|*.log FileKey2=%LocalAppData%\Abelssoft\GClean\Backups|* FileKey3=%LocalAppData%\Abelssoft\GoogleClean\log|*|REMOVESELF Tags=ccutil ID=Abelssoft GClean * Author=Winapp2.ini Project [Abelssoft HackCheck *] DetectFile=%LocalAppData%\Abelssoft\HackCheck FileKey1=%LocalAppData%\Abelssoft\HackCheck|*.log Tags=ccutil ID=Abelssoft HackCheck * Author=Winapp2.ini Project [Abelssoft HappyCard *] DetectFile=%LocalAppData%\Abelssoft\HappyCard FileKey1=%LocalAppData%\Abelssoft\HappyCard|*.log;RecentImages.txt Tags=ccutil ID=Abelssoft HappyCard * Author=Winapp2.ini Project [Abelssoft JetDrive *] DetectFile=%ProgramFiles%\JetDrive FileKey1=%LocalAppData%\Abelssoft\JetDrive|*.log;JetDrive.reports.xml FileKey2=%ProgramFiles%\JetDrive|JetDrive.log Tags=ccutil ID=Abelssoft JetDrive * Author=Winapp2.ini Project [Abelssoft KeyDepot *] DetectFile=%LocalAppData%\Abelssoft\KeyDepot FileKey1=%AppData%\KeyDepot\*Cache*|*|RECURSE FileKey2=%LocalAppData%\Abelssoft\KeyDepot|*.log Tags=ccutil ID=Abelssoft KeyDepot * Author=Winapp2.ini Project [Abelssoft MalwareTerminator *] DetectFile=%AppData%\Abelssoft\MalwareTerminator FileKey1=%AppData%\Abelssoft\MalwareTerminator|*.log Tags=ccutil ID=Abelssoft MalwareTerminator * Author=Winapp2.ini Project [Abelssoft MovieCut *] DetectFile=%AppData%\Abelssoft\MovieCut FileKey1=%AppData%\Abelssoft\MovieCut|*.log Tags=ccutil ID=Abelssoft MovieCut * Author=Winapp2.ini Project [Abelssoft mp3schneiden *] DetectFile=%AppData%\Abelssoft\mp3schneiden FileKey1=%AppData%\Abelssoft\mp3schneiden|*.log Tags=ccutil ID=Abelssoft mp3schneiden * Author=Winapp2.ini Project [Abelssoft MyKeyFinder *] DetectFile=%LocalAppData%\Abelssoft\MyKeyFinder FileKey1=%LocalAppData%\Abelssoft\MyKeyFinder|*.log Tags=ccutil ID=Abelssoft MyKeyFinder * Author=Winapp2.ini Project [Abelssoft PCFresh *] DetectFile=%LocalAppData%\Abelssoft\PCFresh FileKey1=%LocalAppData%\Abelssoft\PCFresh|*.log FileKey2=%LocalAppData%\Abelssoft\PCFresh\Backup|* Tags=ccutil ID=Abelssoft PCFresh * Author=Winapp2.ini Project [Abelssoft Photastic *] DetectFile=%LocalAppData%\Abelssoft\Photastic FileKey1=%LocalAppData%\Abelssoft\Photastic|*.log;RecentImages.txt FileKey2=%ProgramData%\Abelssoft\Photastic|*.log Tags=ccutil ID=Abelssoft Photastic * Author=Winapp2.ini Project [Abelssoft PhotoBoost *] DetectFile1=%LocalAppData%\Abelssoft\PhotoBoost DetectFile2=%ProgramData%\Abelssoft\PhotoBoost FileKey1=%LocalAppData%\Abelssoft\PhotoBoost|*.log FileKey2=%ProgramData%\Abelssoft\PhotoBoost|*.log Tags=ccutil ID=Abelssoft PhotoBoost * Author=Winapp2.ini Project [Abelssoft PhotoSort *] DetectFile=%LocalAppData%\Abelssoft\PhotoSort FileKey1=%LocalAppData%\Abelssoft\PhotoSort|*.log Tags=ccutil ID=Abelssoft PhotoSort * Author=Winapp2.ini Project [Abelssoft Recordify *] DetectFile=%LocalAppData%\Abelssoft\Recordify FileKey1=%LocalAppData%\Abelssoft\Recordify|*.log Tags=ccutil ID=Abelssoft Recordify * Author=Winapp2.ini Project [Abelssoft Registry Cleaner *] DetectFile=%AppData%\Abelssoft\RegistryCleaner FileKey1=%AppData%\Abelssoft\RegistryCleaner|*.log Tags=ccutil ID=Abelssoft Registry Cleaner * Author=Winapp2.ini Project [Abelssoft RouterGuard *] DetectFile=%LocalAppData%\Abelssoft\RouterGuard FileKey1=%LocalAppData%\Abelssoft\RouterGuard|*.log Tags=ccutil ID=Abelssoft RouterGuard * Author=Winapp2.ini Project [Abelssoft Schirmfoto *] DetectFile=%AppData%\Abelssoft\Schirmfoto FileKey1=%AppData%\Abelssoft\Schirmfoto|*.log Tags=ccutil ID=Abelssoft Schirmfoto * Author=Winapp2.ini Project [Abelssoft ScreenVideo *] DetectFile=%LocalAppData%\Abelssoft\ScreenVideo FileKey1=%LocalAppData%\Abelssoft\ScreenVideo|*.log FileKey2=%UserProfile%\Videos\ScreenVideo\Cache|* Tags=ccutil ID=Abelssoft ScreenVideo * Author=Winapp2.ini Project [Abelssoft SendMe *] DetectFile=%AppData%\SendMe FileKey1=%AppData%\SendMe\*Cache|*|RECURSE FileKey2=%LocalAppData%\Abelssoft\SendMe|*.log Tags=ccutil ID=Abelssoft SendMe * Author=Winapp2.ini Project [Abelssoft SSD Fresh *] DetectFile=%LocalAppData%\Abelssoft\SSD Fresh FileKey1=%LocalAppData%\Abelssoft\SSD Fresh|*.log;backup.* Tags=ccutil ID=Abelssoft SSD Fresh * Author=Winapp2.ini Project [Abelssoft StartupStar *] DetectFile=%LocalAppData%\Abelssoft\StartupStar FileKey1=%AppData%\AbelsSoft\StartupStar|*.log FileKey2=%LocalAppData%\Abelssoft\StartupStar|*.log;backup.xml Tags=ccutil ID=Abelssoft StartupStar * Author=Winapp2.ini Project [Abelssoft SyncManager *] DetectFile=%LocalAppData%\Abelssoft\SyncManager FileKey1=%LocalAppData%\Abelssoft\SyncManager|*.log Tags=ccutil ID=Abelssoft SyncManager * Author=Winapp2.ini Project [Abelssoft Tagman *] DetectFile=%AppData%\Abelssoft\Tagman FileKey1=%AppData%\Abelssoft\Tagman|*.log Tags=ccutil ID=Abelssoft Tagman * Author=Winapp2.ini Project [Abelssoft Undeleter *] DetectFile=%LocalAppData%\Abelssoft\Abelssoft Undeleter FileKey1=%LocalAppData%\Abelssoft\Abelssoft Undeleter|*.log Tags=ccutil ID=Abelssoft Undeleter * Author=Winapp2.ini Project [Abelssoft WashAndGo *] DetectFile=%LocalAppData%\Abelssoft\WashAndGo FileKey1=%AppData%\Abelssoft\WashAndGo\Log|*.log|RECURSE FileKey2=%LocalAppData%\Abelssoft\WashAndGo|*.log|RECURSE FileKey3=%LocalAppData%\Abelssoft\WashAndGo\Backups|* FileKey4=%UserProfile%\Documents\Abelssoft\WashAndGo\Backups|* Tags=ccutil ID=Abelssoft WashAndGo * Author=Winapp2.ini Project [Abelssoft Win10PrivacyFix *] DetectFile=%LocalAppData%\Abelssoft\Win10PrivacyFix FileKey1=%LocalAppData%\Abelssoft\Win10PrivacyFix|*.log Tags=ccutil ID=Abelssoft Win10PrivacyFix * Author=Winapp2.ini Project [Abelssoft Win11PrivacyFix *] DetectFile=%LocalAppData%\Abelssoft\Win11PrivacyFix FileKey1=%LocalAppData%\Abelssoft\Win11PrivacyFix|*.log Tags=ccutil ID=Abelssoft Win11PrivacyFix * Author=Winapp2.ini Project [Abelssoft YouTube Song Downloader *] DetectFile=%AppData%\YouTubeSongDownloader FileKey1=%AppData%\YouTubeSongDownloader\*Cache|*|RECURSE FileKey2=%LocalAppData%\Abelssoft\YouTube Song Downloader|*.log Tags=ccutil ID=Abelssoft YouTube Song Downloader * Author=Winapp2.ini Project [abgx360 *] Detect=HKCU\Software\abgx360gui RegKey1=HKCU\Software\abgx360gui\RecentFiles Tags=ccutil ID=abgx360 * Author=Winapp2.ini Project [Ability Office Database *] Detect1=HKCU\Software\Ability 6.0\Ability Database Detect2=HKCU\Software\Ability 7.0\Ability Database Detect3=HKCU\Software\Ability 11.0\Ability Database RegKey1=HKCU\Software\Ability 6.0\Ability Database\Dirs RegKey2=HKCU\Software\Ability 6.0\Ability Database\Files RegKey3=HKCU\Software\Ability 6.0\Ability Database\Recent File List RegKey4=HKCU\Software\Ability 7.0\Ability Database\Dirs RegKey5=HKCU\Software\Ability 7.0\Ability Database\Files RegKey6=HKCU\Software\Ability 7.0\Ability Database\Recent File List RegKey7=HKCU\Software\Ability 11.0\Ability Database\Dirs RegKey8=HKCU\Software\Ability 11.0\Ability Database\Files RegKey9=HKCU\Software\Ability 11.0\Ability Database\Recent File List Tags=ccapps ID=Ability Office Database * Author=Winapp2.ini Project [Ability Office PhotoPaint *] Detect1=HKCU\Software\Ability 6.0\Ability PhotoPaint Detect2=HKCU\Software\Ability 6.0\Ability PhotoPaint Studio Detect3=HKCU\Software\Ability 7.0\Ability PhotoPaint Detect4=HKCU\Software\Ability 7.0\Ability PhotoPaint Studio Detect5=HKCU\Software\Ability 11.0\Ability PhotoPaint Detect6=HKCU\Software\Ability 11.0\Ability PhotoPaint Studio RegKey1=HKCU\Software\Ability 6.0\Ability PhotoPaint Studio\Dirs RegKey2=HKCU\Software\Ability 6.0\Ability PhotoPaint Studio\Files RegKey3=HKCU\Software\Ability 6.0\Ability PhotoPaint Studio\Recent File List RegKey4=HKCU\Software\Ability 6.0\Ability PhotoPaint\Dirs RegKey5=HKCU\Software\Ability 6.0\Ability PhotoPaint\Files RegKey6=HKCU\Software\Ability 6.0\Ability PhotoPaint\Recent File List RegKey7=HKCU\Software\Ability 7.0\Ability PhotoPaint Studio\Dirs RegKey8=HKCU\Software\Ability 7.0\Ability PhotoPaint Studio\Files RegKey9=HKCU\Software\Ability 7.0\Ability PhotoPaint Studio\Recent File List RegKey10=HKCU\Software\Ability 7.0\Ability PhotoPaint\Dirs RegKey11=HKCU\Software\Ability 7.0\Ability PhotoPaint\Files RegKey12=HKCU\Software\Ability 7.0\Ability PhotoPaint\Recent File List RegKey13=HKCU\Software\Ability 11.0\Ability PhotoPaint Studio\Dirs RegKey14=HKCU\Software\Ability 11.0\Ability PhotoPaint Studio\Files RegKey15=HKCU\Software\Ability 11.0\Ability PhotoPaint Studio\Recent File List RegKey16=HKCU\Software\Ability 11.0\Ability PhotoPaint\Dirs RegKey17=HKCU\Software\Ability 11.0\Ability PhotoPaint\Files RegKey18=HKCU\Software\Ability 11.0\Ability PhotoPaint\Recent File List Tags=ccapps ID=Ability Office PhotoPaint * Author=Winapp2.ini Project [Ability Office Presentation *] Detect1=HKCU\Software\Ability 6.0\Ability Presentation Detect2=HKCU\Software\Ability 7.0\Ability Presentation Detect3=HKCU\Software\Ability 11.0\Ability Presentation RegKey1=HKCU\Software\Ability 6.0\Ability Presentation\Dirs RegKey2=HKCU\Software\Ability 6.0\Ability Presentation\Files RegKey3=HKCU\Software\Ability 6.0\Ability Presentation\Recent File List RegKey4=HKCU\Software\Ability 7.0\Ability Presentation\Dirs RegKey5=HKCU\Software\Ability 7.0\Ability Presentation\Files RegKey6=HKCU\Software\Ability 7.0\Ability Presentation\Recent File List RegKey7=HKCU\Software\Ability 11.0\Ability Presentation\Dirs RegKey8=HKCU\Software\Ability 11.0\Ability Presentation\Files RegKey9=HKCU\Software\Ability 11.0\Ability Presentation\Recent File List Tags=ccapps ID=Ability Office Presentation * Author=Winapp2.ini Project [Ability Office Spreadsheet *] Detect1=HKCU\Software\Ability 6.0\Ability Spreadsheet Detect2=HKCU\Software\Ability 7.0\Ability Spreadsheet Detect3=HKCU\Software\Ability 11.0\Ability Spreadsheet RegKey1=HKCU\Software\Ability 6.0\Ability Spreadsheet\Dirs RegKey2=HKCU\Software\Ability 6.0\Ability Spreadsheet\Files RegKey3=HKCU\Software\Ability 6.0\Ability Spreadsheet\Recent File List RegKey4=HKCU\Software\Ability 7.0\Ability Spreadsheet\Dirs RegKey5=HKCU\Software\Ability 7.0\Ability Spreadsheet\Files RegKey6=HKCU\Software\Ability 7.0\Ability Spreadsheet\Recent File List RegKey7=HKCU\Software\Ability 11.0\Ability Spreadsheet\Dirs RegKey8=HKCU\Software\Ability 11.0\Ability Spreadsheet\Files RegKey9=HKCU\Software\Ability 11.0\Ability Spreadsheet\Recent File List Tags=ccapps ID=Ability Office Spreadsheet * Author=Winapp2.ini Project [Ability Office Write *] Detect1=HKCU\Software\Ability 6.0\Ability Write Detect2=HKCU\Software\Ability 7.0\Ability Write Detect3=HKCU\Software\Ability 11.0\Ability Write RegKey1=HKCU\Software\Ability 6.0\Ability Write\Dirs RegKey2=HKCU\Software\Ability 6.0\Ability Write\Files RegKey3=HKCU\Software\Ability 6.0\Ability Write\Recent File List RegKey4=HKCU\Software\Ability 7.0\Ability Write\Dirs RegKey5=HKCU\Software\Ability 7.0\Ability Write\Files RegKey6=HKCU\Software\Ability 7.0\Ability Write\Recent File List RegKey7=HKCU\Software\Ability 11.0\Ability Write\Dirs RegKey8=HKCU\Software\Ability 11.0\Ability Write\Files RegKey9=HKCU\Software\Ability 11.0\Ability Write\Recent File List Tags=ccapps ID=Ability Office Write * Author=Winapp2.ini Project [Ableton Live *] Detect=HKLM\Software\Propellerhead Software\ReWire\Ableton Live Engine DetectFile=%AppData%\Ableton FileKey1=%AppData%\Ableton\*\Preferences|*.log;*Log.txt;Indexer.txt|RECURSE FileKey2=%AppData%\Ableton\Cache|*|RECURSE FileKey3=%AppData%\Ableton\Live Reports|Ableton Crash Report*.zip FileKey4=%AppData%\Ableton\Live Reports\Ableton Crash Report*|*|REMOVESELF FileKey5=%AppData%\Ableton\Live Reports\Temp|*|REMOVESELF FileKey6=%AppData%\Ableton\Live Reports\Usage|*|REMOVESELF FileKey7=%AppData%\Ableton\Live*\Preferences\Crash|*|RECURSE FileKey8=%LocalAppData%\Ableton\Cache\cache\decoding|* FileKey9=%ProgramData%\Ableton\*\Redist|vc*redist*.exe FileKey10=%ProgramFiles%\Ableton\*\Redist|vc*redist*.exe Tags=ccmedia ID=Ableton Live * Author=Winapp2.ini Project [AbsoluteFTP *] Detect=HKCU\Software\Van Dyke Technologies\AbsoluteFTP RegKey1=HKCU\Software\Van Dyke Technologies\AbsoluteFTP\Recent File List Tags=ccinternet ID=AbsoluteFTP * Author=Winapp2.ini Project [Abvent Artlantis *] DetectFile1=%AppData%\Abvent\Artlantis* DetectFile2=%AppData%\Abvent_Artlantis* FileKey1=%AppData%\Abvent\Artlantis*|*Log.txt FileKey2=%AppData%\Abvent\Artlantis*\*_DiagnosticReports_*|*|REMOVESELF FileKey3=%AppData%\Abvent_Artlantis*|*Log.txt FileKey4=%AppData%\Abvent_Artlantis*\*_DiagnosticReports_*|*|REMOVESELF Tags=ccapps ID=Abvent Artlantis * Author=Winapp2.ini Project [Abyssmedia Quick Batch File Compiler *] Detect1=HKCU\Software\Abyssmedia\Quick Batch File Compiler Detect2=HKCU\Software\qbfc RegKey1=HKCU\Software\Abyssmedia\Quick Batch File Compiler\Settings|savedir RegKey2=HKCU\Software\qbfc\RecentFiles Tags=ccutil ID=Abyssmedia Quick Batch File Compiler * Author=Winapp2.ini Project [Abyssmedia ScriptCryptor Compiler *] Detect=HKCU\Software\Abyssmedia\ScriptCryptor RegKey1=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mrucount RegKey2=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem0 RegKey3=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem1 RegKey4=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem2 RegKey5=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem3 RegKey6=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem4 RegKey7=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|savedir Tags=ccutil ID=Abyssmedia ScriptCryptor Compiler * Author=Winapp2.ini Project [AC74 *] Detect=HKCU\Software\AC74\View64 RegKey1=HKCU\Software\AC74\View64|MRU1 RegKey2=HKCU\Software\AC74\View64|MRU2 RegKey3=HKCU\Software\AC74\View64|MRU3 RegKey4=HKCU\Software\AC74\View64|MRU4 RegKey5=HKCU\Software\AC74\View64|MRU5 RegKey6=HKCU\Software\AC74\View64|MRU6 RegKey7=HKCU\Software\AC74\View64|MRU7 RegKey8=HKCU\Software\AC74\View64|MRU8 Tags=ccapps ID=AC74 * Author=Winapp2.ini Project [AccessData Registry Viewer *] Detect=HKCU\Software\AccessData\Registry Viewer RegKey1=HKCU\Software\AccessData\Registry Viewer\Recent File List Tags=ccutil ID=AccessData Registry Viewer * Author=Winapp2.ini Project [AccurateRip *] DetectFile=%AppData%\AccurateRip FileKey1=%AppData%\AccurateRip\AccurateRipCache|dBAR*.bin Tags=ccmedia ID=AccurateRip * Author=Winapp2.ini Project [ACDSee Photo Studio *] Detect1=HKCU\Software\ACD Systems\ACDSee Pro Detect2=HKCU\Software\ACD Systems\ACDSee Professional Detect3=HKCU\Software\ACD Systems\ACDSee Standard Detect4=HKCU\Software\ACD Systems\ACDSee Ultimate Detect5=HKCU\Software\ACD Systems\ACDSee\60 FileKey1=%LocalAppData%\ACD Systems\GeoTag\Cache|*|RECURSE FileKey2=%LocalAppData%\ACD Systems\ICMCache|*|RECURSE FileKey3=%LocalAppData%\ACD Systems\Logs|*|RECURSE FileKey4=%LocalAppData%\ACD Systems\SavedSearches|*|RECURSE RegKey1=HKCU\Software\ACD Systems\ACDSee Pro\90|HistMCFDestFolder RegKey2=HKCU\Software\ACD Systems\ACDSee Pro\90|HistPaths RegKey3=HKCU\Software\ACD Systems\ACDSee Pro\90|LastOptionPageName RegKey4=HKCU\Software\ACD Systems\ACDSee Pro\90|OpenFolder RegKey5=HKCU\Software\ACD Systems\ACDSee Pro\90\PrintOptions\OutputContactSheet|ContactSheetFN RegKey6=HKCU\Software\ACD Systems\ACDSee Pro\90\PrintOptions\OutputContactSheet|ImageMapFN RegKey7=HKCU\Software\ACD Systems\ACDSee Professional\110|HistMCFDestFolder RegKey8=HKCU\Software\ACD Systems\ACDSee Professional\110|HistPaths RegKey9=HKCU\Software\ACD Systems\ACDSee Professional\110|LastOptionPageName RegKey10=HKCU\Software\ACD Systems\ACDSee Professional\110|OnlineHistPaths RegKey11=HKCU\Software\ACD Systems\ACDSee Professional\110|OpenFolder RegKey12=HKCU\Software\ACD Systems\ACDSee Professional\120|HistMCFDestFolder RegKey13=HKCU\Software\ACD Systems\ACDSee Professional\120|HistPaths RegKey14=HKCU\Software\ACD Systems\ACDSee Professional\120|LastOptionPageName RegKey15=HKCU\Software\ACD Systems\ACDSee Professional\120|OnlineHistPaths RegKey16=HKCU\Software\ACD Systems\ACDSee Professional\120|OpenFolder RegKey17=HKCU\Software\ACD Systems\ACDSee Standard\210|HistMCFDestFolder RegKey18=HKCU\Software\ACD Systems\ACDSee Standard\210|HistPaths RegKey19=HKCU\Software\ACD Systems\ACDSee Standard\210|LastOptionPageName RegKey20=HKCU\Software\ACD Systems\ACDSee Standard\210|OnlineHistPaths RegKey21=HKCU\Software\ACD Systems\ACDSee Standard\210|OpenFolder RegKey22=HKCU\Software\ACD Systems\ACDSee Standard\220|HistMCFDestFolder RegKey23=HKCU\Software\ACD Systems\ACDSee Standard\220|HistPaths RegKey24=HKCU\Software\ACD Systems\ACDSee Standard\220|LastOptionPageName RegKey25=HKCU\Software\ACD Systems\ACDSee Standard\220|OnlineHistPaths RegKey26=HKCU\Software\ACD Systems\ACDSee Standard\220|OpenFolder RegKey27=HKCU\Software\ACD Systems\ACDSee Ultimate\110|HistMCFDestFolder RegKey28=HKCU\Software\ACD Systems\ACDSee Ultimate\110|HistPaths RegKey29=HKCU\Software\ACD Systems\ACDSee Ultimate\110|LastOptionPageName RegKey30=HKCU\Software\ACD Systems\ACDSee Ultimate\110|OnlineHistPaths RegKey31=HKCU\Software\ACD Systems\ACDSee Ultimate\110|OpenFolder RegKey32=HKCU\Software\ACD Systems\ACDSee Ultimate\120|HistMCFDestFolder RegKey33=HKCU\Software\ACD Systems\ACDSee Ultimate\120|HistPaths RegKey34=HKCU\Software\ACD Systems\ACDSee Ultimate\120|LastOptionPageName RegKey35=HKCU\Software\ACD Systems\ACDSee Ultimate\120|OnlineHistPaths RegKey36=HKCU\Software\ACD Systems\ACDSee Ultimate\120|OpenFolder RegKey37=HKCU\Software\ACD Systems\ACDSee\60|HistMCFDestFolder RegKey38=HKCU\Software\ACD Systems\ACDSee\60|HistPaths RegKey39=HKCU\Software\ACD Systems\ACDSee\60|LastOptionPageName RegKey40=HKCU\Software\ACD Systems\ACDSee\60|OpenFolder RegKey41=HKCU\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ContactSheetFN RegKey42=HKCU\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ImageMapFN RegKey43=HKCU\Software\ACD Systems\EditLib\Presets\Photo Repair 2|Last Used Tags=ccmedia ID=ACDSee Photo Studio * Author=Winapp2.ini Project [Ace Stream *] DetectFile=%AppData%\ACEStream FileKey1=%AppData%\.ACEStream|*.ini FileKey2=%AppData%\.ACEStream\collected_torrent_files|* FileKey3=%AppData%\ACEStream\engine|*.log FileKey4=%AppData%\ACEStream\player\plugins|plugins.dat FileKey5=%AppData%\ACEStream\updater|*.log FileKey6=%SystemDrive%\_acestream_cache_|*|REMOVESELF FileKey7=%UserProfile%\AppData\LocalLow\.ACEStream|*.log Tags=ccmedia ID=Ace Stream * Author=Winapp2.ini Project [Ace Utilities *] Detect=HKCU\Software\Acelogix\Ace Utilities FileKey1=%LocalAppData%\Acelogix\Ace Utilities\Backups|*.reg RegKey1=HKCU\Software\Acelogix\Ace Utilities\Settings|UsageHistory Tags=ccutil ID=Ace Utilities * Author=Winapp2.ini Project [Acer Care Center *] Detect1=HKLM\Software\OEM\AcerCareCenter Detect2=HKLM\Software\OEM\CareCenter FileKey1=%ProgramData%\Acer\CareCenter\DebugLog\SurfaceCheck|log*.txt FileKey2=%ProgramFiles%\Acer\Care Center\DebugLog|*.log Tags=ccutil ID=Acer Care Center * Author=Winapp2.ini Project [Acer Clear.fi *] DetectFile=%LocalAppData%\Acer\Clear.fi FileKey1=%LocalAppData%\Acer\Clear.fi\log|*.log FileKey2=%LocalAppData%\AOP SDK\acer infra\acer\log|*.log FileKey3=%LocalAppData%\AOP SDK\acer infra\acer\SyncAgent\logs|*|RECURSE FileKey4=%LocalAppData%\Clear.fi\AcerCloud\SyncAgent\logs|*|RECURSE FileKey5=%LocalAppData%\Clear.fi\log|*|RECURSE Tags=ccapps ID=Acer Clear.fi * Author=Winapp2.ini Project [Acesoft Tracks Eraser Pro *] DetectFile=%ProgramFiles%\Acesoft\Tracks Eraser Pro FileKey1=%ProgramFiles%\Acesoft\Tracks Eraser Pro|te.log Tags=ccutil ID=Acesoft Tracks Eraser Pro * Author=Winapp2.ini Project [Acon Digital Acoustica *] Detect1=HKCU\Software\Acon Digital\Acoustica Basic Edition 6 Detect2=HKCU\Software\Acon Digital\Acoustica Premium Edition 6 Detect3=HKCU\Software\Acon Digital\Acoustica Premium Edition 7 Detect4=HKCU\Software\Acon Digital\Acoustica Standard Edition 6 RegKey1=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\General|BrowserFolder RegKey2=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\General|LastAudioDir RegKey3=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\Recent File List RegKey4=HKCU\Software\Acon Digital\Acoustica Premium Edition 7\General|BrowserFolder RegKey5=HKCU\Software\Acon Digital\Acoustica Premium Edition 7\General|LastAudioDir RegKey6=HKCU\Software\Acon Digital\Acoustica Premium Edition 7\Recent File List Tags=ccmedia ID=Acon Digital Acoustica * Author=Winapp2.ini Project [Acoustica CD Label Maker *] DetectFile=%AppData%\Acoustica\CD Label Maker FileKey1=%AppData%\Acoustica\CD Label Maker\*\cache|*|RECURSE FileKey2=%AppData%\Acoustica\CD Label Maker\cache|*|RECURSE FileKey3=%AppData%\Acoustica\CD Label Maker\shapes|* FileKey4=%ProgramFiles%\Acoustica CD Label Maker\thumbs|*|RECURSE Tags=ccutil ID=Acoustica CD Label Maker * Author=Winapp2.ini Project [Acrok Video Converter Ultimate *] DetectFile=%AppData%\Acrok\Acrok Video Converter Ultimate FileKey1=%AppData%\Acrok Software\Blu-ray Plugin|*.log FileKey2=%AppData%\Acrok Software\Blu-ray Plugin\Log|*.log FileKey3=%AppData%\Acrok\Acrok Video Converter Ultimate|*.dmp FileKey4=%AppData%\Acrok\Acrok Video Converter Ultimate\log|* FileKey5=%AppData%\Auxre\Blu-ray Plugin|*.log FileKey6=%AppData%\Auxre\Blu-ray Plugin\Log|*.log FileKey7=%UserProfile%\.BDAccess|*|RECURSE Tags=ccmedia ID=Acrok Video Converter Ultimate * Author=Winapp2.ini Project [Active@ Disk Image *] DetectFile=%ProgramFiles%\LSoft Technologies\Active@ Disk Image FileKey1=%ProgramFiles%\LSoft Technologies\Active@ Disk Image|*.txt FileKey2=%ProgramFiles%\LSoft Technologies\Active@ Disk Image\Logs|*|RECURSE Tags=ccutil ID=Active@ Disk Image * Author=Winapp2.ini Project [Active@ File Recovery *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C34F36E0-4D8B-42E8-90AD-50C76E1AE282}_is1 FileKey1=%ProgramFiles%\LSoft Technologies\Active@ File Recovery*|*.scn;*.xml;*Log.txt Tags=ccutil ID=Active@ File Recovery * Author=Winapp2.ini Project [Active@ KillDisk *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F62EFB8-3C1C-4EE6-B6EF-9593007F9B03}_is1 FileKey1=%ProgramFiles%\LSoft Technologies\Active@ KillDisk*|*.log;*.xml Tags=ccutil ID=Active@ KillDisk * Author=Winapp2.ini Project [Actual Tools Actual Multiple Monitors *] DetectFile=%AppData%\Actual Tools\Actual Multiple Monitors FileKey1=%AppData%\Actual Tools\Actual Multiple Monitors|*.log Tags=ccutil ID=Actual Tools Actual Multiple Monitors * Author=Winapp2.ini Project [Actual Tools Actual Tabbed Explorer *] DetectFile=%AppData%\Actual Tools\Actual Tabbed Explorer FileKey1=%AppData%\Actual Tools\Actual Tabbed Explorer|*.log Tags=ccutil ID=Actual Tools Actual Tabbed Explorer * Author=Winapp2.ini Project [Actual Tools Actual Title Buttons *] DetectFile=%AppData%\Actual Tools\Actual Title Buttons FileKey1=%AppData%\Actual Tools\Actual Title Buttons|*.log Tags=ccutil ID=Actual Tools Actual Title Buttons * Author=Winapp2.ini Project [Actual Tools Actual Transparent Window *] DetectFile=%AppData%\Actual Tools\Actual Transparent Window FileKey1=%AppData%\Actual Tools\Actual Transparent Window|*.log Tags=ccutil ID=Actual Tools Actual Transparent Window * Author=Winapp2.ini Project [Actual Tools Actual Virtual Desktops *] DetectFile=%AppData%\Actual Tools\Actual Virtual Desktops FileKey1=%AppData%\Actual Tools\Actual Virtual Desktops|*.log Tags=ccutil ID=Actual Tools Actual Virtual Desktops * Author=Winapp2.ini Project [Actual Tools Actual Window Guard *] Detect=HKCU\Software\Actual Tools\Actual Window Guard FileKey1=%AppData%\Actual Tools\Actual Window Guard|*.log RegKey1=HKCU\Software\Actual Tools\Actual Window Guard|LastNagScreenDate Tags=ccutil ID=Actual Tools Actual Window Guard * Author=Winapp2.ini Project [Actual Tools Actual Window Manager *] DetectFile=%AppData%\Actual Tools\Actual Window Manager FileKey1=%AppData%\Actual Tools\Actual Window Manager|*.log Tags=ccutil ID=Actual Tools Actual Window Manager * Author=Winapp2.ini Project [Actual Tools Actual Window Menu *] DetectFile=%AppData%\Actual Tools\Actual Window Menu FileKey1=%AppData%\Actual Tools\Actual Window Menu|*.log Tags=ccutil ID=Actual Tools Actual Window Menu * Author=Winapp2.ini Project [Actual Tools Actual Window Rollup *] DetectFile=%AppData%\Actual Tools\Actual Window Rollup FileKey1=%AppData%\Actual Tools\Actual Window Rollup|*.log Tags=ccutil ID=Actual Tools Actual Window Rollup * Author=Winapp2.ini Project [Acustica Aquarius *] DetectFile=%AppData%\Acustica\Aquarius FileKey1=%AppData%\Acustica\Aquarius\Resources\Temp|* FileKey2=%AppData%\Acustica\Stagearea\AquariusTemp|* Tags=ccmedia ID=Acustica Aquarius * Author=Winapp2.ini Project [Ad-Aware Antivirus *] DetectFile1=%AppData%\Ad-Aware Antivirus DetectFile2=%ProgramData%\Ad-Aware Antivirus DetectFile3=%ProgramData%\Lavasoft\AntiMalware FileKey1=%AppData%\Ad-Aware Antivirus\Logs|*|RECURSE FileKey2=%ProgramData%\Ad-Aware Antivirus\Logs|*|RECURSE FileKey3=%ProgramData%\Lavasoft\AntiMalware\Events|*|RECURSE FileKey4=%ProgramData%\Lavasoft\AntiMalware\History|*|RECURSE FileKey5=%ProgramData%\Lavasoft\AntiMalware\Logs|*|RECURSE Tags=ccapps ID=Ad-Aware Antivirus * Author=Winapp2.ini Project [Ad Fundum *] DetectFile=%UserProfile%\AppData\LocalLow\Oldbut Gold\Ad Fundum FileKey1=%UserProfile%\AppData\LocalLow\Oldbut Gold\Ad Fundum|*.log Tags=ccapps ID=Ad Fundum * Author=Winapp2.ini Project [Adaptec's Audio CD *] Detect=HKCU\Software\Adaptec RegKey1=HKCU\Software\Adaptec\AUDIO_CD_INFO Tags=ccutil ID=Adaptec's Audio CD * Author=Winapp2.ini Project [Adaware Privacy *] DetectFile=%AppData%\Adaware\Adaware Privacy FileKey1=%AppData%\Adaware\Adaware Privacy|dcilog.txt FileKey2=%ProgramData%\Adaware\Adaware Privacy|*.log|RECURSE Tags=ccutil ID=Adaware Privacy * Author=Winapp2.ini Project [Adaware Web Companion *] DetectFile=%AppData%\Lavasoft\Web Companion FileKey1=%AppData%\Lavasoft\Web Companion|*log.txt FileKey2=%ProgramData%\Lavasoft\Web Companion\Logs|*|RECURSE FileKey3=%ProgramData%\Lavasoft\Web Companion\Options|Statistics.txt Tags=ccapps ID=Adaware Web Companion * Author=Winapp2.ini Project [Add-in Express *] DetectFile1=%AppData%\Add-in Express DetectFile2=%UserProfile%\Documents\Add-in Express FileKey1=%AppData%\Add-in Express|*.log|RECURSE FileKey2=%UserProfile%\Documents\Add-in Express|*.log|RECURSE Tags=ccapps ID=Add-in Express * Author=Winapp2.ini Project [AdFender *] DetectFile=%LocalAppData%\AdFender FileKey1=%LocalAppData%\AdFender\Log|*.log Tags=ccinternet ID=AdFender * Author=Winapp2.ini Project [Adobe *] Detect=HKCU\Software\Adobe FileKey1=%AppData%\Adobe|*.log|RECURSE FileKey2=%AppData%\Adobe\Common\* Cache*|*|RECURSE FileKey3=%AppData%\Adobe\Common\Peak Files|*|RECURSE FileKey4=%LocalAppData%\Adobe|*.log|RECURSE FileKey5=%UserProfile%\Documents\Adobe|*.log|RECURSE Tags=ccmedia ID=Adobe * Author=Winapp2.ini Project [Adobe Acrobat *] Detect=HKCU\Software\Adobe\Adobe Acrobat FileKey1=%AppData%\Adobe\Acrobat\DC\Security\CRLCache|*|RECURSE FileKey2=%AppData%\Adobe\OOBE|dlcanalytics.db FileKey3=%LocalAppData%|oobelibMkey.log FileKey4=%LocalAppData%\Adobe\Acrobat|*.idx|RECURSE FileKey5=%LocalAppData%\Adobe\Acrobat\*DC\Cache|*.lst FileKey6=%LocalAppData%\Adobe\Acrobat\11.0|UserCache.bin FileKey7=%LocalAppData%\Adobe\Acrobat\11.0\Cache|*|RECURSE FileKey8=%LocalAppData%\Adobe\Acrobat\DC|*.lst;Exchange-ProMessages;IconCacheAcro*.dat;SharedDataEvents;UserCache*.bin FileKey9=%LocalAppData%\Adobe\Acrobat\DC\ProtectedView|*.lst;UserCache*.bin FileKey10=%LocalAppData%\Adobe\Acrobat\DC\ToolsSearchCacheAcro|*|RECURSE FileKey11=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*|RECURSE FileKey12=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cookie|*|RECURSE FileKey13=%LocalAppData%\Adobe\ARM|*|RECURSE FileKey14=%LocalAppData%\Adobe\Color|*.lst FileKey15=%LocalAppData%\Adobe\TypeSupport|*.lst FileKey16=%ProgramData%\Adobe\ARM|*|RECURSE FileKey17=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC|*-journal;Exchange-ProMessages FileKey18=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\Cache|*|RECURSE FileKey19=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\Cookie|*-journal FileKey20=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\DesktopNotification\NotificationsDB|notificationsDB FileKey21=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\Eureka\AcroCoreSync\Adobe\CoreSync\EntitySync|*.db-shm;*.db-wal FileKey22=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\Eureka\AcroCoreSync\CreativeCloud\CoreSync|*.log FileKey23=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Acrobat\Synchronizer|*-log.txt FileKey24=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons|*|RECURSE FileKey25=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Search|*|RECURSE FileKey26=%UserProfile%\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache|*|RECURSE FileKey27=%UserProfile%\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cookie|*-journal RegKey1=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFiles RegKey2=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFolders RegKey3=HKCU\Software\Adobe\Adobe Acrobat\2015\AVGeneral\cRecentFiles RegKey4=HKCU\Software\Adobe\Adobe Acrobat\2015\AVGeneral\cRecentFolders RegKey5=HKCU\Software\Adobe\Adobe Acrobat\2017\AVGeneral\cRecentFiles RegKey6=HKCU\Software\Adobe\Adobe Acrobat\2017\AVGeneral\cRecentFolders RegKey7=HKCU\Software\Adobe\Adobe Acrobat\2020\AVGeneral\cRecentFiles RegKey8=HKCU\Software\Adobe\Adobe Acrobat\2020\AVGeneral\cRecentFolders RegKey9=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConnector\cIconCache RegKey10=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionFromPDF\cSettings RegKey11=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionToPDF\cSettings RegKey12=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumAcrobatLaunches RegKey13=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumOfAVDocsOpened RegKey14=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|uLastAppLaunchTimeStamp RegKey15=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cDockables RegKey16=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles RegKey17=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFolders RegKey18=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentToolsList RegKey19=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cToolbars RegKey20=HKCU\Software\Adobe\Adobe Acrobat\DC\CompoundDocs\cStoredBinder RegKey21=HKCU\Software\Adobe\Adobe Acrobat\DC\RememberedViews\cNoCategoryFiles RegKey22=HKCU\Software\Adobe\Adobe Acrobat\DC\SessionManagement|uLastAppExitTimeStamp RegKey23=HKCU\Software\Adobe\Adobe Acrobat\DC\ShareIdentity RegKey24=HKCU\Software\Adobe\Adobe ARM\1.0\ARM|tLastT_Reader RegKey25=HKCU\Software\Adobe\Adobe Customization Wizard 8\Recent File List RegKey26=HKCU\Software\Adobe\Adobe Customization Wizard 9\Recent File List RegKey27=HKCU\Software\Adobe\Adobe Customization Wizard X\Recent File List RegKey28=HKCU\Software\Adobe\Adobe Customization Wizard XI\Recent File List RegKey29=HKCU\Software\Adobe\Adobe Synchronizer\DC Tags=ccapps ID=Adobe Acrobat * Author=Winapp2.ini Project [Adobe Acrobat Distiller *] Detect=HKCU\Software\Adobe\Acrobat Distiller FileKey1=%AppData%\Adobe\Acrobat\Distiller*|*.log FileKey2=%AppData%\Adobe\Acrobat\Distiller*\Cache|* FileKey3=%LocalAppData%\Adobe\Acrobat\Distiller*\Cache|* RegKey1=HKCU\Software\Adobe\Acrobat Distiller\PrinterJobControl Tags=ccapps ID=Adobe Acrobat Distiller * Author=Winapp2.ini Project [Adobe Acrobat Reader *] Detect1=HKCU\Software\Adobe\Acrobat Reader Detect2=HKCU\Software\Adobe\Backup\Preferences\brr1\Software\Adobe\Acrobat Reader Detect3=HKCU\Software\Adobe\Backup\Preferences\brr2\Software\Adobe\Acrobat Reader Detect4=HKLM\Software\Adobe\Acrobat Reader DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga FileKey1=%AppData%\Adobe\Acrobat\*.0|*.lst;UserCache.bin FileKey2=%AppData%\Adobe\Acrobat\6.0\AcroForm|MRUFormsList FileKey3=%AppData%\Adobe\Acrobat\6.0\Collab|OfflineDocs;Reviews FileKey4=%AppData%\Adobe\Acrobat\DC\Security\CRLCache|*|RECURSE FileKey5=%CommonProgramFiles%\Adobe\Color|*.lst FileKey6=%CommonProgramFiles%\Adobe\TypeSpt|*.lst FileKey7=%LocalAppData%\Adobe\Acrobat\*.0\Cache|*.lst FileKey8=%LocalAppData%\Adobe\Acrobat\DC|DCAPIDiscoveryCacheReader;IconCacheRdr*.dat;SharedDataEvents;UserCache*.bin FileKey9=%LocalAppData%\Adobe\Acrobat\DC\Cache|*.lst FileKey10=%LocalAppData%\Adobe\Acrobat\DC\eurekareviewdocumentsrdr|*|RECURSE FileKey11=%LocalAppData%\Adobe\Acrobat\DC\thumbcache\reader\files|* FileKey12=%LocalAppData%\Adobe\Acrobat\DC\ToolsSearchCacheRdr|*|RECURSE FileKey13=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*|RECURSE FileKey14=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cookie|* FileKey15=%LocalAppData%\Adobe\ARM|*|RECURSE FileKey16=%LocalAppData%\Adobe\Color|*.lst FileKey17=%LocalAppData%\Adobe\TypeSpt|*.lst FileKey18=%LocalAppData%\Adobe\TypeSupport|*.lst FileKey19=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\AC|*|RECURSE FileKey20=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\Settings|*.log* FileKey21=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\SystemAppData\Helium|*.log* FileKey22=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\TempState|*|REMOVESELF FileKey23=%LocalLowAppData%\Adobe\Acrobat\DC\Search|* FileKey24=%ProgramData%\Adobe\ARM|*|RECURSE FileKey25=%ProgramFiles%\Adobe\Reader 9.0\Reader\plug_ins3d\prc|*.lst FileKey26=%ProgramFiles%\Adobe\Reader 9.0\Resource\Font|*.lst FileKey27=%SystemDrive%\Documents and Settings\Default User\Local Settings\Application Data\Adobe|*.log|RECURSE FileKey28=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC|ReaderMessages FileKey29=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons|*|RECURSE FileKey30=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Reader\DesktopNotification\NotificationsDB|notificationsDB FileKey31=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Reader\Eureka\AcroCoreSync\Adobe\CoreSync\EntitySync|*.db-shm;*.db-wal FileKey32=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Reader\Eureka\AcroCoreSync\CreativeCloud\CoreSync|*.log FileKey33=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Reader\Synchronizer|*log.txt FileKey34=%UserProfile%\AppData\LocalLow\Adobe\Acrobat\DC\Reader\Synchronizer\syncuploaddir|*.pdf FileKey35=%UserProfile%\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache|*|RECURSE FileKey36=%UserProfile%\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cookie|*-journal RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\Collab\cWorkflowFolders RegKey2=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionFromPDF RegKey3=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionToPDF RegKey4=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cDockables RegKey5=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFolders RegKey6=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cToolbars RegKey7=HKCU\Software\Adobe\Acrobat Reader\11.0\RememberedViews\cNoCategoryFiles RegKey8=HKCU\Software\Adobe\Acrobat Reader\2015\AVGeneral\cRecentFiles RegKey9=HKCU\Software\Adobe\Acrobat Reader\2015\AVGeneral\cRecentFolders RegKey10=HKCU\Software\Adobe\Acrobat Reader\2017\AVGeneral\cRecentFiles RegKey11=HKCU\Software\Adobe\Acrobat Reader\2017\AVGeneral\cRecentFolders RegKey12=HKCU\Software\Adobe\Acrobat Reader\2020\AVGeneral\cRecentFiles RegKey13=HKCU\Software\Adobe\Acrobat Reader\2020\AVGeneral\cRecentFolders RegKey14=HKCU\Software\Adobe\Acrobat Reader\DC\AVConnector\cIconCache RegKey15=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionFromPDF RegKey16=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionToPDF RegKey17=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral|iNumOfAVDocsOpened RegKey18=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral|iNumReaderLaunches RegKey19=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cDockables RegKey20=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentToolsList RegKey21=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cToolbars RegKey22=HKCU\Software\Adobe\Acrobat Reader\DC\RememberedViews\cNoCategoryFiles RegKey23=HKCU\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent RegKey24=HKCU\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsPrev RegKey25=HKCU\Software\Adobe\Acrobat Reader\DC\ShareIdentity RegKey26=HKCU\Software\Adobe\Adobe ARM\1.0\ARM|tLastT_Reader RegKey27=HKCU\Software\Adobe\Adobe Synchronizer\11.0 RegKey28=HKCU\Software\Adobe\Adobe Synchronizer\DC RegKey29=HKCU\Software\Adobe\Backup\Preferences\brr1\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles RegKey30=HKCU\Software\Adobe\Backup\Preferences\brr2\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles RegKey31=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\PersistedStorageItemTable\MostRecentlyUsed Tags=ccapps ID=Adobe Acrobat Reader * Author=Winapp2.ini Project [Adobe After Effects *] DetectFile=%AppData%\Adobe\After Effects FileKey1=%AppData%\Adobe\After Effects|*.log FileKey2=%AppData%\Adobe\After Effects\*|*.log FileKey3=%AppData%\Adobe\After Effects\*\Logs|* FileKey4=%AppData%\Adobe\Common\PTX|* FileKey5=%AppData%\Adobe\DVAAudioFilterScan\*\Logs|* FileKey6=%AppData%\Adobe\dynamiclinkmanager\*\Logs|* FileKey7=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey8=%AppData%\Adobe\dynamiclinkmediaserver\*\Logs|* FileKey9=%AppData%\Adobe\ExtensibilityLibrary\Log|* FileKey10=%AppData%\Adobe\GPUSniffer\*\Logs|* FileKey11=%AppData%\Adobe\Lumetri\*\logs|*|RECURSE FileKey12=%AppData%\Adobe\Team Projects Local Hub\*\Logs|* Tags=ccmedia ID=Adobe After Effects * Author=Winapp2.ini Project [Adobe Air *] DetectFile=%LocalAppData%\Adobe\Air FileKey1=%WinDir%\System32\config\systemprofile\AppData\Local\Adobe\AIR\logs|* FileKey2=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Adobe\AIR\logs|* Tags=ccutil ID=Adobe Air * Author=Winapp2.ini Project [Adobe Audition *] DetectFile=%AppData%\Adobe\Audition FileKey1=%AppData%\Adobe\Audition|*.log FileKey2=%AppData%\Adobe\Audition\*|*cache.xml FileKey3=%AppData%\Adobe\Audition\*\logs|* FileKey4=%AppData%\Adobe\DVAAudioFilterScan\*\logs|* FileKey5=%AppData%\Adobe\dynamiclinkmanager\*\logs|* FileKey6=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey7=%AppData%\Adobe\dynamiclinkmediaserver\*\logs|* Tags=ccmedia ID=Adobe Audition * Author=Winapp2.ini Project [Adobe Bridge *] DetectFile=%AppData%\Adobe\Bridge* FileKey1=%AppData%\Adobe\Bridge*|*.log FileKey2=%AppData%\Adobe\Bridge*\*\Logs|* FileKey3=%AppData%\Adobe\Bridge*\CT Font Cache|* FileKey4=%AppData%\Adobe\Bridge*\Logs|* Tags=ccmedia ID=Adobe Bridge * Author=Winapp2.ini Project [Adobe Camera Raw *] DetectFile=%AppData%\Adobe\CameraRaw FileKey1=%AppData%\Adobe\CameraRaw\Logs|* FileKey2=%LocalAppData%\Adobe\CameraRaw\Cache*|* Tags=ccmedia ID=Adobe Camera Raw * Author=Winapp2.ini Project [Adobe Character Animator *] DetectFile=%AppData%\Adobe\Character Animator FileKey1=%AppData%\Adobe\Character Animator\*\logs|* FileKey2=%AppData%\Adobe\dynamiclinkmanager\*\logs|* FileKey3=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey4=%AppData%\Adobe\dynamiclinkmediaserver\*\logs|* Tags=ccmedia ID=Adobe Character Animator * Author=Winapp2.ini Project [Adobe Creative Cloud *] DetectFile1=%AppData%\com.adobe.dunamis DetectFile2=%CommonProgramFiles%\Adobe\Creative Cloud Libraries DetectFile3=%ProgramFiles%\Adobe\Adobe Creative Cloud Experience FileKey1=%AppData%\Adobe\Adobe Media Encoder\*\logs|*|RECURSE FileKey2=%AppData%\Adobe\CCX Welcome\*\clientLogs|* FileKey3=%AppData%\Adobe\Color|*.lst FileKey4=%AppData%\Adobe\CRLogs|*|RECURSE FileKey5=%AppData%\Adobe\dynamiclinkmanager\*\logs|* FileKey6=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey7=%AppData%\Adobe\dynamiclinkmediaserver\*\logs|* FileKey8=%AppData%\Adobe\ExtensibilityLibrary\Log|* FileKey9=%AppData%\Adobe\Extension Manager CC\Log|*|RECURSE FileKey10=%AppData%\Adobe\Extension Manager CC\Temp|*|RECURSE FileKey11=%AppData%\Adobe\GPUSniffer\*\logs|* FileKey12=%AppData%\Adobe\GUDE|*.log FileKey13=%AppData%\Adobe\LogTransport2\Logs|*|RECURSE FileKey14=%AppData%\Adobe\LogTransport2CC\Logs|*|RECURSE FileKey15=%AppData%\Adobe\Lumetri\*\logs|*|RECURSE FileKey16=%AppData%\Adobe\Team Projects Local Hub\*\logs|* FileKey17=%AppData%\com.adobe.dunamis|*|REMOVESELF FileKey18=%CommonProgramFiles%\Adobe\Creative Cloud Libraries|*.log|RECURSE FileKey19=%CommonProgramFiles%\Adobe\Installers|*.log FileKey20=%ProgramData%\Adobe\UPI\Log|* FileKey21=%ProgramFiles%\Adobe\Adobe Creative Cloud Experience\js\node_modules\table-parser\test\output|*.log FileKey22=%UserProfile%\AppData\LocalLow\Adobe\CRLogs\*logs|* FileKey23=%UserProfile%\AppData\LocalLow\Adobe\CRLogs\AdobeCRCommon\Logs|* FileKey24=%UserProfile%\AppData\LocalLow\Adobe\CRLogs\dumps|* FileKey25=%UserProfile%\Documents\Adobe\Adobe Media Encoder\*|*Log.txt;Recent Directories FileKey26=%UserProfile%\Documents\Adobe\Adobe Media Encoder\*\logs|*|RECURSE RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU Tags=ccmedia ID=Adobe Creative Cloud * Author=Winapp2.ini Project [Adobe Dreamweaver *] Detect=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver RegKey1=HKCU\Software\Adobe\Dreamweaver CS6\Recent File List RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver\FileList Tags=ccmedia ID=Adobe Dreamweaver * Author=Winapp2.ini Project [Adobe Elements Organizer *] Detect=HKCU\Software\Adobe\Elements Organizer FileKey1=%AppData%\Adobe\Elements Organizer\*\Organizer|*.txt;status.dat FileKey2=%ProgramData%|StreamingMediaTechnologyLog.txt FileKey3=%ProgramData%\Adobe\Elements Organizer\Catalogs\My Catalog|*.cache FileKey4=%ProgramData%\Adobe\Elements Organizer\Catalogs\My Catalog\FaceAnalysis|*.cache FileKey5=%ProgramData%\Adobe\Elements Organizer\Catalogs\My Catalog\WaldoData|*.cache FileKey6=%ProgramData%\Adobe\Elements Organizer\Catalogs\My Catalog\Watch Folder|*.txt;*.xml RegKey1=HKCU\Software\Adobe\Elements Organizer\11.0\CurrentMediaFilePath RegKey2=HKCU\Software\Adobe\Elements Organizer\12.0\CurrentMediaFilePath RegKey3=HKCU\Software\Adobe\Elements Organizer\13.0\CurrentMediaFilePath RegKey4=HKCU\Software\Adobe\Elements Organizer\14.0\CurrentMediaFilePath RegKey5=HKCU\Software\Adobe\Elements Organizer\15.0\CurrentMediaFilePath RegKey6=HKCU\Software\Adobe\Elements Organizer\16.0\CurrentMediaFilePath RegKey7=HKCU\Software\Adobe\Elements Organizer\17.0\CurrentMediaFilePath Tags=ccmedia ID=Adobe Elements Organizer * Author=Winapp2.ini Project [Adobe Express Photos *] DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\LocalState\Dunamis\Logs\Adobe\com.adobe.dunamis|* FileKey3=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\Settings|*.log* FileKey4=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\TempState|*|REMOVESELF Tags=ccmedia ID=Adobe Express Photos * Author=Winapp2.ini Project [Adobe Flash Player *] DetectFile1=%AppData%\Adobe\Flash Player DetectFile2=%WinDir%\System32\Macromed\Flash DetectFile3=%WinDir%\SysWOW64\Macromed\Flash FileKey1=%AppData%\Adobe\Flash Player\*Cache|*|REMOVESELF FileKey2=%AppData%\Macromedia\Flash Player|*|REMOVESELF FileKey3=%WinDir%\System32\Macromed\Flash|*Install*.log FileKey4=%WinDir%\System32\Macromed\Temp|* FileKey5=%WinDir%\SysWOW64\Macromed\Flash|*Install*.log FileKey6=%WinDir%\SysWOW64\Macromed\Temp|* RegKey1=HKCU\Software\Macromedia\FlashPlayer|RecentMovie1 RegKey2=HKCU\Software\Macromedia\FlashPlayer|RecentMovie2 RegKey3=HKCU\Software\Macromedia\FlashPlayer|RecentMovie3 RegKey4=HKCU\Software\Macromedia\FlashPlayer|RecentMovie4 RegKey5=HKCU\Software\Macromedia\FlashPlayer|RecentMovie5 RegKey6=HKCU\Software\Macromedia\FlashPlayer|RecentMovie6 RegKey7=HKCU\Software\Macromedia\FlashPlayer|RecentMovie7 RegKey8=HKCU\Software\Macromedia\FlashPlayer|RecentMovie8 RegKey9=HKCU\Software\Macromedia\FlashPlayer|RecentMovie9 Tags=ccmedia ID=Adobe Flash Player * Author=Winapp2.ini Project [Adobe Fresco *] DetectFile=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e FileKey1=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalCache\CRLogs|* FileKey3=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey9=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey29=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey52=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey54=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Stability|*|REMOVESELF FileKey63=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey67=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\Settings|*.log* FileKey68=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\Adobe.Fresco_pc75e8sa7ep4e\TempState|*|REMOVESELF Tags=ccmedia ID=Adobe Fresco * Author=Winapp2.ini Project [Adobe Illustrator *] DetectFile=%AppData%\Adobe\Adobe Illustrator * FileKey1=%AppData%\Adobe\GUDE|*.log FileKey2=%AppData%\Adobe\Logs\Adobe Illustrator\*\Adobe Illustrator|*|RECURSE Tags=ccmedia ID=Adobe Illustrator * Author=Winapp2.ini Project [Adobe InCopy *] DetectFile=%LocalAppData%\Adobe\InCopy FileKey1=%LocalAppData%\Adobe\InCopy\Version *|AdobeWLCMCache.dat FileKey2=%LocalAppData%\Adobe\InCopy\Version *\*\Caches|*|RECURSE Tags=ccmedia ID=Adobe InCopy * Author=Winapp2.ini Project [Adobe InDesign *] DetectFile=%AppData%\Adobe\InDesign FileKey1=%AppData%\Adobe\InDesign*\Logs|* Tags=ccmedia ID=Adobe InDesign * Author=Winapp2.ini Project [Adobe Lightroom *] DetectFile=%AppData%\Adobe\Lightroom FileKey1=%AppData%\Adobe\Lightroom|*.log RegKey1=HKCU\Software\Adobe Lightroom\Lightroom Classic\Recent File List Tags=ccmedia ID=Adobe Lightroom * Author=Winapp2.ini Project [Adobe Media Encoder *] DetectFile=%AppData%\Adobe\Media Encoder FileKey1=%AppData%\Adobe\Common\PTX|* FileKey2=%AppData%\Adobe\DVAAudioFilterScan\*\logs|* FileKey3=%AppData%\Adobe\dynamiclinkmanager\*\logs|* FileKey4=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey5=%AppData%\Adobe\dynamiclinkmediaserver\*\logs|* FileKey6=%AppData%\Adobe\ExtensibilityLibrary\Log|* FileKey7=%AppData%\Adobe\GPUSniffer\*\logs|* FileKey8=%AppData%\Adobe\Media Encoder|*.log FileKey9=%AppData%\Adobe\Media Encoder\*|*.log FileKey10=%AppData%\Adobe\Media Encoder\*\logs|* FileKey11=%AppData%\Adobe\Team Projects Local Hub\*\logs|* Tags=ccmedia ID=Adobe Media Encoder * Author=Winapp2.ini Project [Adobe Photoshop *] DetectFile=%AppData%\Adobe\Adobe Photoshop* FileKey1=%AppData%\Adobe\Adobe Photoshop*\*Cache|*|RECURSE FileKey2=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings|PSErrorLog.txt;sniffer-*.txt FileKey3=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\CrashLogs|*|RECURSE FileKey4=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\web-cache-temp|*|RECURSE FileKey5=%AppData%\Adobe\Adobe Photoshop*\Logs|* FileKey6=%AppData%\Adobe\ExtensibilityLibrary\Log|* FileKey7=%AppData%\Adobe\GPUSniffer\*\logs|* FileKey8=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey9=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey10=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey11=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\*Cache*|*|REMOVESELF FileKey12=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\AutoFill*|*|REMOVESELF FileKey13=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Avatars|*|REMOVESELF FileKey14=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\CertificateRevocation|*|REMOVESELF FileKey15=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\CookieReadinessList|*|REMOVESELF FileKey16=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Crash Reports|*|REMOVESELF FileKey17=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Crashpad|*|REMOVESELF FileKey18=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Crowd Deny|*|REMOVESELF FileKey19=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey20=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\*Cache*|*|REMOVESELF FileKey21=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey22=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\blob_storage|*|REMOVESELF FileKey23=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey24=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey25=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey26=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey27=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\coupon_db|*|REMOVESELF FileKey28=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\DataSharing|*|REMOVESELF FileKey29=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\discount*_db|*|REMOVESELF FileKey30=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Download Service|*|REMOVESELF FileKey31=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Extension State|*|REMOVESELF FileKey32=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey33=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\File System|*|REMOVESELF FileKey34=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\GCM Store|*|REMOVESELF FileKey35=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey36=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey37=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey38=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\optimization*|*|REMOVESELF FileKey39=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey40=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey41=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey42=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey43=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Service Worker|*|REMOVESELF FileKey44=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Sessions|*|REMOVESELF FileKey45=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey46=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey47=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey48=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey49=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey50=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Sync Data|*|REMOVESELF FileKey51=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey52=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\Web Applications|*|REMOVESELF FileKey53=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey54=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey55=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey56=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Local Traces|*|REMOVESELF FileKey57=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\MEIPreload|*|REMOVESELF FileKey58=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Optimization*|*|REMOVESELF FileKey59=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\OriginTrials|*|REMOVESELF FileKey60=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\PKIMetadata|*|REMOVESELF FileKey61=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey62=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey63=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Safe Browsing|*|REMOVESELF FileKey64=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\SafetyTips|*|REMOVESELF FileKey65=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\SmartScreen|*|REMOVESELF FileKey66=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey67=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Stability|*|REMOVESELF FileKey68=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\Subresource Filter|*|REMOVESELF FileKey69=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey70=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\WidevineCdm|*|REMOVESELF FileKey71=%AppData%\Adobe\UXP\PluginsStorage\PHSP\26\Shared\EBWebView\ZxcvbnData|*|REMOVESELF FileKey72=%LocalAppData%\Adobe\Color|ACECache11.lst FileKey73=%LocalAppData%\Adobe\TypeSupport|AdobeFnt22.lst Tags=ccmedia ID=Adobe Photoshop * Author=Winapp2.ini Project [Adobe Photoshop Elements *] Detect=HKCU\Software\Adobe\Photoshop Elements FileKey1=%AppData%\Adobe\Photoshop Elements\*\Editor|*.txt FileKey2=%ProgramData%\Adobe\Photoshop Elements\File Agent|WatchFolder.3.cache RegKey1=HKCU\Software\Adobe\Photoshop Elements\11.0\common\settings\Elements MRU RegKey2=HKCU\Software\Adobe\Photoshop Elements\11.0\CurrentMediaFilePath RegKey3=HKCU\Software\Adobe\Photoshop Elements\11.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey4=HKCU\Software\Adobe\Photoshop Elements\12.0\common\settings\Elements MRU RegKey5=HKCU\Software\Adobe\Photoshop Elements\12.0\CurrentMediaFilePath RegKey6=HKCU\Software\Adobe\Photoshop Elements\12.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey7=HKCU\Software\Adobe\Photoshop Elements\13.0\common\settings\Elements MRU RegKey8=HKCU\Software\Adobe\Photoshop Elements\13.0\CurrentMediaFilePath RegKey9=HKCU\Software\Adobe\Photoshop Elements\13.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey10=HKCU\Software\Adobe\Photoshop Elements\14.0\common\settings\Elements MRU RegKey11=HKCU\Software\Adobe\Photoshop Elements\14.0\CurrentMediaFilePath RegKey12=HKCU\Software\Adobe\Photoshop Elements\14.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey13=HKCU\Software\Adobe\Photoshop Elements\15.0\common\settings\Elements MRU RegKey14=HKCU\Software\Adobe\Photoshop Elements\15.0\CurrentMediaFilePath RegKey15=HKCU\Software\Adobe\Photoshop Elements\15.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey16=HKCU\Software\Adobe\Photoshop Elements\16.0\common\settings\Elements MRU RegKey17=HKCU\Software\Adobe\Photoshop Elements\16.0\CurrentMediaFilePath RegKey18=HKCU\Software\Adobe\Photoshop Elements\16.0\VisitedDirs|STARTUPIMAGEDIRECTORY RegKey19=HKCU\Software\Adobe\Photoshop Elements\17.0\common\settings\Elements MRU RegKey20=HKCU\Software\Adobe\Photoshop Elements\17.0\CurrentMediaFilePath RegKey21=HKCU\Software\Adobe\Photoshop Elements\17.0\VisitedDirs|STARTUPIMAGEDIRECTORY Tags=ccmedia ID=Adobe Photoshop Elements * Author=Winapp2.ini Project [Adobe Premiere Elements *] Detect=HKCU\Software\Adobe\Premiere Elements FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB FileKey2=%AppData%\Adobe\Premiere Elements\*\logs|*|RECURSE FileKey3=%UserProfile%\Documents\NewBlueFX\Logs|*.txt RegKey1=HKCU\Software\Adobe\Premiere Elements\11.0\MRUDocuments RegKey2=HKCU\Software\Adobe\Premiere Elements\12.0\MRUDocuments RegKey3=HKCU\Software\Adobe\Premiere Elements\13.0\MRUDocuments RegKey4=HKCU\Software\Adobe\Premiere Elements\14.0\MRUDocuments RegKey5=HKCU\Software\Adobe\Premiere Elements\15.0\MRUDocuments RegKey6=HKCU\Software\Adobe\Premiere Elements\16.0\MRUDocuments RegKey7=HKCU\Software\Adobe\Premiere Elements\17.0\MRUDocuments Tags=ccmedia ID=Adobe Premiere Elements * Author=Winapp2.ini Project [Adobe Premiere Pro *] DetectFile=%AppData%\Adobe\Premiere Pro FileKey1=%AppData%\Adobe\Common\PTX|* FileKey2=%AppData%\Adobe\DVAAudioFilterScan\*\logs|* FileKey3=%AppData%\Adobe\dynamiclinkmanager\*\logs|* FileKey4=%AppData%\Adobe\dynamiclinkmediaserver\*|*.log FileKey5=%AppData%\Adobe\dynamiclinkmediaserver\*\logs|* FileKey6=%AppData%\Adobe\ExtensibilityLibrary\Log|* FileKey7=%AppData%\Adobe\GPUSniffer\*\logs|* FileKey8=%AppData%\Adobe\Lumetri\*\logs|*|RECURSE FileKey9=%AppData%\Adobe\Premiere Pro\*|*.log FileKey10=%AppData%\Adobe\Premiere Pro\*\logs|* FileKey11=%AppData%\Adobe\Premiere Pro\Logs|* FileKey12=%AppData%\Adobe\Team Projects Local Hub\*\logs|* FileKey13=%UserProfile%\Documents\Adobe\Premiere Pro\*|*.log Tags=ccmedia ID=Adobe Premiere Pro * Author=Winapp2.ini Project [Adobe Premiere Rush *] DetectFile=%AppData%\Adobe\Premiere Rush FileKey1=%AppData%\Adobe\Premiere Rush\*|*.log;*cache.xml FileKey2=%AppData%\Adobe\Premiere Rush\*\logs|* Tags=ccmedia ID=Adobe Premiere Rush * Author=Winapp2.ini Project [Adobe XD *] DetectFile=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e FileKey1=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\LocalCache\CRLogs|* FileKey3=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\LocalState|*.log FileKey4=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\Settings|*.log* FileKey5=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Adobe.XD_pc75e8sa7ep4e\TempState|*|REMOVESELF Tags=ccmedia ID=Adobe XD * Author=Winapp2.ini Project [Advanced CSV Converter *] Detect=HKCU\Software\csvconverter RegKey1=HKCU\Software\csvconverter|EXPORTPATH RegKey2=HKCU\Software\csvconverter|LASTEXPORT RegKey3=HKCU\Software\csvconverter|LASTSRC RegKey4=HKCU\Software\csvconverter|SRCPATH Tags=ccutil ID=Advanced CSV Converter * Author=Winapp2.ini Project [Advanced Registry Doctor *] DetectFile=%ProgramFiles%\Advanced Registry Doctor FileKey1=%ProgramFiles%\Advanced Registry Doctor|*.log;*.tmp FileKey2=%ProgramFiles%\Advanced Registry Doctor\Undo|history_*.dat Tags=ccutil ID=Advanced Registry Doctor * Author=Winapp2.ini Project [Advanced Uninstaller *] Detect=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO DetectFile=%ProgramData%\Innovative Solutions\Advanced Uninstaller PRO FileKey1=%LocalAppData%\Innovative Solutions\Advanced Uninstaller PRO|*.dat;.ico FileKey2=%ProgramData%\Innovative Solutions\Advanced Uninstaller PRO\HealthCheck|*|RECURSE RegKey1=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\9\compress|listHistoryText RegKey2=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\10\compress|listHistoryText RegKey3=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\11\compress|listHistoryText RegKey4=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\12\compress|listHistoryText RegKey5=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\13\compress|listHistoryText Tags=ccutil ID=Advanced Uninstaller * Author=Winapp2.ini Project [Advanced XLS Converter *] Detect=HKCU\Software\xlsconverter RegKey1=HKCU\Software\xlsconverter|EXPORTPATH RegKey2=HKCU\Software\xlsconverter|LASTEXPORT RegKey3=HKCU\Software\xlsconverter|LASTSRC RegKey4=HKCU\Software\xlsconverter|OPT RegKey5=HKCU\Software\xlsconverter|RECENTS RegKey6=HKCU\Software\xlsconverter|SRCPATH Tags=ccutil ID=Advanced XLS Converter * Author=Winapp2.ini Project [Adware-Removal-Tool *] DetectFile=%ProgramFiles%\Adware-Removal-Tool FileKey1=%ProgramFiles%\Adware-Removal-Tool\Quarantine|*|RECURSE FileKey2=%ProgramFiles%\Adware-Removal-Tool\Reports|*.txt FileKey3=%ProgramFiles%\Adware-Removal-Tool\scanlogs|*.txt Tags=ccutil ID=Adware-Removal-Tool * Author=Winapp2.ini Project [AdwCleaner *] DetectFile=%SystemDrive%\AdwCleaner FileKey1=%SystemDrive%|AdwCleaner*.txt FileKey2=%SystemDrive%\AdwCleaner\Logs|* RegKey1=HKLM\Software\AdwCleaner|DeleteCount RegKey2=HKLM\Software\AdwCleaner|SearchCount RegKey3=HKLM\Software\Wow6432Node\AdwCleaner|DeleteCount RegKey4=HKLM\Software\Wow6432Node\AdwCleaner|SearchCount Tags=ccutil ID=AdwCleaner * Author=Winapp2.ini Project [Aegisub *] DetectFile=%AppData%\Aegisub FileKey1=%AppData%\Aegisub|mru.json FileKey2=%AppData%\Aegisub\crashdumps|*|REMOVESELF FileKey3=%AppData%\Aegisub\log|*|REMOVESELF FileKey4=%AppData%\Aegisub\recovered|*|REMOVESELF FileKey5=%LocalAppData%\Aegisub\ffms2cache|*|REMOVESELF FileKey6=%ProgramFiles%\Aegisub|*.txt Tags=ccmedia ID=Aegisub * Author=Winapp2.ini Project [Aegisub Backups *] DetectFile=%AppData%\Aegisub FileKey1=%AppData%\Aegisub\autoback|*|REMOVESELF FileKey2=%AppData%\Aegisub\autosave|*|REMOVESELF Tags=ccmedia ID=Aegisub Backups * Author=Winapp2.ini Project [Aero Glass *] DetectFile=%SystemDrive%\AeroGlass FileKey1=%SystemDrive%\AeroGlass|*.dmp;debug.log Tags=ccapps ID=Aero Glass * Author=Winapp2.ini Project [Affinity Designer *] DetectFile=%AppData%\Affinity\Designer FileKey1=%AppData%\Affinity\Designer\*|Log.txt FileKey2=%AppData%\Affinity\Designer\*\CrashReports|*|RECURSE Tags=ccmedia ID=Affinity Designer * Author=Winapp2.ini Project [Age of Conan *] DetectFile=%ProgramFiles%\Funcom\Age of Conan FileKey1=%ProgramFiles%\Funcom\Age of Conan|*.log;*.tmp;CrashLog.txt;MiniDump.dmp FileKey2=%ProgramFiles%\Funcom\Age of Conan\OldLogs|* Tags=ccapps ID=Age of Conan * Author=Winapp2.ini Project [Age of Empires *] Detect1=HKLM\Software\Microsoft\Games\Age of Empires Detect2=HKLM\Software\Microsoft\Microsoft Games\Age of Empires Detect3=HKLM\Software\Microsoft\Microsoft Games\Age of Empires 3 DetectFile=%ProgramFiles%\Steam\steamapps\common\Age Of Empires Online FileKey1=%ProgramFiles%\Microsoft Games\Age of Mythology|*log.txt FileKey2=%ProgramFiles%\Steam\steamapps\common\Age Of Empires Online|PatchLog*.txt FileKey3=%UserProfile%\Documents\My Games\Age of Empires 3|*.txt FileKey4=%UserProfile%\Documents\My Games\Age of Empires 3\RM|*.dmp.txt FileKey5=%UserProfile%\Documents\My Games\Age of Mythology|*.txt RegKey1=HKLM\Software\Microsoft\Games\Age of Empires\1.00|Zone RegKey2=HKLM\Software\Microsoft\Microsoft Games\Age of Empires|Zone RegKey3=HKLM\Software\Microsoft\Microsoft Games\Age of Empires Expansion\1.0|Zone RegKey4=HKLM\Software\Microsoft\Microsoft Games\Age of Empires II: The Conquerors Expansion\1.0|Zone RegKey5=HKLM\Software\Microsoft\Microsoft Games\Age of Empires\2.0|Zone Tags=ccapps ID=Age of Empires * Author=Winapp2.ini Project [Age of Oracles: Tara's Journey *] DetectFile=%ProgramData%\JollyBear\Age of Oracles Taras Journey FileKey1=%ProgramData%\JollyBear\Age of Oracles Taras Journey|error.* Tags=ccapps ID=Age of Oracles: Tara's Journey * Author=Winapp2.ini Project [Age of Wonders II *] DetectFile=%ProgramFiles%\Age of Wonders II FileKey1=%ProgramFiles%\Age of Wonders II\Resource\FX\Spell|*.lnk FileKey2=%ProgramFiles%\Age of Wonders Shadow Magic\Resource\Maps|*.bak FileKey3=%ProgramFiles%\Age of Wonders*|*Log.txt Tags=ccapps ID=Age of Wonders II * Author=Winapp2.ini Project [AHA Dialer *] DetectFile=%ProgramData%\DatacardService FileKey1=%ProgramData%\DatacardService\log|* Tags=ccinternet ID=AHA Dialer * Author=Winapp2.ini Project [AhnLab V3 Lite *] DetectFile=%UserProfile%\AppData\LocalLow\AhnLab\V3Lite FileKey1=%UserProfile%\AppData\LocalLow\AhnLab\V3Lite|*.log Tags=ccutil ID=AhnLab V3 Lite * Author=Winapp2.ini Project [AI Roboform *] Detect=HKCU\Software\Siber Systems FileKey1=%AppData%\RoboForm\_*mirrors_|*|RECURSE FileKey2=%UserProfile%\Documents\My RoboForm Data|cache.rfo;mru.rfo|RECURSE FileKey3=%UserProfile%\Documents\My RoboForm Data\_gsdata_|*.gsl;*.gss;*.log|RECURSE RegKey1=HKCU\Software\Siber Systems|_InstallerDir RegKey2=HKCU\Software\Siber Systems\RoboForm\Query-MRU Tags=ccinternet ID=AI Roboform * Author=Winapp2.ini Project [AIDA64 *] Detect=HKCU\Software\FinalWire\AIDA64 FileKey1=%UserProfile%\Documents\AIDA64 Reports|*|REMOVESELF Tags=ccapps ID=AIDA64 * Author=Winapp2.ini Project [Aignes Website-Watcher *] DetectFile=%AppData%\aignes\WebSite-Watcher FileKey1=%AppData%\aignes\WebSite-Watcher\config\favicons|* FileKey2=%AppData%\aignes\WebSite-Watcher\config\log|* FileKey3=%AppData%\aignes\WebSite-Watcher\config\settings|*.cfg_bak* FileKey4=%AppData%\aignes\WebSite-Watcher\config\temp|* Tags=ccmedia ID=Aignes Website-Watcher * Author=Winapp2.ini Project [Aignes Website-Watcher AutoBackups *] DetectFile=%AppData%\aignes\WebSite-Watcher FileKey1=%AppData%\aignes\WebSite-Watcher\config\autobackup|* Tags=ccmedia ID=Aignes Website-Watcher AutoBackups * Author=Winapp2.ini Project [Aignes Website-Watcher Bookmarks *] DetectFile=%AppData%\aignes\WebSite-Watcher FileKey1=%AppData%\aignes\WebSite-Watcher\bookmarks|* Tags=ccmedia ID=Aignes Website-Watcher Bookmarks * Author=Winapp2.ini Project [Aimersoft *] Detect=HKLM\Software\Aimersoft FileKey1=%ProgramData%\Aimersoft\*\*Logs|*|RECURSE FileKey2=%Public%\Documents\Aimersoft|*|REMOVESELF Tags=ccmedia ID=Aimersoft * Author=Winapp2.ini Project [Aimersoft DRM Media Converter *] DetectFile=%ProgramFiles%\Aimersoft\DRM Media Converter FileKey1=%ProgramFiles%\Aimersoft\DRM Media Converter\Log|*|REMOVESELF Tags=ccmedia ID=Aimersoft DRM Media Converter * Author=Winapp2.ini Project [Aimersoft Video Converter *] Detect1=HKLM\Software\Aimersoft\Aimersoft Video Converter Detect2=HKLM\Software\Aimersoft\Aimersoft Video Converter Ultimate FileKey1=%AppData%\Aimersoft Video Converter Ultimate\Temp|* FileKey2=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact|ASHelper*.exe_temp;ProductUpdateLists.xml FileKey3=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\DATADICT|*|RECURSE FileKey4=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\Log|*|RECURSE FileKey5=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\Temp|*|RECURSE FileKey6=%LocalAppData%\Aimersoft\ASHelper|*.exe.tmp FileKey7=%ProgramData%\Aimersoft Video Converter Ultimate|*.dat.bak FileKey8=%ProgramData%\Aimersoft Video Converter Ultimate\Temp*Dir|* FileKey9=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|* FileKey10=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Snapshot|snap*.dat FileKey11=%ProgramFiles%\Aimersoft\Video Converter*\TempThumbDir|*|RECURSE FileKey12=%UserProfile%\Documents\Aimersoft MediaServer\log|*|RECURSE Tags=ccmedia ID=Aimersoft Video Converter * Author=Winapp2.ini Project [Aimersoft Video Editor *] DetectFile=%ProgramFiles%\Aimersoft\Video Editor FileKey1=%ProgramFiles%\Aimersoft\Video Editor\log|*|RECURSE Tags=ccmedia ID=Aimersoft Video Editor * Author=Winapp2.ini Project [AIMP *] DetectFile=%AppData%\AIMP FileKey1=%AppData%\AIMP|*.bak FileKey2=%ProgramFiles%\AIMP\!Backup|*|REMOVESELF FileKey3=%ProgramFiles%\AIMP\Data|*.bak|RECURSE Tags=ccmedia ID=AIMP * Author=Winapp2.ini Project [AirBuccaneers *] Detect=HKCU\Software\Valve\Steam\Apps\223630 FileKey1=%ProgramFiles%\Steam\Steamapps\common\AirBuccaneers\abu_data|output_log.txt FileKey2=%ProgramFiles%\Steam\Steamapps\common\AirBuccaneers\logs|* Tags=ccapps ID=AirBuccaneers * Author=Winapp2.ini Project [AirDC++ *] DetectFile1=%AppData%\AirDC++ DetectFile2=%LocalAppData%\AirDC++ DetectFile3=%ProgramFiles%\AirDC++\Settings FileKey1=%AppData%\AirDC++|Recents.xml FileKey2=%AppData%\AirDC++\FileLists|* FileKey3=%AppData%\AirDC++\Logs|* FileKey4=%LocalAppData%\AirDC++|Recents.xml FileKey5=%LocalAppData%\AirDC++\FileLists|* FileKey6=%LocalAppData%\AirDC++\Logs|* FileKey7=%ProgramFiles%\AirDC++\Logs|* FileKey8=%ProgramFiles%\AirDC++\Settings|Recents.xml FileKey9=%ProgramFiles%\AirDC++\Settings\FileLists|* FileKey10=%ProgramFiles%\AirDC++\Settings\Logs|* Tags=ccinternet ID=AirDC++ * Author=Winapp2.ini Project [AirStrike 3D *] DetectFile=%ProgramFiles%\Blimb Entertainment\AIRSTRIKE3D FileKey1=%ProgramFiles%\Blimb Entertainment\AIRSTRIKE3D|*.log Tags=ccapps ID=AirStrike 3D * Author=Winapp2.ini Project [Aiseesoft Burnova *] DetectFile=%ProgramData%\Aiseesoft Studio\Burnova FileKey1=%UserProfile%\Documents\Log Files|dvdcore*.log Tags=ccapps ID=Aiseesoft Burnova * Author=Winapp2.ini Project [Aiseesoft Media Converter Ultimate *] Detect=HKCU\Software\Aiseesoft Studio\Aiseesoft Media Converter Ultimate FileKey1=%LocalAppData%\Aiseesoft Studio\Aiseesoft Media Converter Ultimate|*.txt RegKey1=HKCU\Software\Aiseesoft Studio\Aiseesoft Media Converter Ultimate\Edit|LastVideoFilePath Tags=ccmedia ID=Aiseesoft Media Converter Ultimate * Author=Winapp2.ini Project [Aiseesoft Screen Recorder *] DetectFile=%ProgramFiles%\Aiseesoft Studio\Aiseesoft Screen Recorder FileKey1=%ProgramFiles%\Aiseesoft Studio\Aiseesoft Screen Recorder|*.mdmp FileKey2=%SystemDrive%\Log Files|Screencast*.log Tags=ccmedia ID=Aiseesoft Screen Recorder * Author=Winapp2.ini Project [Aiseesoft Video Converter Ultimate *] DetectFile=%LocalAppData%\Aiseesoft Studio\Aiseesoft Video Converter Ultimate FileKey1=%LocalAppData%\Aiseesoft Studio\Aiseesoft Video Converter Ultimate|*.log;*log.txt Tags=ccmedia ID=Aiseesoft Video Converter Ultimate * Author=Winapp2.ini Project [Aiseesoft Video Editor *] DetectFile=%LocalAppData%\Aiseesoft Studio\Video Editor FileKey1=%LocalAppData%\Aiseesoft Studio\Video Editor|*.log;*.txt Tags=ccmedia ID=Aiseesoft Video Editor * Author=Winapp2.ini Project [Akamai *] DetectFile=%LocalAppData%\Akamai FileKey1=%LocalAppData%\Akamai\Logs|*.log Tags=ccinternet ID=Akamai * Author=Winapp2.ini Project [AlbumPlayer *] DetectFile=%SystemDrive%\AlbumPlayerData FileKey1=%SystemDrive%\AlbumPlayerData\Cache|*|RECURSE FileKey2=%SystemDrive%\AlbumPlayerData\Logging|*|RECURSE Tags=ccmedia ID=AlbumPlayer * Author=Winapp2.ini Project [Alcea Alwin 6 *] DetectFile=%SystemDrive%\alwin6 FileKey1=%SystemDrive%\alwin6\postgresql\9.0\data\pg_log|* Tags=ccmedia ID=Alcea Alwin 6 * Author=Winapp2.ini Project [Alchemy Mindworks GIF Construction Set *] DetectFile=%AppData%\Alchemy Mindworks\GIF Construction Set Professional* FileKey1=%AppData%\Alchemy Mindworks\GIF Construction Set Professional*|FileMenuHistory.txt FileKey2=%AppData%\Alchemy Mindworks\GIF Construction Set Professional*\temp|* FileKey3=%AppData%\Alchemy Mindworks\Up To Date\images|*.log FileKey4=%AppData%\Alchemy Mindworks\Up To Date\temp|* Tags=ccmedia ID=Alchemy Mindworks GIF Construction Set * Author=Winapp2.ini Project [Alcohol 52% *] Detect=HKCU\Software\Alcohol Soft\Alcohol 52% RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic|Image File Path RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Images RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageName Tags=ccmedia ID=Alcohol 52% * Author=Winapp2.ini Project [Alcohol 120% *] Detect=HKCU\Software\Alcohol Soft\Alcohol 120% FileKey1=%ProgramFiles%\Alcohol Soft\Alcohol 120|alcohol.log RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\Basic\Image Finder|Current Dir RegKey2=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU RegKey3=HKCU\Software\Alcohol Soft\Alcohol 120%\Options\Burning Wizard|ImageFile Tags=ccmedia ID=Alcohol 120% * Author=Winapp2.ini Project [Algorius Net Viewer *] DetectFile=%LocalAppData%\Algorius\Algorius Net Viewer FileKey1=%AppData%\Algorius Software\Algorius Net Viewer*\install|*|REMOVESELF FileKey2=%LocalAppData%\Algorius\Algorius Net Viewer|*.log;Log.db* Tags=ccinternet ID=Algorius Net Viewer * Author=Winapp2.ini Project [Alibaba *] DetectFile=%LocalAppData%\Alibaba\AliSetup FileKey1=%LocalAppData%\Alibaba\AliSetup\*|*.log Tags=ccapps ID=Alibaba * Author=Winapp2.ini Project [Alibaba Trade Manager *] DetectFile=%ProgramFiles%\Trademanager FileKey1=%ProgramFiles%\Trademanager|OneClickEnd.log Tags=ccapps ID=Alibaba Trade Manager * Author=Winapp2.ini Project [Alien Swarm *] DetectFile=%ProgramFiles%\Steam\steamapps\common\alien swarm FileKey1=%ProgramFiles%\Steam\steamapps\common\alien swarm\swarm|tilegen_log.txt Tags=ccapps ID=Alien Swarm * Author=Winapp2.ini Project [Aliens: Colonial Marines *] DetectFile=%UserProfile%\Documents\My Games\Aliens Colonial Marines FileKey1=%UserProfile%\Documents\My Games\Aliens Colonial Marines\PecanGame\Logs|* Tags=ccapps ID=Aliens: Colonial Marines * Author=Winapp2.ini Project [All in One Runtimes *] DetectFile1=%SystemDrive%\AiO-Files DetectFile2=%SystemDrive%\AiOLog.txt FileKey1=%SystemDrive%|AiOLog.txt FileKey2=%SystemDrive%\AiO-Files|*|RECURSE Tags=ccutil ID=All in One Runtimes * Author=Winapp2.ini Project [All Office Converter *] DetectFile=%ProgramFiles%\All Office Converter Platinum FileKey1=%ProgramFiles%\All Office Converter Platinum|Eventlog.txt Tags=ccapps ID=All Office Converter * Author=Winapp2.ini Project [All Zombies Must Die! *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\All Zombies Must Die!_is1 FileKey1=%ProgramFiles%\Doublesix Games\All Zombies Must Die!\Prerequisites|*|REMOVESELF FileKey2=%UserProfile%\Documents\My Games\UnrealEngine3\Bzb2Game\Logs|* Tags=ccapps ID=All Zombies Must Die! * Author=Winapp2.ini Project [AllDup *] DetectFile=%AppData%\AllDup FileKey1=%AppData%\AllDup|*.log Tags=ccutil ID=AllDup * Author=Winapp2.ini Project [AloneWolf Brutal Force *] Detect=HKCU\Software\AloneWolf\BForce RegKey1=HKCU\Software\AloneWolf\BForce|ArcName Tags=ccutil ID=AloneWolf Brutal Force * Author=Winapp2.ini Project [AloneWolf Dos Win Converter *] Detect=HKCU\Software\AloneWolf\DosWinConverter RegKey1=HKCU\Software\AloneWolf\DosWinConverter|Dir Tags=ccutil ID=AloneWolf Dos Win Converter * Author=Winapp2.ini Project [AloneWolf FFRestorer *] Detect=HKCU\Software\AloneWolf\FFRestorer RegKey1=HKCU\Software\AloneWolf\FFRestorer|SaveDir Tags=ccutil ID=AloneWolf FFRestorer * Author=Winapp2.ini Project [AloneWolf File Renamer *] Detect=HKCU\Software\AloneWolf\FileRen RegKey1=HKCU\Software\AloneWolf\FileRen|Dir RegKey2=HKCU\Software\AloneWolf\FileRen|LastExt Tags=ccutil ID=AloneWolf File Renamer * Author=Winapp2.ini Project [AloneWolf Hide Trace *] Detect=HKCU\Software\AloneWolf\HideTrace RegKey1=HKCU\Software\AloneWolf\HideTrace|LogDir RegKey2=HKCU\Software\AloneWolf\HideTrace|PathHt Tags=ccutil ID=AloneWolf Hide Trace * Author=Winapp2.ini Project [AloneWolf HTML Optimizer *] Detect=HKCU\Software\AloneWolf\HTMLOpt RegKey1=HKCU\Software\AloneWolf\HTMLOpt|Dir1 RegKey2=HKCU\Software\AloneWolf\HTMLOpt|Dir2 Tags=ccutil ID=AloneWolf HTML Optimizer * Author=Winapp2.ini Project [AloneWolf Icon Scanner *] Detect=HKCU\Software\AloneWolf\IconScanner RegKey1=HKCU\Software\AloneWolf\IconScanner|SourceFolder Tags=ccutil ID=AloneWolf Icon Scanner * Author=Winapp2.ini Project [AloneWolf Later Remover *] Detect=HKCU\Software\AloneWolf\LRemover RegKey1=HKCU\Software\AloneWolf\LRemover|Path Tags=ccutil ID=AloneWolf Later Remover * Author=Winapp2.ini Project [AloneWolf Registry Search and Delete *] Detect=HKCU\Software\AloneWolf\RSD RegKey1=HKCU\Software\AloneWolf\RSD|LastSearch Tags=ccutil ID=AloneWolf Registry Search and Delete * Author=Winapp2.ini Project [AloneWolf Sign Photo *] Detect=HKCU\Software\AloneWolf\SignPhoto RegKey1=HKCU\Software\AloneWolf\SignPhoto|Dir RegKey2=HKCU\Software\AloneWolf\SignPhoto|Text Tags=ccmedia ID=AloneWolf Sign Photo * Author=Winapp2.ini Project [AloneWolf TestYourSelf *] Detect=HKCU\Software\AloneWolf\TestYourSelf RegKey1=HKCU\Software\AloneWolf\TestYourSelf|QuestionFile Tags=ccapps ID=AloneWolf TestYourSelf * Author=Winapp2.ini Project [AloneWolf Text Replacer *] Detect=HKCU\Software\AloneWolf\TextReplacer RegKey1=HKCU\Software\AloneWolf\TextReplacer|Dir RegKey2=HKCU\Software\AloneWolf\TextReplacer|String1 RegKey3=HKCU\Software\AloneWolf\TextReplacer|String2 Tags=ccutil ID=AloneWolf Text Replacer * Author=Winapp2.ini Project [Alternate File Shredder *] DetectFile=%AppData%\Alternate\FileShredder FileKey1=%AppData%\Alternate\FileShredder|FileShredderLog*.txt Tags=ccutil ID=Alternate File Shredder * Author=Winapp2.ini Project [ALZip *] DetectFile=%AppData%\ESTsoft\ALZip FileKey1=%AppData%\ESTsoft\ALZip|extraction_history.db Tags=ccutil ID=ALZip * Author=Winapp2.ini Project [AM-DeadLink *] DetectFile=%AppData%\aignes\AM-DeadLink FileKey1=%AppData%\aignes\AM-DeadLink|deadlink.log Tags=ccinternet ID=AM-DeadLink * Author=Winapp2.ini Project [Amazing World *] Detect=HKCU\Software\Valve\Steam\Apps\293500 DetectFile=%ProgramFiles%\Steam\SteamApps\common\Amazing World FileKey1=%ProgramFiles%\Steam\SteamApps\common\Amazing World\AmazingWorld_Data|output_log.txt FileKey2=%ProgramFiles%\Steam\SteamApps\common\Amazing World\Cache|*|REMOVESELF Tags=ccapps ID=Amazing World * Author=Winapp2.ini Project [Amazon Cloud Player *] Detect1=HKCR\Amazon.AmazonMP3DownloaderPlugin Detect2=HKCR\Software\Amazon\MP3 Downloader DetectFile=%LocalAppData%\Amazon Cloud Player FileKey1=%LocalAppData%\Amazon Cloud Player\Logs|* FileKey2=%LocalAppData%\Program Files\Amazon\MP3 Downloader|InstallerLog.txt FileKey3=%UserProfile%\Documents\Amazon MP3*\Logs|*|RECURSE Tags=ccutil ID=Amazon Cloud Player * Author=Winapp2.ini Project [Amazon Downloader *] DetectFile=%UserProfile%\Documents\Amazon Downloader Logs FileKey1=%UserProfile%\Documents\Amazon Downloader Logs|*|RECURSE Tags=ccutil ID=Amazon Downloader * Author=Winapp2.ini Project [Amazon Games *] Detect=HKCU\SOFTWARE\Amazon\Amazon Games DetectFile=%LocalAppData%\Amazon Games FileKey1=%AppData%\@amzn\aga-electron-platform\Amazon Games UI\logs|*|REMOVESELF FileKey2=%AppData%\electron-platform\Amazon Games UI\logs|*|REMOVESELF FileKey3=%LocalAppData%\Amazon Games\App|*.log FileKey4=%LocalAppData%\Amazon Games\Data|*.tmp FileKey5=%LocalAppData%\Amazon Games\Data\Dumps|*|RECURSE FileKey6=%LocalAppData%\Amazon Games\Data\Electron|*|REMOVESELF FileKey7=%LocalAppData%\Amazon Games\Data\Logs|*|RECURSE Tags=ccapps ID=Amazon Games * Author=Winapp2.ini Project [Amazon Kindle for PC *] Detect=HKCU\Software\Amazon\Kindle FileKey1=%LocalAppData%\Amazon\Kindle|temp_* FileKey2=%LocalAppData%\Amazon\Kindle\Cache|*|RECURSE FileKey3=%LocalAppData%\Amazon\Kindle\crashdump|* FileKey4=%LocalAppData%\Amazon\Kindle\Logs|*.txt|RECURSE RegKey1=HKCU\Software\Amazon\Kindle\User Settings|last_getitems_date RegKey2=HKCU\Software\Amazon\Kindle\User Settings|last_syncmetadata_date RegKey3=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate0 RegKey4=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate1 RegKey5=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate2 RegKey6=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate3 RegKey7=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate4 RegKey8=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate5 RegKey9=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate6 RegKey10=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate7 RegKey11=HKCU\Software\Amazon\Kindle\User Settings|OpenBook ExcludeKey1=PATH|%LocalAppData%\Amazon\Kindle\Cache\plugins\*\|*.db Tags=ccmedia ID=Amazon Kindle for PC * Author=Winapp2.ini Project [Amazon Music *] Detect=HKCU\Software\Amazon\Amazon Music DetectFile=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0 FileKey1=%LocalAppData%\Amazon Music\Crash Dumps|* FileKey2=%LocalAppData%\Amazon Music\data\App Cache|*-journal;ChromeDWriteFontCache;data_*;f_*;index FileKey3=%LocalAppData%\Amazon Music\data\App Cache\*Cache|*|RECURSE FileKey4=%LocalAppData%\Amazon Music\data\Artwork Cache|*.jpg;*.png|RECURSE FileKey5=%LocalAppData%\Amazon Music\data\Hammer Cache|* FileKey6=%LocalAppData%\Amazon Music\data\S*Cache|* FileKey7=%LocalAppData%\Amazon Music\Logs|* FileKey8=%LocalAppData%\Amazon Music\User Data|*.pma FileKey9=%LocalAppData%\Amazon Music\User Data\Crashpad\Reports|* FileKey10=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\AC|*|RECURSE FileKey11=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\Data\App Cache\*Cache*|RECURSE FileKey12=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\Data\Artwork Cache|*.jpg;*.png|RECURSE FileKey13=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\Data\Hammer Cache|* FileKey14=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\Data\S*Cache|* FileKey15=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\Logs|* FileKey16=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\User Data|*.pma FileKey17=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\LocalCache\Local\Amazon Music\User Data\Crashpad\Reports|* FileKey18=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\Settings|*.log* FileKey19=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\SystemAppData\Helium|*.log* FileKey20=%LocalAppData%\Packages\AmazonMobileLLC.AmazonMusic_kc6t79cpj4tp0\TempState|*|REMOVESELF FileKey21=%UserProfile%\.amu\updates|*.exe FileKey22=%UserProfile%\Documents\Amazon Music Importer\Logs|*|RECURSE Tags=ccmedia ID=Amazon Music * Author=Winapp2.ini Project [Amazon Prime Video *] DetectFile=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j FileKey1=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\AppData|*|RECURSE FileKey3=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalCache|*|RECURSE FileKey4=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey5=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey7=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey9=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey10=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey11=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey12=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey13=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey14=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey15=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey16=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey18=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey19=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey20=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey22=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey25=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey26=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey27=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey28=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey29=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey30=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey31=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey32=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey33=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey34=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey35=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey36=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey37=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey38=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey39=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey40=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey41=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey42=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey43=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey44=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey45=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey46=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey47=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey48=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey49=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey50=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey51=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey52=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey53=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey54=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey55=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey56=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey57=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey58=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey59=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey60=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey61=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey62=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey63=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Stability|*|REMOVESELF FileKey64=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey65=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey66=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey67=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey68=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\LocalState\Logs|*.log FileKey69=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\Settings|*.log* FileKey70=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\SystemAppData\Helium|*.log* FileKey71=%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\TempState|*|REMOVESELF ExcludeKey1=FILE|%LocalAppData%\Packages\AmazonVideo.PrimeVideo_pwbj9vvecjh7j\AC\INetCookies\ESE\|container.dat Tags=ccmedia ID=Amazon Prime Video * Author=Winapp2.ini Project [AMD *] Detect1=HKLM\Software\AMD Detect2=HKLM\Software\ATI Detect3=HKLM\Software\ATI Technologies DetectFile1=%ProgramFiles%\AMD DetectFile2=%ProgramFiles%\ATI Technologies DetectFile3=%ProgramFiles%\RAIDXpert2 FileKey1=%LocalAppData%\AMD Ryzen Master\cache\qmlcache|* FileKey2=%LocalAppData%\AMD\*Cache|*|RECURSE FileKey3=%LocalAppData%\AMD\cn|*.log FileKey4=%LocalAppData%\AMD\Fuel|ClientProxyLog*.* FileKey5=%LocalAppData%\AMD\RadeonSoftware\Cache|* FileKey6=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|*-journal;*.log;*.old;LOG;LOG.old;Network Persistent State;Origin Bound Certs|RECURSE FileKey7=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|QuotaManager*;Visited Links FileKey8=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\*Cache*|*|REMOVESELF FileKey9=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\blob_storage|*|REMOVESELF FileKey10=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\Platform Notifications|*|REMOVESELF FileKey11=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\Service Worker\*Cache*|*|REMOVESELF FileKey12=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\VideoDecodeStats|*|REMOVESELF FileKey13=%LocalAppData%\AMD\RadeonSoftware\vkcache|* FileKey14=%LocalAppData%\AMD\Ryzen Master\cache\qmlcache|* FileKey15=%LocalAppData%\AMD\StoreMI\cache\qmlcache|* FileKey16=%LocalAppData%\ATI\ACE|*.txt FileKey17=%LocalAppData%\Packages\*\AC\*\AMD\DxCache|* FileKey18=%LocalAppData%\Packages\*\AC\AMD\DxCache|* FileKey19=%LocalAppData%\Radeon*\cache\qmlcache|* FileKey20=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default|*-journal;*.log;*.old;LOG;LOG.old;Network Persistent State;Origin Bound Certs|RECURSE FileKey21=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default|QuotaManager*;Visited Links FileKey22=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\*Cache*|*|REMOVESELF FileKey23=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\blob_storage|*|REMOVESELF FileKey24=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\Platform Notifications|*|REMOVESELF FileKey25=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\Service Worker\*Cache*|*|REMOVESELF FileKey26=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\VideoDecodeStats|*|REMOVESELF FileKey27=%LocalAppData%\RadeonSettings\QtWebEngine\Default|*-journal;*.log;*.old;LOG;LOG.old;Network Persistent State;Origin Bound Certs|RECURSE FileKey28=%LocalAppData%\RadeonSettings\QtWebEngine\Default|QuotaManager*;Visited Links FileKey29=%LocalAppData%\RadeonSettings\QtWebEngine\Default\*Cache*|*|REMOVESELF FileKey30=%LocalAppData%\RadeonSettings\QtWebEngine\Default\blob_storage|*|REMOVESELF FileKey31=%LocalAppData%\RadeonSettings\QtWebEngine\Default\Platform Notifications|*|REMOVESELF FileKey32=%LocalAppData%\RadeonSettings\QtWebEngine\Default\Service Worker\*Cache*|*|REMOVESELF FileKey33=%LocalAppData%\RadeonSettings\QtWebEngine\Default\VideoDecodeStats|*|REMOVESELF FileKey34=%LocalAppData%\Setup\cache\qmlcache|* FileKey35=%ProgramData%\AMD AutoUpdate|*.log FileKey36=%ProgramData%\AMD\Fuel|*.txt FileKey37=%ProgramData%\AMD\KDB|*.log FileKey38=%ProgramFiles%\AMD|*.log FileKey39=%ProgramFiles%\AMD\amdkmpfd|*|REMOVESELF FileKey40=%ProgramFiles%\AMD\CIM\Log|*.log;*.txt FileKey41=%ProgramFiles%\AMD\CIM\Reports|*.xml;*.xsl FileKey42=%ProgramFiles%\AMD\OverDrive|*.log FileKey43=%ProgramFiles%\AMD\RyzenMaster|*.rtf FileKey44=%ProgramFiles%\AMD\RyzenMaster\bin|*.bak FileKey45=%ProgramFiles%\AMD\RyzenMaster\logs|* FileKey46=%ProgramFiles%\ATI Technologies|*.log|RECURSE FileKey47=%ProgramFiles%\ATI Technologies|cccutil64.txt FileKey48=%ProgramFiles%\ATI\CIM\Reports|* FileKey49=%ProgramFiles%\RAIDXpert2|*.log FileKey50=%SystemDrive%\AMD|*|REMOVESELF FileKey51=%SystemDrive%\ATI|*|REMOVESELF FileKey52=%UserProfile%|AMDRM_Install.log;AMD_*.log;ChipsetExtraction.log;Device_ID.log FileKey53=%UserProfile%\AppData\LocalLow\AMD\DxCache|* FileKey54=%WinDir%\System32|CCCInstall*.log FileKey55=%WinDir%\System32\config\systemprofile\AppData\Local\AMD\DxCache|* FileKey56=%WinDir%\SysWOW64|CCCInstall*.log Tags=ccutil ID=AMD * Author=Winapp2.ini Project [America's Army 2 *] DetectFile=%ProgramFiles%\USArmy\America's Army 2 FileKey1=%LocalAppData%\AA2DeployClient|debug*.* FileKey2=%ProgramFiles%\USArmy\America's Army 2|*.log|RECURSE Tags=ccapps ID=America's Army 2 * Author=Winapp2.ini Project [AMID EVIL *] DetectFile=%LocalAppData%\AmidEvil FileKey1=%LocalAppData%\AmidEvil\Saved\Logs|* Tags=ccapps ID=AMID EVIL * Author=Winapp2.ini Project [Amnesia: The Dark Descent *] DetectFile=%UserProfile%\Documents\Amnesia FileKey1=%UserProfile%\Documents\Amnesia|*.log|RECURSE Tags=ccapps ID=Amnesia: The Dark Descent * Author=Winapp2.ini Project [AmoyShare AnyEraser *] DetectFile=%LocalAppData%\AnyEraser FileKey1=%LocalAppData%\AnyEraser\logs|* Tags=ccmedia ID=AmoyShare AnyEraser * Author=Winapp2.ini Project [AmoyShare AnyMusic *] DetectFile=%LocalAppData%\AnyMusic FileKey1=%LocalAppData%\AnyMusic\Cache|*.log FileKey2=%LocalAppData%\AnyMusic\Cache|*.pma|RECURSE FileKey3=%LocalAppData%\AnyMusic\Cache\*Cache|*|RECURSE FileKey4=%LocalAppData%\AnyMusic\Cache\Default\*Cache|*|RECURSE FileKey5=%LocalAppData%\AnyMusic\Cache\QtWebEngine\Default\Cache|* FileKey6=%LocalAppData%\AnyMusic\QtWebEngine\Default|*-journal;*.old;LOG;Network Persistent State;Visited Links|RECURSE FileKey7=%LocalAppData%\AnyMusic\QtWebEngine\Default\blob_storage|*|RECURSE FileKey8=%LocalAppData%\AnyMusic\QtWebEngine\Default\GPUCache|* Tags=ccmedia ID=AmoyShare AnyMusic * Author=Winapp2.ini Project [AmoyShare BeeConverter *] DetectFile=%LocalAppData%\BeeConverter FileKey1=%LocalAppData%\BCDownload\Cache|*.log FileKey2=%LocalAppData%\BCDownload\Cache|*.pma|RECURSE FileKey3=%LocalAppData%\BCDownload\Cache\*Cache|*|RECURSE FileKey4=%LocalAppData%\BCDownload\Cache\Default\*Cache|*|RECURSE FileKey5=%LocalAppData%\BeeConverter\.*\cache|*|REMOVESELF FileKey6=%LocalAppData%\BeeConverter\.*\temp|*|REMOVESELF FileKey7=%LocalAppData%\BeeConverter\Cache|*.log FileKey8=%LocalAppData%\BeeConverter\Cache|*.pma|RECURSE FileKey9=%LocalAppData%\BeeConverter\Cache\*Cache|*|RECURSE FileKey10=%LocalAppData%\BeeConverter\Cache\Default\*Cache|*|RECURSE Tags=ccmedia ID=AmoyShare BeeConverter * Author=Winapp2.ini Project [AmoyShare DiReec *] DetectFile=%LocalAppData%\DiReec FileKey1=%LocalAppData%\DiReec\Cache|*.log FileKey2=%LocalAppData%\DiReec\Cache|*.pma|RECURSE FileKey3=%LocalAppData%\DiReec\Cache\*Cache|*|RECURSE FileKey4=%LocalAppData%\DiReec\Cache\Default\*Cache|*|RECURSE Tags=ccmedia ID=AmoyShare DiReec * Author=Winapp2.ini Project [AmoyShare Pixeraser *] DetectFile=%LocalAppData%\Pixeraser FileKey1=%LocalAppData%\Pixeraser\logs|* Tags=ccmedia ID=AmoyShare Pixeraser * Author=Winapp2.ini Project [AmoyShare TuneBer *] DetectFile=%LocalAppData%\TuneBer FileKey1=%LocalAppData%\TuneBer*\Cache|*.log FileKey2=%LocalAppData%\TuneBer*\Cache\*Cache|*|RECURSE FileKey3=%LocalAppData%\TuneBer*\Cache\BrowserMetrics|*.pma FileKey4=%LocalAppData%\TuneBer*\Cache\Default\*Cache|*|RECURSE FileKey5=%LocalAppData%\TuneBer\.*\cache|*|REMOVESELF FileKey6=%LocalAppData%\TuneBer\.*\temp|*|REMOVESELF Tags=ccmedia ID=AmoyShare TuneBer * Author=Winapp2.ini Project [AMP Font Viewer *] Detect=HKCU\Software\AMP Soft\Font Viewer RegKey1=HKCU\Software\AMP Soft\Font Viewer|Default copy folder RegKey2=HKCU\Software\AMP Soft\Font Viewer|Last file operation folder RegKey3=HKCU\Software\AMP Soft\Font Viewer|Not installed tab path Tags=ccutil ID=AMP Font Viewer * Author=Winapp2.ini Project [AMYUNI PDF Converter *] DetectFile=%ProgramData%\Package Cache\3DBECED19CFC2819A7E0BE14463CF18FC8720D91\amyuni_pdfconverter_5_00 FileKey1=%ProgramData%\Package Cache\3DBECED19CFC2819A7E0BE14463CF18FC8720D91\amyuni_pdfconverter_5_00|*.log|RECURSE Tags=ccapps ID=AMYUNI PDF Converter * Author=Winapp2.ini Project [AnalogX PortMapper *] DetectFile=%ProgramFiles%\AnalogX\PortMapper FileKey1=%ProgramFiles%\AnalogX\PortMapper|debug.log Tags=ccutil ID=AnalogX PortMapper * Author=Winapp2.ini Project [And Yet It Moves *] DetectFile=%AppData%\Broken Rules\And Yet It Moves Steam FileKey1=%AppData%\Broken Rules\And Yet It Moves Steam|console.log Tags=ccapps ID=And Yet It Moves * Author=Winapp2.ini Project [Android SDK Tools *] Detect=HKLM\Software\Android SDK Tools FileKey1=%AppData%\Android\android-sdk\temp|*|REMOVESELF FileKey2=%UserProfile%\.android\cache|*|REMOVESELF Tags=ccmedia ID=Android SDK Tools * Author=Winapp2.ini Project [Android Studio *] Detect=HKCU\Software\Android Open Source Project\Emulator FileKey1=%UserProfile%\.AndroidStudio2.3\system\log|*|REMOVESELF FileKey2=%UserProfile%\.AndroidStudio2.3\system\tmp|* FileKey3=%UserProfile%\.gradle|*.log|RECURSE Tags=ccapps ID=Android Studio * Author=Winapp2.ini Project [Anfibia Deskman *] DetectFile=%ProgramData%\DNET* FileKey1=%ProgramData%\DNET*|*.log Tags=ccutil ID=Anfibia Deskman * Author=Winapp2.ini Project [Anim8or *] Detect=HKCU\Software\Silicon Valley Software\Anim8or RegKey1=HKCU\Software\Silicon Valley Software\Anim8or|File1 RegKey2=HKCU\Software\Silicon Valley Software\Anim8or|File2 RegKey3=HKCU\Software\Silicon Valley Software\Anim8or|File3 RegKey4=HKCU\Software\Silicon Valley Software\Anim8or|File4 Tags=ccapps ID=Anim8or * Author=Winapp2.ini Project [Ankama Dofus *] DetectFile=%LocalAppData%\Ankama\Dofus* FileKey1=%LocalAppData%\Ankama\Dofus*\Logs|* Tags=ccapps ID=Ankama Dofus * Author=Winapp2.ini Project [Ankama Wakfu *] DetectFile=%LocalAppData%\Ankama\Wakfu FileKey1=%LocalAppData%\Ankama\Wakfu\Game\logs|* FileKey2=%LocalAppData%\Ankama\Wakfu\Logs|* FileKey3=%LocalAppData%\Ankama\Wakfu\user_data\Game\Logs|* FileKey4=%LocalAppData%\Ankama\Wakfu\user_data\Logs|* Tags=ccapps ID=Ankama Wakfu * Author=Winapp2.ini Project [Anki Backups *] DetectFile=%AppData%\.anki FileKey1=%AppData%\.anki\backups|* Tags=ccapps ID=Anki Backups * Author=Winapp2.ini Project [Annie's Millions *] DetectFile=%AppData%\PoBros\Annies Millions FileKey1=%AppData%\PoBros\Annies Millions|logfile.txt Tags=ccapps ID=Annie's Millions * Author=Winapp2.ini Project [Anno 1404 *] DetectFile=%ProgramFiles%\Anno1404 FileKey1=%ProgramFiles%\Anno1404|AnnoCrash.log FileKey2=%ProgramFiles%\Anno1404\CrashDumps|* Tags=ccapps ID=Anno 1404 * Author=Winapp2.ini Project [ANNO 2070 *] DetectFile=%AppData%\Ubisoft\ANNO 2070 FileKey1=%AppData%\Ubisoft\ANNO 2070\Cache|*|REMOVESELF FileKey2=%AppData%\Ubisoft\ANNO 2070\Logs|*.dmp;*.log|RECURSE Tags=ccapps ID=ANNO 2070 * Author=Winapp2.ini Project [AnnyStudio JPEG Lossless Rotator *] Detect=HKCU\Software\AnnyStudio\JPEGRotator RegKey1=HKCU\Software\AnnyStudio\JPEGRotator\Main|LastFolder Tags=ccmedia ID=AnnyStudio JPEG Lossless Rotator * Author=Winapp2.ini Project [Anonymizer Universal *] DetectFile=%AppData%\Anonymizer\Anonymizer Universal FileKey1=%AppData%\Anonymizer\Anonymizer Universal|*.log Tags=ccinternet ID=Anonymizer Universal * Author=Winapp2.ini Project [Ant Video Downloader *] Detect=HKCU\Software\Ant.com\AVD\Ant Video downloader RegKey1=HKCU\Software\Ant.com\AVD\Ant Video downloader\Settings|TemporaryFilesLocation Tags=ccinternet ID=Ant Video Downloader * Author=Winapp2.ini Project [Anthropic Claude *] DetectFile=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc FileKey1=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc\LocalCache\Roaming\Claude\logs|* FileKey3=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc\Settings|*.log* FileKey4=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Claude_pzs8sxrjxfjjc\TempState|*|REMOVESELF FileKey6=%ProgramData%\Claude\Logs|* Tags=ccapps ID=Anthropic Claude * Author=Winapp2.ini Project [Antichamber *] DetectFile=%ProgramFiles%\Steam\SteamApps\common\Antichamber FileKey1=%ProgramFiles%\Steam\SteamApps\common\Antichamber\UDKGame\Logs|* Tags=ccapps ID=Antichamber * Author=Winapp2.ini Project [AnvSoft Any Audio Converter *] DetectFile=%AppData%\AnvSoft\Any Audio Converter FileKey1=%AppData%\AnvSoft|*.tmp FileKey2=%AppData%\AnvSoft\Any Audio Converter|*.log;histroy_v3.db Tags=ccmedia ID=AnvSoft Any Audio Converter * Author=Winapp2.ini Project [AnvSoft Any DVD Converter *] Detect=HKCU\Software\AnvSoft\Any DVD Converter Professional FileKey1=%AppData%\AnvSoft\Any DVD Converter Professional|*.db;*.log Tags=ccmedia ID=AnvSoft Any DVD Converter * Author=Winapp2.ini Project [AnvSoft Any Video Converter *] Detect=HKCU\Software\AnvSoft\Any Video Converter FileKey1=%AppData%\AnvSoft\Any Video Converter|*.log;history*.db|RECURSE FileKey2=%AppData%\AnvSoft\Any Video Converter\thumbs|*|RECURSE FileKey3=%AppData%\Any Video Converter Professional|*.log;history*.db FileKey4=%AppData%\Any Video Converter\*Cache|*|RECURSE FileKey5=%AppData%\Any Video Converter\logs|*|RECURSE FileKey6=%AppData%\Any Video Converter\Partitions\*\*Cache|*|RECURSE FileKey7=%LocalAppData%\any video converter-updater|*|RECURSE Tags=ccmedia ID=AnvSoft Any Video Converter * Author=Winapp2.ini Project [AnvSoft AVCLabs Photo Enhancer AI *] DetectFile=%AppData%\AVCLabs Photo Enhancer AI FileKey1=%AppData%\AVCLabs Photo Enhancer AI|*.log FileKey2=%AppData%\AVCLabs Photo Enhancer AI\*Cache|*|RECURSE FileKey3=%AppData%\AVCLabs Photo Enhancer AI\logs|* Tags=ccmedia ID=AnvSoft AVCLabs Photo Enhancer AI * Author=Winapp2.ini Project [AnvSoft AVCLabs PhotoPro AI *] DetectFile=%AppData%\AVCLabs PhotoPro AI FileKey1=%AppData%\AVCLabs PhotoPro AI|*.log FileKey2=%AppData%\AVCLabs PhotoPro AI\*Cache|*|RECURSE FileKey3=%AppData%\AVCLabs PhotoPro AI\logs|* Tags=ccmedia ID=AnvSoft AVCLabs PhotoPro AI * Author=Winapp2.ini Project [AnvSoft AVCLabs Video Blur AI *] DetectFile=%AppData%\AVCLabs Video Blur AI FileKey1=%AppData%\AVCLabs Video Blur AI|*.log FileKey2=%AppData%\AVCLabs Video Blur AI\*Cache|*|RECURSE FileKey3=%AppData%\AVCLabs Video Blur AI\logs|* Tags=ccmedia ID=AnvSoft AVCLabs Video Blur AI * Author=Winapp2.ini Project [AnvSoft AVCLabs Video Enhancer AI *] DetectFile=%AppData%\AVCLabs Video Enhancer AI FileKey1=%AppData%\AVCLabs Video Enhancer AI|*.log FileKey2=%AppData%\AVCLabs Video Enhancer AI\*Cache|*|RECURSE FileKey3=%AppData%\AVCLabs Video Enhancer AI\logs|* Tags=ccmedia ID=AnvSoft AVCLabs Video Enhancer AI * Author=Winapp2.ini Project [AnvSoft PDFMate *] DetectFile=%AppData%\AnvsoftPdfTools FileKey1=%AppData%\AnvsoftPdfTools\tmp\log|*|RECURSE FileKey2=%UserProfile%\Documens\Anvsoft\PDF *\tmp|*|REMOVESELF Tags=ccmedia ID=AnvSoft PDFMate * Author=Winapp2.ini Project [AnvSoft Syncios D-Savior *] DetectFile=%ProgramFiles%\Syncios D-Savior FileKey1=%ProgramFiles%\Syncios D-Savior\cache\logs|*|RECURSE Tags=ccmedia ID=AnvSoft Syncios D-Savior * Author=Winapp2.ini Project [AnvSoft Syncios Data Recovery *] DetectFile=%AppData%\Syncios Data Recovery FileKey1=%AppData%\Local\Temp\iTunes Component\iTunesCache\12.11.0.26.64|*|REMOVESELF FileKey2=%AppData%\Syncios Data Recovery|*.log FileKey3=%AppData%\Syncios Data Recovery\*Cache|*|RECURSE FileKey4=%AppData%\Syncios Data Recovery\logs|* Tags=ccmedia ID=AnvSoft Syncios Data Recovery * Author=Winapp2.ini Project [AnvSoft Syncios iOS Eraser Pro *] DetectFile=%AppData%\Syncios iOS Eraser Pro FileKey1=%AppData%\Syncios iOS Eraser Pro|*.log FileKey2=%AppData%\Syncios iOS Eraser Pro\*Cache|*|RECURSE FileKey3=%AppData%\Syncios iOS Eraser Pro\logs|* Tags=ccmedia ID=AnvSoft Syncios iOS Eraser Pro * Author=Winapp2.ini Project [AnvSoft Syncios Location Changer *] DetectFile=%AppData%\Syncios Location Changer FileKey1=%AppData%\Syncios Location Changer|*.log FileKey2=%AppData%\Syncios Location Changer\*Cache|*|RECURSE FileKey3=%AppData%\Syncios Location Changer\logs|* Tags=ccmedia ID=AnvSoft Syncios Location Changer * Author=Winapp2.ini Project [AnvSoft Syncios Mobile Manager *] DetectFile=%AppData%\Syncios Mobile Manager FileKey1=%AppData%\Syncios Mobile Manager|*.log FileKey2=%AppData%\Syncios Mobile Manager\*Cache|*|RECURSE FileKey3=%AppData%\Syncios Mobile Manager\logs|* Tags=ccmedia ID=AnvSoft Syncios Mobile Manager * Author=Winapp2.ini Project [AnvSoft Syncios Passcode Unlocker *] DetectFile=%AppData%\Syncios Passcode Unlocker FileKey1=%AppData%\Syncios Passcode Unlocker|*.log FileKey2=%AppData%\Syncios Passcode Unlocker\*Cache|*|RECURSE FileKey3=%AppData%\Syncios Passcode Unlocker\logs|* Tags=ccmedia ID=AnvSoft Syncios Passcode Unlocker * Author=Winapp2.ini Project [AnvSoft Syncios Toolkit *] DetectFile=%AppData%\Syncios Toolkit FileKey1=%AppData%\Syncios Toolkit|*.log FileKey2=%AppData%\Syncios Toolkit\*Cache|*|RECURSE FileKey3=%AppData%\Syncios Toolkit\logs|* Tags=ccmedia ID=AnvSoft Syncios Toolkit * Author=Winapp2.ini Project [AnvSoft Syncios WhatsApp Transfer *] DetectFile=%AppData%\Syncios WhatsApp Transfer FileKey1=%AppData%\Syncios WhatsApp Transfer|*.log FileKey2=%AppData%\Syncios WhatsApp Transfer\*Cache|*|RECURSE FileKey3=%AppData%\Syncios WhatsApp Transfer\logs|* Tags=ccmedia ID=AnvSoft Syncios WhatsApp Transfer * Author=Winapp2.ini Project [AnvSoft Syncios YouTube Video Downloader *] DetectFile=%AppData%\Syncios YouTube Video Downloader FileKey1=%AppData%\Syncios YouTube Video Downloader|*.log FileKey2=%AppData%\Syncios YouTube Video Downloader\*Cache|*|RECURSE FileKey3=%AppData%\Syncios YouTube Video Downloader\logs|* Tags=ccmedia ID=AnvSoft Syncios YouTube Video Downloader * Author=Winapp2.ini Project [Any.do *] DetectFile=%AppData%\@anydo FileKey1=%AppData%\@anydo\electron-app|*.old;LOG|RECURSE FileKey2=%AppData%\@anydo\electron-app\*Cache|*|RECURSE FileKey3=%LocalAppData%\@anydoelectron-app-updater|* Tags=ccapps ID=Any.do * Author=Winapp2.ini Project [AnyBurn *] DetectFile=%AppData%\AnyBurn FileKey1=%AppData%\AnyBurn\Upgrade|anyburn_setup.exe Tags=ccapps ID=AnyBurn * Author=Winapp2.ini Project [AnyDesk *] DetectFile=%AppData%\AnyDesk FileKey1=%AppData%\AnyDesk|ad.trace;connection_trace.txt Tags=ccutil ID=AnyDesk * Author=Winapp2.ini Project [AnyMP4 DVD Ripper *] DetectFile=%LocalAppData%\AnyMP4 Studio\AnyMP4 DVD Ripper FileKey1=%LocalAppData%\AnyMP4 Studio\AnyMP4 DVD Ripper|*.log;*log.txt Tags=ccmedia ID=AnyMP4 DVD Ripper * Author=Winapp2.ini Project [AnywaySoft Any VPN *] DetectFile=%LocalAppData%\Packages\AnywaySoftInc.AnyVPN_0qkrc2qacwvfm FileKey1=%LocalAppData%\Packages\AnywaySoftInc.AnyVPN_0qkrc2qacwvfm\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AnywaySoftInc.AnyVPN_0qkrc2qacwvfm\Settings|*.log* FileKey3=%LocalAppData%\Packages\AnywaySoftInc.AnyVPN_0qkrc2qacwvfm\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\AnywaySoftInc.AnyVPN_0qkrc2qacwvfm\TempState|*|REMOVESELF Tags=ccinternet ID=AnywaySoft Any VPN * Author=Winapp2.ini Project [AOL Shield Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|*Web Data FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=AOL Shield Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [AOL Shield Autoplay Preferences *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=AOL Shield Autoplay Preferences * Author=Winapp2.ini Project [AOL Shield Bookmark Backups *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|Bookmarks.bak Tags=ccapps ID=AOL Shield Bookmark Backups * Author=Winapp2.ini Project [AOL Shield Bookmark Favicons *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|favicons* Tags=ccapps ID=AOL Shield Bookmark Favicons * Author=Winapp2.ini Project [AOL Shield Caches *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\AOL\AOL Shield\User Data|Module Info Cache FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\AOL\AOL Shield\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\AOL\AOL Shield\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\AOL\AOL Shield\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\AOL\AOL Shield\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\AOL\AOL Shield\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\AOL\AOL Shield\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\AOL\AOL Shield\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\AOL\AOL Shield\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\AOL\AOL Shield\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\AOL\AOL Shield\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\AOL\AOL Shield\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\AOL\AOL Shield\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\AOL\AOL Shield\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\AOL\AOL Shield\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\AOL\AOL Shield\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=AOL Shield Caches * Author=Winapp2.ini Project [AOL Shield Default App Handlers *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|PreferredApps Tags=ccapps ID=AOL Shield Default App Handlers * Author=Winapp2.ini Project [AOL Shield Download History *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=AOL Shield Download History * Author=Winapp2.ini Project [AOL Shield DRM Data *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=AOL Shield DRM Data * Author=Winapp2.ini Project [AOL Shield Extension Cookies *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|Extension Cookies Tags=ccapps ID=AOL Shield Extension Cookies * Author=Winapp2.ini Project [AOL Shield Pinned Tabs *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data RegKey1=HKCU\AOL\AOL Shield\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=AOL Shield Pinned Tabs * Author=Winapp2.ini Project [AOL Shield Privacy Sandbox *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data|*first_party_sets* FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\AOL\AOL Shield\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\AOL\AOL Shield\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\AOL\AOL Shield\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\AOL\AOL Shield\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=AOL Shield Privacy Sandbox * Author=Winapp2.ini Project [AOL Shield Progressive Web Apps *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=AOL Shield Progressive Web Apps * Author=Winapp2.ini Project [AOL Shield Saved Usernames & Passwords *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|Login Data* Tags=ccapps ID=AOL Shield Saved Usernames & Passwords * Author=Winapp2.ini Project [AOL Shield Security & Threat Detection *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|DIPS* FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\AOL\AOL Shield\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\AOL\AOL Shield\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\AOL\AOL Shield\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\AOL\AOL Shield\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\AOL\AOL Shield\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\AOL\AOL Shield\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\AOL\AOL Shield\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\AOL\AOL Shield\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=AOL Shield Security & Threat Detection * Author=Winapp2.ini Project [AOL Shield Shopping Insights *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\AOL\AOL Shield\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=AOL Shield Shopping Insights * Author=Winapp2.ini Project [AOL Shield Storage Quota Manager *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|QuotaManager Tags=ccapps ID=AOL Shield Storage Quota Manager * Author=Winapp2.ini Project [AOL Shield Sync Data *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=AOL Shield Sync Data * Author=Winapp2.ini Project [AOL Shield Telemetry *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\Application|debug.log FileKey2=%LocalAppData%\AOL\AOL Shield\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\AOL\AOL Shield\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\AOL\AOL Shield\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\*|*.log FileKey6=%LocalAppData%\AOL\AOL Shield\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\AOL\AOL Shield\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\AOL\AOL Shield\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\AOL\AOL Shield\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\AOL\AOL Shield\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\AOL\AOL Shield\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\AOL\AOL Shield\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\AOL\AOL Shield\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\AOL\AOL Shield\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\AOL\AOL Shield\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\AOL\AOL Shield\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\AOL\AOL Shield\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\AOL\AOL Shield\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\AOL\AOL Shield\User Data\Stability|*|REMOVESELF FileKey20=%LocalAppData%\SentryBay\CrashReports|*|REMOVESELF FileKey21=%ProgramFiles%\AOL\AOL Shield\Application|debug.log FileKey22=%ProgramFiles%\AOL\AOL Shield\Application\SetupMetrics|*|REMOVESELF FileKey23=%ProgramFiles%\SentryBay\CrashReports|*|REMOVESELF RegKey1=HKCU\AOL\AOL Shield\BlBeacon|failed_count RegKey2=HKCU\AOL\AOL Shield\BlBeacon|state RegKey3=HKCU\AOL\AOL Shield\Installer|LastChecked RegKey4=HKCU\AOL\AOL Shield\StabilityMetrics Tags=ccapps ID=AOL Shield Telemetry * Author=Winapp2.ini Project [AOL Shield Web Browsing Cookies *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=AOL Shield Web Browsing Cookies * Author=Winapp2.ini Project [AOL Shield Web Browsing History *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=AOL Shield Web Browsing History * Author=Winapp2.ini Project [AOL Shield Web Browsing Session *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=AOL Shield Web Browsing Session * Author=Winapp2.ini Project [AOL Shield Web Storage *] DetectFile=%LocalAppData%\AOL\AOL Shield\User Data FileKey1=%LocalAppData%\AOL\AOL Shield\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\AOL\AOL Shield\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\AOL\AOL Shield\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\AOL\AOL Shield\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\AOL\AOL Shield\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\AOL\AOL Shield\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\AOL\AOL Shield\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\AOL\AOL Shield\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=AOL Shield Web Storage * Author=Winapp2.ini Project [AOMEI Backupper *] DetectFile=%ProgramFiles%\AOMEI Backupper FileKey1=%LocalAppData%\AOMEI Backupper\cache|* FileKey2=%ProgramData%\AomeiBR|brlog.xml FileKey3=%ProgramFiles%\AOMEI Backupper\AOMEI Image Deploy\log|* FileKey4=%ProgramFiles%\AOMEI Backupper\log|* Tags=ccutil ID=AOMEI Backupper * Author=Winapp2.ini Project [AOMEI Cloner *] DetectFile=%ProgramFiles%\AOMEI Cloner FileKey1=%ProgramFiles%\AOMEI Cloner\log|*.log Tags=ccutil ID=AOMEI Cloner * Author=Winapp2.ini Project [AOMEI FastRecovery *] DetectFile=%ProgramFiles%\AOMEI FastRecovery FileKey1=%ProgramFiles%\AOMEI FastRecovery|*.log Tags=ccutil ID=AOMEI FastRecovery * Author=Winapp2.ini Project [AOMEI Partition Assistant *] DetectFile=%ProgramFiles%\AOMEI Partition Assistant FileKey1=%ProgramFiles%\AOMEI Partition Assistant\log|*.log Tags=ccutil ID=AOMEI Partition Assistant * Author=Winapp2.ini Project [APC PowerChute Personal Edition *] DetectFile=%ProgramFiles%\APC\PowerChute Personal Edition FileKey1=%ProgramFiles%\APC\PowerChute Personal Edition|PCPELog.txt FileKey2=%WinDir%\System32|PCPELog.txt FileKey3=%WinDir%\SysWOW64|PCPELog.txt Tags=ccutil ID=APC PowerChute Personal Edition * Author=Winapp2.ini Project [ApexDC++ *] DetectFile1=%AppData%\ApexDC++ DetectFile2=%LocalAppData%\ApexDC++ DetectFile3=%ProgramFiles%\ApexDC++\Settings FileKey1=%AppData%\ApexDC++|files.xml.bz2;FinishedTransfers.xml;Queue.bkp.xml;Queue.xml.bak;Recents.xml FileKey2=%AppData%\ApexDC++\FileLists|* FileKey3=%AppData%\ApexDC++\Logs|* FileKey4=%LocalAppData%\ApexDC++|files.xml.bz2;FinishedTransfers.xml;Queue.bkp.xml;Queue.xml.bak;Recents.xml FileKey5=%LocalAppData%\ApexDC++\FileLists|* FileKey6=%LocalAppData%\ApexDC++\Logs|* FileKey7=%ProgramFiles%\ApexDC++\Logs|* FileKey8=%ProgramFiles%\ApexDC++\Settings|files.xml.bz2;FinishedTransfers.xml;Queue.bkp.xml;Queue.xml.bak;Recents.xml FileKey9=%ProgramFiles%\ApexDC++\Settings\FileLists|* FileKey10=%ProgramFiles%\ApexDC++\Settings\Logs|* Tags=ccinternet ID=ApexDC++ * Author=Winapp2.ini Project [Apowersoft ApowerCompress *] DetectFile=%AppData%\Apowersoft\ApowerCompress FileKey1=%AppData%\Apowersoft\ApowerCompress|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerCompress\log|* Tags=ccmedia ID=Apowersoft ApowerCompress * Author=Winapp2.ini Project [Apowersoft ApowerManager *] DetectFile=%AppData%\Apowersoft\ApowerManager FileKey1=%AppData%\Apowersoft\ApowerManager|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerManager\*cache|* FileKey3=%AppData%\Apowersoft\ApowerManager\log|* FileKey4=%ProgramFiles%\Apowersoft\ApowerManager|*.log Tags=ccmedia ID=Apowersoft ApowerManager * Author=Winapp2.ini Project [Apowersoft ApowerMirror *] DetectFile=%AppData%\Apowersoft\ApowerMirror FileKey1=%AppData%\Apowersoft\ApowerMirror|*.log;CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerMirror\log|* Tags=ccmedia ID=Apowersoft ApowerMirror * Author=Winapp2.ini Project [Apowersoft ApowerREC *] DetectFile=%AppData%\Apowersoft\ApowerREC FileKey1=%AppData%\Apowersoft\ApowerREC|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerREC\log|* Tags=ccmedia ID=Apowersoft ApowerREC * Author=Winapp2.ini Project [Apowersoft ApowerRecover *] DetectFile=%AppData%\Apowersoft\ApowerRecover FileKey1=%AppData%\Apowersoft\ApowerRecover|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerRecover\log|* FileKey3=%ProgramFiles%\Apowersoft\ApowerRecover|*.dmp;*.log Tags=ccmedia ID=Apowersoft ApowerRecover * Author=Winapp2.ini Project [Apowersoft ApowerRescue *] DetectFile=%AppData%\Apowersoft\ApowerRescue FileKey1=%AppData%\Apowersoft\ApowerRescue|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerRescue\*cache|* FileKey3=%AppData%\Apowersoft\ApowerRescue\log|* Tags=ccmedia ID=Apowersoft ApowerRescue * Author=Winapp2.ini Project [Apowersoft ApowerShow *] DetectFile=%AppData%\Apowersoft\ApowerShow FileKey1=%AppData%\Apowersoft\ApowerShow|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\ApowerShow\log*|* Tags=ccmedia ID=Apowersoft ApowerShow * Author=Winapp2.ini Project [Apowersoft Background Easer *] DetectFile=%AppData%\Apowersoft\Apowersoft background eraser FileKey1=%AppData%\Apowersoft\Apowersoft background eraser|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft background eraser\log|* Tags=ccmedia ID=Apowersoft Background Easer * Author=Winapp2.ini Project [Apowersoft CAD Viewer *] DetectFile=%AppData%\Apowersoft\Apowersoft CAD Viewer FileKey1=%AppData%\Apowersoft\Apowersoft CAD Viewer|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft CAD Viewer\log|* Tags=ccmedia ID=Apowersoft CAD Viewer * Author=Winapp2.ini Project [Apowersoft Casttingo *] DetectFile=%AppData%\Apowersoft\Casttingo FileKey1=%AppData%\Apowersoft\Casttingo|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Casttingo\log|* FileKey3=%AppData%\Apowersoft\chromatool\log|* Tags=ccmedia ID=Apowersoft Casttingo * Author=Winapp2.ini Project [Apowersoft GIF *] DetectFile=%AppData%\Apowersoft\Apowersoft GIF FileKey1=%AppData%\Apowersoft\Apowersoft GIF|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft GIF\Log|* Tags=ccmedia ID=Apowersoft GIF * Author=Winapp2.ini Project [Apowersoft GitMind *] DetectFile=%AppData%\Apowersoft\GitMind FileKey1=%AppData%\Apowersoft\GitMind\Cache|* FileKey2=%AppData%\Apowersoft\GitMind\logs|* FileKey3=%AppData%\Apowersoft\GitMind\webview\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%AppData%\Apowersoft\GitMind\webview\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%AppData%\Apowersoft\GitMind\webview\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%AppData%\Apowersoft\GitMind\webview\EBWebView\*Cache*|*|REMOVESELF FileKey7=%AppData%\Apowersoft\GitMind\webview\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%AppData%\Apowersoft\GitMind\webview\EBWebView\Avatars|*|REMOVESELF FileKey9=%AppData%\Apowersoft\GitMind\webview\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%AppData%\Apowersoft\GitMind\webview\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%AppData%\Apowersoft\GitMind\webview\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%AppData%\Apowersoft\GitMind\webview\EBWebView\Crashpad|*|REMOVESELF FileKey13=%AppData%\Apowersoft\GitMind\webview\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\File System|*|REMOVESELF FileKey29=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%AppData%\Apowersoft\GitMind\webview\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%AppData%\Apowersoft\GitMind\webview\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%AppData%\Apowersoft\GitMind\webview\EBWebView\Local Traces|*|REMOVESELF FileKey52=%AppData%\Apowersoft\GitMind\webview\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%AppData%\Apowersoft\GitMind\webview\EBWebView\Optimization*|*|REMOVESELF FileKey54=%AppData%\Apowersoft\GitMind\webview\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%AppData%\Apowersoft\GitMind\webview\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%AppData%\Apowersoft\GitMind\webview\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%AppData%\Apowersoft\GitMind\webview\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%AppData%\Apowersoft\GitMind\webview\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%AppData%\Apowersoft\GitMind\webview\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%AppData%\Apowersoft\GitMind\webview\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%AppData%\Apowersoft\GitMind\webview\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%AppData%\Apowersoft\GitMind\webview\EBWebView\Stability|*|REMOVESELF FileKey63=%AppData%\Apowersoft\GitMind\webview\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%AppData%\Apowersoft\GitMind\webview\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%AppData%\Apowersoft\GitMind\webview\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%AppData%\Apowersoft\GitMind\webview\EBWebView\ZxcvbnData|*|REMOVESELF Tags=ccmedia ID=Apowersoft GitMind * Author=Winapp2.ini Project [Apowersoft HEIC Converter *] DetectFile=%AppData%\Apowersoft\Apowersoft Heic Converter FileKey1=%AppData%\Apowersoft\Apowersoft Heic Converter|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft Heic Converter\Log|* Tags=ccmedia ID=Apowersoft HEIC Converter * Author=Winapp2.ini Project [Apowersoft Photo Viewer *] DetectFile=%AppData%\Apowersoft\Apowersoft Photo Viewer FileKey1=%AppData%\Apowersoft\Apowersoft Photo Viewer|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft Photo Viewer\Log|* FileKey3=%UserProfile%\Pictures\Apowersoft\Apowersoft Photo Viewer\Screenshots|* Tags=ccmedia ID=Apowersoft Photo Viewer * Author=Winapp2.ini Project [Apowersoft RecCloud *] DetectFile=%AppData%\Apowersoft\RecCloud FileKey1=%AppData%\Apowersoft\RecCloud|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\RecCloud\log|* FileKey3=%AppData%\Apowersoft\Video Editor Pro|CommUtilities.Report.* FileKey4=%AppData%\Apowersoft\Video Editor Pro\CacheProjects|* FileKey5=%AppData%\Apowersoft\Video Editor Pro\log|* FileKey6=%ProgramData%\Apowersoft\Video Editor Pro\Renamed Cache|*|RECURSE Tags=ccmedia ID=Apowersoft RecCloud * Author=Winapp2.ini Project [Apowersoft Screen Capture Pro *] DetectFile=%AppData%\Apowersoft\Apowersoft Screen Capture Pro FileKey1=%AppData%\Apowersoft\Apowersoft Screen Capture Pro|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft Screen Capture Pro\Log|* Tags=ccmedia ID=Apowersoft Screen Capture Pro * Author=Winapp2.ini Project [Apowersoft Streaming Audio Recorder *] DetectFile=%AppData%\Apowersoft\Streaming Audio Recorder FileKey1=%AppData%\Apowersoft\Streaming Audio Recorder|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Streaming Audio Recorder\log|* Tags=ccmedia ID=Apowersoft Streaming Audio Recorder * Author=Winapp2.ini Project [Apowersoft Video Download Capture *] DetectFile=%AppData%\Apowersoft\Video Download Capture* FileKey1=%AppData%\Apowersoft\Video Download Capture*\CefCache|* FileKey2=%AppData%\Apowersoft\Video Download Capture*\Log|* Tags=ccmedia ID=Apowersoft Video Download Capture * Author=Winapp2.ini Project [Apowersoft Video Editor *] DetectFile=%AppData%\Apowersoft\Apowersoft Video Editor FileKey1=%AppData%\Apowersoft\Apowersoft Video Editor|CommUtilities.Report.* FileKey2=%AppData%\Apowersoft\Apowersoft Video Editor\Log|* Tags=ccmedia ID=Apowersoft Video Editor * Author=Winapp2.ini Project [Apple Devices *] DetectFile=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa FileKey1=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\LocalCache\Local\Logs|* FileKey3=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\Logs|* FileKey4=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\LocalState\Logs|* FileKey5=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\Settings|*.log* FileKey6=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\AppleInc.AppleDevices_nzyj5cx40ttqa\TempState|*|REMOVESELF Tags=ccutil ID=Apple Devices * Author=Winapp2.ini Project [Apple iCloud *] DetectFile=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa FileKey1=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\LocalCache\Local\iCloudPhotoLibrary\ThumbsHigh|*|RECURSE FileKey3=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\LocalCache\Local\Logs|*|RECURSE FileKey4=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\MediaStream\Thumbnails|* FileKey5=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\Settings|*.log* FileKey6=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\AppleInc.iCloud_nzyj5cx40ttqa\TempState|*|REMOVESELF Tags=ccmedia ID=Apple iCloud * Author=Winapp2.ini Project [Apple iTunes *] DetectFile=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa FileKey1=%AppData%\Apple Computer\iTunes|*.ipcc;*.ipsw;*.log FileKey2=%AppData%\Apple Computer\iTunes\Cookies|Cookies.binarycookies FileKey3=%AppData%\Apple Computer\Logs*|*|RECURSE FileKey4=%LocalAppData%\Apple Computer\iTunes|Cache.db FileKey5=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\AC|*|RECURSE FileKey6=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\LocalCache\Local\Apple Computer\iTunes|*.xml;Cache.db FileKey7=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\LocalCache\Local\Microsoft\Windows\Caches|*|RECURSE FileKey8=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\*|*|RECURSE FileKey9=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\iTunes\Cookies|Cookies.binarycookies FileKey10=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\Logs|*|RECURSE FileKey11=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\Settings|*.log* FileKey12=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium|*.log* FileKey13=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\Cache|*|RECURSE FileKey14=%LocalAppData%\Packages\AppleInc.iTunes_nzyj5cx40ttqa\TempState|*|REMOVESELF FileKey15=%ProgramData%\Apple Computer\iTunes\iPhone Temporary Files|*|RECURSE FileKey16=%UserProfile%\Desktop\iTunes Crash Logs|*.dmp FileKey17=%UserProfile%\Music\iTunes|*.tmp|RECURSE FileKey18=%UserProfile%\Music\iTunes\Album Artwork\Cache|*|RECURSE FileKey19=%WinDir%\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*|RECURSE FileKey20=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*|RECURSE Tags=ccmedia ID=Apple iTunes * Author=Winapp2.ini Project [Apple Music *] DetectFile=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa FileKey1=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalCache\Local\Apple Computer|* FileKey3=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalCache\Local\Apple\AMPLibraryAgent\*\artwork|* FileKey4=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalCache\Local\Logs|* FileKey5=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\Logs|* FileKey6=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalCache\Roaming\Apple\AMPLibraryAgent\com.apple.AMPLibraryAgent\iTunes Migration|* FileKey7=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\LocalState\Logs|* FileKey8=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\Settings|*.log* FileKey9=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\AppleInc.AppleMusicWin_nzyj5cx40ttqa\TempState|*|REMOVESELF Tags=ccmedia ID=Apple Music * Author=Winapp2.ini Project [Apple Software Update *] DetectFile=%LocalAppData%\Apple Software Update FileKey1=%LocalAppData%\Apple Software Update|*.msi FileKey2=%LocalAppData%\Apple Software Update\DistCache|*|RECURSE Tags=ccapps ID=Apple Software Update * Author=Winapp2.ini Project [Apple TV *] DetectFile=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa FileKey1=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalCache\local\Apple\AMPLibraryAgent\*\artwork|* FileKey3=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalCache\local\Logs|* FileKey4=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalCache\Logs|* FileKey5=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalCache\Roaming\Apple Computer\Logs|* FileKey6=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalCache\Roaming\Apple\AMPLibraryAgent\com.apple.AMPLibraryAgent\iTunes Migration|* FileKey7=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalState\Apple\CS\AppleTV|*.HDS FileKey8=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\LocalState\Logs|* FileKey9=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\Settings|*.log* FileKey10=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\SystemAppData\Helium|*.log* FileKey11=%LocalAppData%\Packages\AppleInc.AppleTVWin_nzyj5cx40ttqa\TempState|*|REMOVESELF Tags=ccmedia ID=Apple TV * Author=Winapp2.ini Project [Arasan Chess *] Detect=HKCU\Software\Arasan\Arasan RegKey1=HKCU\Software\Arasan\Arasan\Recent File List Tags=ccapps ID=Arasan Chess * Author=Winapp2.ini Project [Arc Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|*Web Data FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\AutoFill*|*|REMOVESELF Tags=ARC,Browser ID=Arc Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Arc Autoplay Preferences *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\MEIPreload|*|REMOVESELF Tags=ARC,Browser ID=Arc Autoplay Preferences * Author=Winapp2.ini Project [Arc Bookmark Backups *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|Bookmarks.bak Tags=ARC,Browser ID=Arc Bookmark Backups * Author=Winapp2.ini Project [Arc Bookmark Favicons *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|favicons* Tags=ARC,Browser ID=Arc Bookmark Favicons * Author=Winapp2.ini Project [Arc Caches *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\*cache|*|REMOVESELF FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data|*-journal|RECURSE FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data|Module Info Cache FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\blob_storage|*|REMOVESELF FileKey7=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\BudgetDatabase|*|REMOVESELF FileKey8=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Download Service|*|REMOVESELF FileKey9=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\File System|*|REMOVESELF FileKey10=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\GCM Store|*|REMOVESELF FileKey11=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\JumpListIcons*|*|REMOVESELF FileKey12=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\optimization*|*|REMOVESELF FileKey13=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Platform Notifications|*|REMOVESELF FileKey14=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Service Worker|*|REMOVESELF FileKey15=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Avatars|*|REMOVESELF FileKey20=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Optimization*|*|REMOVESELF Tags=ARC,Browser ID=Arc Caches * Author=Winapp2.ini Project [Arc Default App Handlers *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|PreferredApps Tags=ARC,Browser ID=Arc Default App Handlers * Author=Winapp2.ini Project [Arc Download History *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\shared_proto_db|*|REMOVESELF Tags=ARC,Browser ID=Arc Download History * Author=Winapp2.ini Project [Arc DRM Data *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\WidevineCdm|*|REMOVESELF Tags=ARC,Browser ID=Arc DRM Data * Author=Winapp2.ini Project [Arc Extension Cookies *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|Extension Cookies Tags=ARC,Browser ID=Arc Extension Cookies * Author=Winapp2.ini Project [Arc Privacy Sandbox *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data|*first_party_sets* FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ARC,Browser ID=Arc Privacy Sandbox * Author=Winapp2.ini Project [Arc Progressive Web Apps *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Web Applications|*|REMOVESELF Tags=ARC,Browser ID=Arc Progressive Web Apps * Author=Winapp2.ini Project [Arc Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|Login Data* Tags=ARC,Browser ID=Arc Saved Usernames & Passwords * Author=Winapp2.ini Project [Arc Security & Threat Detection *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|DIPS* FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\ZxcvbnData|*|REMOVESELF Tags=ARC,Browser ID=Arc Security & Threat Detection * Author=Winapp2.ini Project [Arc Shopping Insights *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ARC,Browser ID=Arc Shopping Insights * Author=Winapp2.ini Project [Arc Storage Quota Manager *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|QuotaManager Tags=ARC,Browser ID=Arc Storage Quota Manager * Author=Winapp2.ini Project [Arc Sync Data *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Sync Data|*|REMOVESELF Tags=ARC,Browser ID=Arc Sync Data * Author=Winapp2.ini Project [Arc Telemetry *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\Application|debug.log FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|*.log FileKey6=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\Application|debug.log FileKey21=%ProgramFiles%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\Application\SetupMetrics|*|REMOVESELF Tags=ARC,Browser ID=Arc Telemetry * Author=Winapp2.ini Project [Arc Web Browsing Cookies *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ARC,Browser ID=Arc Web Browsing Cookies * Author=Winapp2.ini Project [Arc Web Browsing History *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ARC,Browser ID=Arc Web Browsing History * Author=Winapp2.ini Project [Arc Web Browsing Session *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Sessions|*|REMOVESELF Tags=ARC,Browser ID=Arc Web Browsing Session * Author=Winapp2.ini Project [Arc Web Storage *] DetectFile=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data FileKey1=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Packages\TheBrowserCompany.Arc_ttt1ap7aakyb4\LocalCache\Local\Arc\User Data\*\WebStorage|*|REMOVESELF Tags=ARC,Browser ID=Arc Web Storage * Author=Winapp2.ini Project [Arcane Worlds *] DetectFile=%AppData%\ArcaneWorlds FileKey1=%AppData%\ArcaneWorlds|log.txt Tags=ccapps ID=Arcane Worlds * Author=Winapp2.ini Project [ArcGIS ArcMap *] Detect1=HKCU\Software\ESRI\ArcMap Detect2=HKCU\Software\ESRI\Desktop10.0\ArcMap Detect3=HKCU\Software\ESRI\Desktop10.1\ArcMap RegKey1=HKCU\Software\ESRI\ArcMap\Recent File List RegKey2=HKCU\Software\ESRI\Desktop10.0\ArcMap\Recent File List RegKey3=HKCU\Software\ESRI\Desktop10.1\ArcMap\Recent File List Tags=ccapps ID=ArcGIS ArcMap * Author=Winapp2.ini Project [Arduino LLC Arduino IDE *] DetectFile1=%AppData%\Arduino IDE DetectFile2=%LocalAppData%\Packages\ArduinoLLC.ArduinoIDE_mdqgnx93n4wtt FileKey1=%AppData%\Arduino IDE|*.log FileKey2=%AppData%\arduino-ide\*cache*|*|RECURSE FileKey3=%LocalAppData%\Packages\ArduinoLLC.ArduinoIDE_mdqgnx93n4wtt\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\ArduinoLLC.ArduinoIDE_mdqgnx93n4wtt\Settings|*.log* FileKey5=%LocalAppData%\Packages\ArduinoLLC.ArduinoIDE_mdqgnx93n4wtt\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\ArduinoLLC.ArduinoIDE_mdqgnx93n4wtt\TempState|*|REMOVESELF Tags=ccapps ID=Arduino LLC Arduino IDE * Author=Winapp2.ini Project [Ares *] Detect=HKCU\Software\Ares FileKey1=%LocalAppData%\Ares\Temp|*temp.txt RegKey1=HKCU\Software\Ares|GUI.LastChatRoomBrowse RegKey2=HKCU\Software\Ares|GUI.LastSearch Tags=ccinternet ID=Ares * Author=Winapp2.ini Project [Argus Monitor *] Detect=HKCU\Software\Argotronic\Argus Monitor FileKey1=%ProgramFiles%|ArgusMonitor_*Log.* FileKey2=%UserProfile%\Documents|ArgusMonitor_*Log.* Tags=ccutil ID=Argus Monitor * Author=Winapp2.ini Project [Artifex GSview *] Detect=HKCU\Software\Artifex Software\gsview 6.0 RegKey1=HKCU\Software\Artifex Software\gsview 6.0|File RegKey2=HKCU\Software\Artifex Software\gsview 6.0|Page RegKey3=HKCU\Software\Artifex Software\gsview 6.0\Files Tags=ccapps ID=Artifex GSview * Author=Winapp2.ini Project [Artipic *] DetectFile=%LocalAppData%\Artipic AB\Artipic FileKey1=%LocalAppData%\Artipic AB\Artipic\log|* Tags=ccmedia ID=Artipic * Author=Winapp2.ini Project [ArtisBrowser Autocomplete History *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|formhistory* Tags=ccapps ID=ArtisBrowser Autocomplete History * Author=Winapp2.ini Project [ArtisBrowser Autofill Data *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|autofill-profiles.json Tags=ccapps ID=ArtisBrowser Autofill Data * Author=Winapp2.ini Project [ArtisBrowser Bookmark Backups *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\bookmarkbackups|* Tags=ccapps ID=ArtisBrowser Bookmark Backups * Author=Winapp2.ini Project [ArtisBrowser Bookmark Favicons *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|favicons* Tags=ccapps ID=ArtisBrowser Bookmark Favicons * Author=Winapp2.ini Project [ArtisBrowser Caches *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\notificationstore|* FileKey4=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\security_state|* FileKey5=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\shader-cache|* FileKey6=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\ArtistScope\ArtisBrowser\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\ArtistScope\ArtisBrowser\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\ArtistScope\ArtisBrowser\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=ArtisBrowser Caches * Author=Winapp2.ini Project [ArtisBrowser Privacy Sandbox *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|credentialstate.sqlite Tags=ccapps ID=ArtisBrowser Privacy Sandbox * Author=Winapp2.ini Project [ArtisBrowser Saved Usernames & Passwords *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|key4.db;logins.json Tags=ccapps ID=ArtisBrowser Saved Usernames & Passwords * Author=Winapp2.ini Project [ArtisBrowser Synced Tabs *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|synced-tabs.db* Tags=ccapps ID=ArtisBrowser Synced Tabs * Author=Winapp2.ini Project [ArtisBrowser Telemetry *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser|*.log|RECURSE FileKey2=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\crashes|* FileKey4=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\minidumps|* FileKey6=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\weave\logs|* Tags=ccapps ID=ArtisBrowser Telemetry * Author=Winapp2.ini Project [ArtisBrowser Web Browsing Cookies *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|cookies* Tags=ccapps ID=ArtisBrowser Web Browsing Cookies * Author=Winapp2.ini Project [ArtisBrowser Web Browsing Session *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|session*.json* Tags=ccapps ID=ArtisBrowser Web Browsing Session * Author=Winapp2.ini Project [ArtisBrowser Web Browsing Session Backups *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*\sessionstore-backups|* Tags=ccapps ID=ArtisBrowser Web Browsing Session Backups * Author=Winapp2.ini Project [ArtisBrowser Web Storage *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=ArtisBrowser Web Storage * Author=Winapp2.ini Project [ArtisBrowser Website Permissions *] DetectFile=%AppData%\ArtistScope\ArtisBrowser\Profiles FileKey1=%AppData%\ArtistScope\ArtisBrowser\Profiles\*|permissions.sqlite Tags=ccapps ID=ArtisBrowser Website Permissions * Author=Winapp2.ini Project [ASAP Utilities *] Detect=HKCU\Software\VB and VBA Program Settings\ASAP Utilities RegKey1=HKCU\Software\VB and VBA Program Settings\ASAP Utilities\TimeSavers Tags=ccutil ID=ASAP Utilities * Author=Winapp2.ini Project [ASCOMP Cleaning Suite *] Detect=HKCU\Software\ASCOMP\Cleaning Suite DetectFile=%AppData%\ASCOMP Software\Cleaning Suite FileKey1=%AppData%\ASCOMP Software\Cleaning Suite|*.log FileKey2=%AppData%\ASCOMP Software\Cleaning Suite\Restore|*|RECURSE RegKey1=HKCU\Software\ASCOMP\Cleaning Suite|ClientID Tags=ccutil ID=ASCOMP Cleaning Suite * Author=Winapp2.ini Project [Ashampoo 3D CAD *] DetectFile=%UserProfile%\Documents\Ashampoo 3D CAD * FileKey1=%UserProfile%\Documents\Ashampoo 3D CAD *|*.log Tags=ccutil ID=Ashampoo 3D CAD * Author=Winapp2.ini Project [Ashampoo Action Click *] DetectFile=%LocalAppData%\Action Click FileKey1=%LocalAppData%\Action Click\Logs|*|RECURSE FileKey2=%LocalAppData%\ActionClick.WebView2\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\ActionClick.WebView2\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\ActionClick.WebView2\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\ActionClick.WebView2\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\ActionClick.WebView2\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\ActionClick.WebView2\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\ActionClick.WebView2\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\ActionClick.WebView2\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\ActionClick.WebView2\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\ActionClick.WebView2\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\ActionClick.WebView2\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\ActionClick.WebView2\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\ActionClick.WebView2\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\ActionClick.WebView2\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\ActionClick.WebView2\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\ActionClick.WebView2\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\ActionClick.WebView2\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\ActionClick.WebView2\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\ActionClick.WebView2\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\ActionClick.WebView2\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\ActionClick.WebView2\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\ActionClick.WebView2\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\ActionClick.WebView2\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\ActionClick.WebView2\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\ActionClick.WebView2\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\ActionClick.WebView2\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\ActionClick.WebView2\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\ActionClick.WebView2\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\ActionClick.WebView2\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\ActionClick.WebView2\EBWebView\ZxcvbnData|*|REMOVESELF Tags=ccutil ID=Ashampoo Action Click * Author=Winapp2.ini Project [Ashampoo ActionCam *] DetectFile=%AppData%\Ashampoo\Ashampoo ActionCam FileKey1=%UserProfile%\Documents|Ashampoo ActionCam.tmp Tags=ccutil ID=Ashampoo ActionCam * Author=Winapp2.ini Project [Ashampoo AI Filter *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\AI Filter #* FileKey1=%UserProfile%\AI 1 *|*.log Tags=ccutil ID=Ashampoo AI Filter * Author=Winapp2.ini Project [Ashampoo ANALOG *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\ANALOG #* FileKey1=%UserProfile%\Analog *|*.log Tags=ccutil ID=Ashampoo ANALOG * Author=Winapp2.ini Project [Ashampoo App *] DetectFile=%LocalAppData%\Ashampoo\Ashampoo App FileKey1=%LocalAppData%\Ashampoo\Ashampoo App\libraryItems|*|RECURSE FileKey2=%LocalAppData%\Ashampoo\Ashampoo App\logs|* FileKey3=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\*Cache*|*|REMOVESELF FileKey7=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Avatars|*|REMOVESELF FileKey9=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Crashpad|*|REMOVESELF FileKey13=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\File System|*|REMOVESELF FileKey29=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Local Traces|*|REMOVESELF FileKey52=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Optimization*|*|REMOVESELF FileKey54=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Stability|*|REMOVESELF FileKey63=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%LocalAppData%\Ashampoo\Ashampoo App\webview\EBWebView\ZxcvbnData|*|REMOVESELF FileKey67=%LocalAppData%\Ashampoo\boxshots|*.png FileKey68=%ProgramData%\Ashampoo|ico_ashampoo_deals.ico Tags=ccutil ID=Ashampoo App * Author=Winapp2.ini Project [Ashampoo Backup *] DetectFile=%LocalAppData%\Ashampoo Backup PB* FileKey1=%LocalAppData%\Ashampoo Backup PB*|log* Tags=ccutil ID=Ashampoo Backup * Author=Winapp2.ini Project [Ashampoo BLACK & WHITE *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\BLACK & WHITE #* FileKey1=%UserProfile%\BlackWhite *|*.log Tags=ccutil ID=Ashampoo BLACK & WHITE * Author=Winapp2.ini Project [Ashampoo Burning Studio *] Detect1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5 Detect2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6 Detect3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7 Detect4=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8 Detect5=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12 Detect6=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14 Detect7=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15 Detect8=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16 Detect9=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18 Detect10=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19 Detect11=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20 Detect12=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21 Detect13=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22 Detect14=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23 Detect15=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24 Detect16=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25 Detect17=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26 Detect18=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007 Detect19=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009 Detect20=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012 Detect21=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016 Detect22=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017 Detect23=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018 Detect24=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019 Detect25=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024 Detect26=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025 Detect27=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026 FileKey1=%ProgramData%\Ashampoo\drivers|driverdatabase.xml|REMOVESELF RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Burn Image Project\AddDialog RegKey2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Burn Image Project\SelectImage RegKey3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Data Disc Project\AddDialog RegKey4=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Data Disc Project\DumpImage RegKey5=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Unknown Project\AddDialog RegKey6=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Burn Image Project\AddDialog RegKey7=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Burn Image Project\SelectImage RegKey8=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Data Disc Project\AddDialog RegKey9=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Data Disc Project\DumpImage RegKey10=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Unknown Project\AddDialog RegKey11=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Burn Image Project\AddDialog RegKey12=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Burn Image Project\SelectImage RegKey13=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Data Disc Project\AddDialog RegKey14=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Data Disc Project\DumpImage RegKey15=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Unknown Project\AddDialog RegKey16=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Burn Image Project\AddDialog RegKey17=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Burn Image Project\SelectImage RegKey18=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Data Disc Project\AddDialog RegKey19=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Data Disc Project\DumpImage RegKey20=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Unknown Project\AddDialog RegKey21=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey22=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Backup Project\BackupOptions|CustomLocation RegKey23=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey24=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Browse Image Project\BrowseImageFile|ImagePath RegKey25=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey26=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey27=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Burn Image Project\SelectImage|ImagePath RegKey28=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Data Disc Project\DumpImage|ImagePath RegKey29=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey30=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\DVD-Video Disc Project\MoviesPage|Path RegKey31=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey32=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Logs RegKey33=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\tempFiles RegKey34=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\Unknown Project RegKey35=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey36=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey37=HKCU\Software\Ashampoo\Ashampoo Burning Studio 12\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey38=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey39=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Backup Project\BackupOptions|CustomLocation RegKey40=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey41=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Browse Image Project\BrowseImageFile|ImagePath RegKey42=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey43=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey44=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Burn Image Project\SelectImage|ImagePath RegKey45=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Data Disc Project\DumpImage|ImagePath RegKey46=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey47=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\DVD-Video Disc Project\MoviesPage|Path RegKey48=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey49=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Logs RegKey50=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\tempFiles RegKey51=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\Unknown Project RegKey52=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey53=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey54=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey55=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey56=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Backup Project\BackupOptions|CustomLocation RegKey57=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey58=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Browse Image Project\BrowseImageFile|ImagePath RegKey59=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey60=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey61=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Burn Image Project\SelectImage|ImagePath RegKey62=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Data Disc Project\DumpImage|ImagePath RegKey63=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey64=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\DVD-Video Disc Project\MoviesPage|Path RegKey65=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey66=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Logs RegKey67=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\tempFiles RegKey68=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\Unknown Project RegKey69=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey70=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey71=HKCU\Software\Ashampoo\Ashampoo Burning Studio 15\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey72=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey73=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Backup Project\BackupOptions|CustomLocation RegKey74=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey75=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Browse Image Project\BrowseImageFile|ImagePath RegKey76=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey77=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey78=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Burn Image Project\SelectImage|ImagePath RegKey79=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Data Disc Project\DumpImage|ImagePath RegKey80=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey81=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\DVD-Video Disc Project\MoviesPage|Path RegKey82=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey83=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Logs RegKey84=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\tempFiles RegKey85=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\Unknown Project RegKey86=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey87=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey88=HKCU\Software\Ashampoo\Ashampoo Burning Studio 16\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey89=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey90=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Backup Project\BackupOptions|CustomLocation RegKey91=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey92=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Browse Image Project\BrowseImageFile|ImagePath RegKey93=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey94=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey95=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Burn Image Project\SelectImage|ImagePath RegKey96=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Data Disc Project\DumpImage|ImagePath RegKey97=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey98=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\DVD-Video Disc Project\MoviesPage|Path RegKey99=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey100=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Logs RegKey101=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\tempFiles RegKey102=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\Unknown Project RegKey103=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey104=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey105=HKCU\Software\Ashampoo\Ashampoo Burning Studio 18\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey106=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey107=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Backup Project\BackupOptions|CustomLocation RegKey108=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey109=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Browse Image Project\BrowseImageFile|ImagePath RegKey110=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey111=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey112=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Burn Image Project\SelectImage|ImagePath RegKey113=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Data Disc Project\DumpImage|ImagePath RegKey114=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey115=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\DVD-Video Disc Project\MoviesPage|Path RegKey116=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey117=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Logs RegKey118=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\tempFiles RegKey119=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\Unknown Project RegKey120=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey121=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey122=HKCU\Software\Ashampoo\Ashampoo Burning Studio 19\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey123=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey124=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Backup Project\BackupOptions|CustomLocation RegKey125=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey126=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Browse Image Project\BrowseImageFile|ImagePath RegKey127=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey128=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey129=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Burn Image Project\SelectImage|ImagePath RegKey130=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Data Disc Project\DumpImage|ImagePath RegKey131=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey132=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\DVD-Video Disc Project\MoviesPage|Path RegKey133=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey134=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Logs RegKey135=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\tempFiles RegKey136=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\Unknown Project RegKey137=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey138=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey139=HKCU\Software\Ashampoo\Ashampoo Burning Studio 20\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey140=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey141=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Backup Project\BackupOptions|CustomLocation RegKey142=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey143=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Browse Image Project\BrowseImageFile|ImagePath RegKey144=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey145=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey146=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Burn Image Project\SelectImage|ImagePath RegKey147=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Data Disc Project\DumpImage|ImagePath RegKey148=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey149=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\DVD-Video Disc Project\MoviesPage|Path RegKey150=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey151=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Logs RegKey152=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\tempFiles RegKey153=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\Unknown Project RegKey154=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey155=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey156=HKCU\Software\Ashampoo\Ashampoo Burning Studio 21\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey157=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey158=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Backup Project\BackupOptions|CustomLocation RegKey159=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey160=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Browse Image Project\BrowseImageFile|ImagePath RegKey161=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey162=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey163=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Burn Image Project\SelectImage|ImagePath RegKey164=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Data Disc Project\DumpImage|ImagePath RegKey165=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey166=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\DVD-Video Disc Project\MoviesPage|Path RegKey167=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey168=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Logs RegKey169=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\tempFiles RegKey170=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\Unknown Project RegKey171=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey172=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey173=HKCU\Software\Ashampoo\Ashampoo Burning Studio 22\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey174=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey175=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Backup Project\BackupOptions|CustomLocation RegKey176=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey177=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Browse Image Project\BrowseImageFile|ImagePath RegKey178=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey179=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey180=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Burn Image Project\SelectImage|ImagePath RegKey181=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Data Disc Project\DumpImage|ImagePath RegKey182=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey183=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\DVD-Video Disc Project\MoviesPage|Path RegKey184=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey185=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Logs RegKey186=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\tempFiles RegKey187=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\Unknown Project RegKey188=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey189=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey190=HKCU\Software\Ashampoo\Ashampoo Burning Studio 23\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey191=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey192=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Backup Project\BackupOptions|CustomLocation RegKey193=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey194=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Browse Image Project\BrowseImageFile|ImagePath RegKey195=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey196=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey197=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Burn Image Project\SelectImage|ImagePath RegKey198=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Data Disc Project\DumpImage|ImagePath RegKey199=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey200=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\DVD-Video Disc Project\MoviesPage|Path RegKey201=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey202=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Logs RegKey203=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\tempFiles RegKey204=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\Unknown Project RegKey205=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey206=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey207=HKCU\Software\Ashampoo\Ashampoo Burning Studio 24\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey208=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey209=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Backup Project\BackupOptions|CustomLocation RegKey210=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey211=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Browse Image Project\BrowseImageFile|ImagePath RegKey212=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey213=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey214=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Burn Image Project\SelectImage|ImagePath RegKey215=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Data Disc Project\DumpImage|ImagePath RegKey216=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey217=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\DVD-Video Disc Project\MoviesPage|Path RegKey218=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey219=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Logs RegKey220=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\tempFiles RegKey221=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\Unknown Project RegKey222=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey223=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey224=HKCU\Software\Ashampoo\Ashampoo Burning Studio 25\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey225=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey226=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Backup Project\BackupOptions|CustomLocation RegKey227=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey228=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Browse Image Project\BrowseImageFile|ImagePath RegKey229=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey230=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey231=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Burn Image Project\SelectImage|ImagePath RegKey232=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Data Disc Project\DumpImage|ImagePath RegKey233=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey234=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\DVD-Video Disc Project\MoviesPage|Path RegKey235=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey236=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Logs RegKey237=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\tempFiles RegKey238=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\Unknown Project RegKey239=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey240=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey241=HKCU\Software\Ashampoo\Ashampoo Burning Studio 26\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey242=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Burn Image Project\AddDialog RegKey243=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Burn Image Project\SelectImage RegKey244=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Data Disc Project\AddDialog RegKey245=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Data Disc Project\DumpImage RegKey246=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Dump Image Project\DumpImage RegKey247=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Unknown Project\AddDialog RegKey248=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey249=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Backup Project\BackupOptions|CustomLocation RegKey250=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey251=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Browse Image Project\BrowseImageFile|ImagePath RegKey252=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey253=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey254=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Burn Image Project\SelectImage|ImagePath RegKey255=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Data Disc Project\DumpImage|ImagePath RegKey256=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey257=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\DVD-Video Disc Project\MoviesPage|Path RegKey258=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey259=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Logs RegKey260=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\tempFiles RegKey261=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\Unknown Project RegKey262=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey263=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey264=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2009\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey265=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey266=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Backup Project\BackupOptions|CustomLocation RegKey267=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey268=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Browse Image Project\BrowseImageFile|ImagePath RegKey269=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey270=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey271=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Burn Image Project\SelectImage|ImagePath RegKey272=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Data Disc Project\DumpImage|ImagePath RegKey273=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey274=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\DVD-Video Disc Project\MoviesPage|Path RegKey275=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey276=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Logs RegKey277=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\tempFiles RegKey278=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\Unknown Project RegKey279=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey280=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey281=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2012\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey282=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey283=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Backup Project\BackupOptions|CustomLocation RegKey284=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey285=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Browse Image Project\BrowseImageFile|ImagePath RegKey286=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey287=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey288=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Burn Image Project\SelectImage|ImagePath RegKey289=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Data Disc Project\DumpImage|ImagePath RegKey290=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey291=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\DVD-Video Disc Project\MoviesPage|Path RegKey292=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey293=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Logs RegKey294=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\tempFiles RegKey295=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\Unknown Project RegKey296=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey297=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey298=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2016\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey299=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey300=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Backup Project\BackupOptions|CustomLocation RegKey301=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey302=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Browse Image Project\BrowseImageFile|ImagePath RegKey303=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey304=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey305=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Burn Image Project\SelectImage|ImagePath RegKey306=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Data Disc Project\DumpImage|ImagePath RegKey307=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey308=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\DVD-Video Disc Project\MoviesPage|Path RegKey309=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey310=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Logs RegKey311=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\tempFiles RegKey312=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\Unknown Project RegKey313=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey314=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey315=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2017\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey316=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey317=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Backup Project\BackupOptions|CustomLocation RegKey318=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey319=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Browse Image Project\BrowseImageFile|ImagePath RegKey320=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey321=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey322=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Burn Image Project\SelectImage|ImagePath RegKey323=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Data Disc Project\DumpImage|ImagePath RegKey324=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey325=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\DVD-Video Disc Project\MoviesPage|Path RegKey326=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey327=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Logs RegKey328=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\tempFiles RegKey329=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\Unknown Project RegKey330=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey331=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey332=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2018\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey333=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey334=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Backup Project\BackupOptions|CustomLocation RegKey335=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey336=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Browse Image Project\BrowseImageFile|ImagePath RegKey337=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey338=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey339=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Burn Image Project\SelectImage|ImagePath RegKey340=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Data Disc Project\DumpImage|ImagePath RegKey341=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey342=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\DVD-Video Disc Project\MoviesPage|Path RegKey343=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey344=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Logs RegKey345=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\tempFiles RegKey346=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\Unknown Project RegKey347=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey348=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey349=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2019\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey350=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey351=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Backup Project\BackupOptions|CustomLocation RegKey352=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey353=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Browse Image Project\BrowseImageFile|ImagePath RegKey354=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey355=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey356=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Burn Image Project\SelectImage|ImagePath RegKey357=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Data Disc Project\DumpImage|ImagePath RegKey358=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey359=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\DVD-Video Disc Project\MoviesPage|Path RegKey360=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey361=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Logs RegKey362=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\tempFiles RegKey363=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\Unknown Project RegKey364=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey365=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey366=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2024\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey367=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey368=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Backup Project\BackupOptions|CustomLocation RegKey369=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey370=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Browse Image Project\BrowseImageFile|ImagePath RegKey371=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey372=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey373=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Burn Image Project\SelectImage|ImagePath RegKey374=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Data Disc Project\DumpImage|ImagePath RegKey375=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey376=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\DVD-Video Disc Project\MoviesPage|Path RegKey377=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey378=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Logs RegKey379=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\tempFiles RegKey380=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\Unknown Project RegKey381=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey382=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey383=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2025\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey384=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Audio Disc Project\SaveDialog_CPlaylistDlgEx|InitialDirectory RegKey385=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Backup Project\BackupOptions|CustomLocation RegKey386=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\BDMV Disc Project\SelectBDMVFolder|BdmvPath RegKey387=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Browse Image Project\BrowseImageFile|ImagePath RegKey388=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Browse Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey389=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Burn Image Project\SaveDialog_SelectImageBrowse|InitialDirectory RegKey390=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Burn Image Project\SelectImage|ImagePath RegKey391=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Data Disc Project\DumpImage|ImagePath RegKey392=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Data Disc Project\SaveDialog_AddFilesAndDirs|InitialDirectory RegKey393=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\DVD-Video Disc Project\MoviesPage|Path RegKey394=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\DVD-Video Disc Project\SaveDialog_authed.CMoviesPage.Movies|InitialDirectory RegKey395=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Logs RegKey396=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\tempFiles RegKey397=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\Unknown Project RegKey398=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\VCD Project\SaveDialog_OnAddMovies|InitialDirectory RegKey399=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\VIDEO_TS Disc Project\DumpImage|ImagePath RegKey400=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2026\VIDEO_TS Disc Project\SelectVideoTSFolder|VideoTSPath RegKey401=HKCU\Software\Ashampoo\common\Ashampoo Burning Studio\Recent Projects Tags=ccutil ID=Ashampoo Burning Studio * Author=Winapp2.ini Project [Ashampoo Cinemagraph *] DetectFile=%AppData%\Ashampoo\Ashampoo Cinemagraph FileKey1=%AppData%\Ashampoo\Ashampoo Cinemagraph|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Cinemagraph.tmp Tags=ccutil ID=Ashampoo Cinemagraph * Author=Winapp2.ini Project [Ashampoo COLOR *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\COLOR #* FileKey1=%UserProfile%\Color *|*.log Tags=ccutil ID=Ashampoo COLOR * Author=Winapp2.ini Project [Ashampoo DENOISE *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\DENOISE #* FileKey1=%UserProfile%\DeNoise *|*.log Tags=ccutil ID=Ashampoo DENOISE * Author=Winapp2.ini Project [Ashampoo Driver Updater *] DetectFile=%AppData%\Ashampoo\Ashampoo Driver Updater FileKey1=%AppData%\Ashampoo\Ashampoo Driver Updater|errorlog.txt Tags=ccutil ID=Ashampoo Driver Updater * Author=Winapp2.ini Project [Ashampoo FOCUS *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\FOCUS #* FileKey1=%UserProfile%\Focus *|*.log Tags=ccutil ID=Ashampoo FOCUS * Author=Winapp2.ini Project [Ashampoo Foto 3D *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\Foto3D #* FileKey1=%UserProfile%\Foto3D *|*.log Tags=ccutil ID=Ashampoo Foto 3D * Author=Winapp2.ini Project [Ashampoo HDR *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\HDR #* FileKey1=%UserProfile%\HDR *|*.log Tags=ccutil ID=Ashampoo HDR * Author=Winapp2.ini Project [Ashampoo Money *] DetectFile=%LocalAppData%\com.ashampoo.money FileKey1=%LocalAppData%\com.ashampoo.money\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey2=%LocalAppData%\com.ashampoo.money\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey3=%LocalAppData%\com.ashampoo.money\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey4=%LocalAppData%\com.ashampoo.money\EBWebView\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\com.ashampoo.money\EBWebView\AutoFill*|*|REMOVESELF FileKey6=%LocalAppData%\com.ashampoo.money\EBWebView\Avatars|*|REMOVESELF FileKey7=%LocalAppData%\com.ashampoo.money\EBWebView\CertificateRevocation|*|REMOVESELF FileKey8=%LocalAppData%\com.ashampoo.money\EBWebView\CookieReadinessList|*|REMOVESELF FileKey9=%LocalAppData%\com.ashampoo.money\EBWebView\Crash Reports|*|REMOVESELF FileKey10=%LocalAppData%\com.ashampoo.money\EBWebView\Crashpad|*|REMOVESELF FileKey11=%LocalAppData%\com.ashampoo.money\EBWebView\Crowd Deny|*|REMOVESELF FileKey12=%LocalAppData%\com.ashampoo.money\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey13=%LocalAppData%\com.ashampoo.money\EBWebView\Default\*Cache*|*|REMOVESELF FileKey14=%LocalAppData%\com.ashampoo.money\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey15=%LocalAppData%\com.ashampoo.money\EBWebView\Default\blob_storage|*|REMOVESELF FileKey16=%LocalAppData%\com.ashampoo.money\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey17=%LocalAppData%\com.ashampoo.money\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey18=%LocalAppData%\com.ashampoo.money\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey19=%LocalAppData%\com.ashampoo.money\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey20=%LocalAppData%\com.ashampoo.money\EBWebView\Default\coupon_db|*|REMOVESELF FileKey21=%LocalAppData%\com.ashampoo.money\EBWebView\Default\DataSharing|*|REMOVESELF FileKey22=%LocalAppData%\com.ashampoo.money\EBWebView\Default\discount*_db|*|REMOVESELF FileKey23=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Download Service|*|REMOVESELF FileKey24=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Extension State|*|REMOVESELF FileKey25=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey26=%LocalAppData%\com.ashampoo.money\EBWebView\Default\File System|*|REMOVESELF FileKey27=%LocalAppData%\com.ashampoo.money\EBWebView\Default\GCM Store|*|REMOVESELF FileKey28=%LocalAppData%\com.ashampoo.money\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey29=%LocalAppData%\com.ashampoo.money\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey30=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey31=%LocalAppData%\com.ashampoo.money\EBWebView\Default\optimization*|*|REMOVESELF FileKey32=%LocalAppData%\com.ashampoo.money\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey33=%LocalAppData%\com.ashampoo.money\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey34=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey35=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey36=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Service Worker|*|REMOVESELF FileKey37=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Sessions|*|REMOVESELF FileKey38=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey39=%LocalAppData%\com.ashampoo.money\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey40=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey41=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey42=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey43=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Sync Data|*|REMOVESELF FileKey44=%LocalAppData%\com.ashampoo.money\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey45=%LocalAppData%\com.ashampoo.money\EBWebView\Default\Web Applications|*|REMOVESELF FileKey46=%LocalAppData%\com.ashampoo.money\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey47=%LocalAppData%\com.ashampoo.money\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey48=%LocalAppData%\com.ashampoo.money\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey49=%LocalAppData%\com.ashampoo.money\EBWebView\Local Traces|*|REMOVESELF FileKey50=%LocalAppData%\com.ashampoo.money\EBWebView\MEIPreload|*|REMOVESELF FileKey51=%LocalAppData%\com.ashampoo.money\EBWebView\Optimization*|*|REMOVESELF FileKey52=%LocalAppData%\com.ashampoo.money\EBWebView\OriginTrials|*|REMOVESELF FileKey53=%LocalAppData%\com.ashampoo.money\EBWebView\PKIMetadata|*|REMOVESELF FileKey54=%LocalAppData%\com.ashampoo.money\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey55=%LocalAppData%\com.ashampoo.money\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey56=%LocalAppData%\com.ashampoo.money\EBWebView\Safe Browsing|*|REMOVESELF FileKey57=%LocalAppData%\com.ashampoo.money\EBWebView\SafetyTips|*|REMOVESELF FileKey58=%LocalAppData%\com.ashampoo.money\EBWebView\SmartScreen|*|REMOVESELF FileKey59=%LocalAppData%\com.ashampoo.money\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey60=%LocalAppData%\com.ashampoo.money\EBWebView\Stability|*|REMOVESELF FileKey61=%LocalAppData%\com.ashampoo.money\EBWebView\Subresource Filter|*|REMOVESELF FileKey62=%LocalAppData%\com.ashampoo.money\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey63=%LocalAppData%\com.ashampoo.money\EBWebView\WidevineCdm|*|REMOVESELF FileKey64=%LocalAppData%\com.ashampoo.money\EBWebView\ZxcvbnData|*|REMOVESELF Tags=ccutil ID=Ashampoo Money * Author=Winapp2.ini Project [Ashampoo Movie Studio *] DetectFile=%LocalAppData%\Ashampoo Movie Studio * FileKey1=%LocalAppData%\Ashampoo Movie Studio *\cache|*|RECURSE Tags=ccutil ID=Ashampoo Movie Studio * Author=Winapp2.ini Project [Ashampoo NEAT *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\NEAT #* FileKey1=%UserProfile%\Neat *|*.log Tags=ccutil ID=Ashampoo NEAT * Author=Winapp2.ini Project [Ashampoo PDF *] Detect1=HKCU\Software\Ashampoo\Ashampoo PDF Detect2=HKCU\Software\Ashampoo\Ashampoo PDF Pro 2 FileKey1=%LocalAppData%\Ashampoo PDF\*|fontcache;lastFileOpenned.txt RegKey1=HKCU\Software\Ashampoo\Ashampoo PDF\Find Replace RegKey2=HKCU\Software\Ashampoo\Ashampoo PDF\Recent File List Tags=ccutil ID=Ashampoo PDF * Author=Winapp2.ini Project [Ashampoo Photo Organizer *] DetectFile=%LocalAppData%\Ashampoo Photo Organizer FileKey1=%LocalAppData%\Ashampoo Photo Organizer\analytics|* FileKey2=%LocalAppData%\Ashampoo Photo Organizer\crashlogs|*|RECURSE Tags=ccutil ID=Ashampoo Photo Organizer * Author=Winapp2.ini Project [Ashampoo PhotoCommander *] DetectFile=%AppData%\Ashampoo\Ashampoo Photo Commander * FileKey1=%AppData%\Ashampoo\Ashampoo Photo Commander *|*.log FileKey2=%AppData%\Ashampoo\Ashampoo Photo Commander *\Cache|* RegKey1=HKCU\Software\Ashampoo\Ashampoo Photo Commander 19|LastOpenDir RegKey2=HKCU\Software\Ashampoo\Ashampoo Photo Commander 19|LastSaveDir RegKey3=HKCU\Software\Ashampoo\Ashampoo Photo Commander Free|LastOpenDir RegKey4=HKCU\Software\Ashampoo\Ashampoo Photo Commander Free|LastSaveDir Tags=ccutil ID=Ashampoo PhotoCommander * Author=Winapp2.ini Project [Ashampoo Registry Cleaner *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo Registry Cleaner* FileKey1=%ProgramFiles%\Ashampoo\Ashampoo Registry Cleaner*\Backups|* Tags=ccutil ID=Ashampoo Registry Cleaner * Author=Winapp2.ini Project [Ashampoo SHARPEN *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\SHARPEN #* FileKey1=%UserProfile%\Sharpen *|*.log FileKey2=%UserProfile%\SharpenVideo *|*.log Tags=ccutil ID=Ashampoo SHARPEN * Author=Winapp2.ini Project [Ashampoo Snap *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo Snap* FileKey1=%ProgramFiles%\Ashampoo\Ashampoo Snap*|_NLogMsg.txt Tags=ccutil ID=Ashampoo Snap * Author=Winapp2.ini Project [Ashampoo Snap AutoSaves *] DetectFile=%ProgramFiles%\Ashampoo Snap* FileKey1=%UserProfile%\Pictures\Ashampoo Snap*\_SNAPDOC|*|RECURSE Tags=ccutil ID=Ashampoo Snap AutoSaves * Author=Winapp2.ini Project [Ashampoo SoundStage *] DetectFile=%AppData%\Ashampoo Soundstage FileKey1=%AppData%\Ashampoo Soundstage\logs|* Tags=ccutil ID=Ashampoo SoundStage * Author=Winapp2.ini Project [Ashampoo Video Converter *] DetectFile=%LocalAppData%\Ashampoo Video Converter FileKey1=%LocalAppData%\Ashampoo Video Converter\cache|*|RECURSE Tags=ccutil ID=Ashampoo Video Converter * Author=Winapp2.ini Project [Ashampoo Video Deflicker *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Deflicker FileKey1=%AppData%\Ashampoo\Ashampoo Video Deflicker|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Video Deflicker.tmp Tags=ccutil ID=Ashampoo Video Deflicker * Author=Winapp2.ini Project [Ashampoo Video Filters and Exposure *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Filters and Exposure FileKey1=%AppData%\Ashampoo\Ashampoo Video Filters and Exposure|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Video Filters and Exposure.tmp Tags=ccutil ID=Ashampoo Video Filters and Exposure * Author=Winapp2.ini Project [Ashampoo Video Fisheye Removal *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Fisheye Removal FileKey1=%AppData%\Ashampoo\Ashampoo Video Fisheye Removal|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Video Fisheye Removal.tmp Tags=ccutil ID=Ashampoo Video Fisheye Removal * Author=Winapp2.ini Project [Ashampoo Video Optimizer Pro *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Optimizer Pro FileKey1=%UserProfile%\Documents|Ashampoo Video Optimizer Pro.tmp Tags=ccutil ID=Ashampoo Video Optimizer Pro * Author=Winapp2.ini Project [Ashampoo Video Stabilization *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Stabilization FileKey1=%AppData%\Ashampoo\Ashampoo Video Stabilization|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Video Stabilization.tmp Tags=ccutil ID=Ashampoo Video Stabilization * Author=Winapp2.ini Project [Ashampoo Video Tilt-Shift *] DetectFile=%AppData%\Ashampoo\Ashampoo Video Tilt-Shift FileKey1=%AppData%\Ashampoo\Ashampoo Video Tilt-Shift|*log*.txt FileKey2=%UserProfile%\Documents|Ashampoo Video Tilt-Shift.tmp Tags=ccutil ID=Ashampoo Video Tilt-Shift * Author=Winapp2.ini Project [Ashampoo WinOptimizer *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo WinOptimizer* FileKey1=%ProgramFiles%\Ashampoo\Ashampoo WinOptimizer*\Backups|*.ini;*.reg Tags=ccutil ID=Ashampoo WinOptimizer * Author=Winapp2.ini Project [Ashampoo Write *] DetectFile=%UserProfile%\Documents\SoftMaker FileKey1=%UserProfile%\Documents\SoftMaker|tmlog.txt Tags=ccapps ID=Ashampoo Write * Author=Winapp2.ini Project [Ashampoo ZOOM *] DetectFile=%ProgramFiles%\Ashampoo\Ashampoo App\products\ZOOM #* FileKey1=%UserProfile%\Documents\Zoom *|*.log Tags=ccutil ID=Ashampoo ZOOM * Author=Winapp2.ini Project [Ashes of the Singularity *] DetectFile=%LocalAppData%\Ashes of the Singularity FileKey1=%LocalAppData%\Ashes of the Singularity\Stardock\Tachyon|*.txt Tags=ccapps ID=Ashes of the Singularity * Author=Winapp2.ini Project [Ashley Jones and the Heart of Egypt *] DetectFile=%ProgramData%\Fenomen Games\Ashley Jones - The Heart Of Egypt FileKey1=%ProgramData%\Fenomen Games\Ashley Jones - The Heart Of Egypt|*.log Tags=ccapps ID=Ashley Jones and the Heart of Egypt * Author=Winapp2.ini Project [Asmwsoft PC Optimizer *] DetectFile=%ProgramFiles%\Asmwsoft PC Optimizer FileKey1=%ProgramFiles%\Asmwsoft PC Optimizer|eraselog.txt Tags=ccutil ID=Asmwsoft PC Optimizer * Author=Winapp2.ini Project [Astase PowerBatch *] DetectFile=%ProgramFiles%\Astase\PowerBatch FileKey1=%ProgramFiles%\Astase\PowerBatch|recents.ini Tags=ccutil ID=Astase PowerBatch * Author=Winapp2.ini Project [AstroGrep *] DetectFile=%AppData%\AstroGrep FileKey1=%AppData%\AstroGrep|AstroGrep.general.config FileKey2=%AppData%\AstroGrep\Log|*.log Tags=ccutil ID=AstroGrep * Author=Winapp2.ini Project [ASUS *] Detect=HKLM\Software\ASUS\SmartCore DetectFile1=%AppData%\ASUS WebStorage DetectFile2=%LocalAppData%\AcSdkInsLog DetectFile3=%ProgramData%\ASUS DetectFile4=%ProgramFiles%\ASUS\AI Suite FileKey1=%AppData%\*WebStorage\Logs|* FileKey2=%LocalAppData%\AcLoader|*.log FileKey3=%LocalAppData%\AcSdkInsLog|* FileKey4=%ProgramData%\ASUS|*.bak;*.log*;*Log.txt;Thumbs.db|RECURSE FileKey5=%ProgramData%\ASUS\ARMOURY CRATE Diagnosis\ASUS Update\ACS|*.txt FileKey6=%ProgramData%\ASUS\ARMOURY CRATE Diagnosis\LightingService|* FileKey7=%ProgramData%\ASUS\ARMOURY CRATE Diagnosis\ROG Live Service\InstallLog|*|RECURSE FileKey8=%ProgramData%\ASUS\ASUS System Control Interface\AsusSoftwareManager\AsusLiveUpdate\Log|*_logtrack.txt FileKey9=%ProgramData%\ASUS\ASUS System Control Interface\AsusSoftwareManager\AsusLiveUpdate\Temp|* FileKey10=%ProgramData%\ASUS\ASUS System Control Interface\AsusSystemDiagnosis|*.txt FileKey11=%ProgramData%\ASUS\ASUS System Control Interface\log|* FileKey12=%ProgramFiles%\ASUS\*|*.log;*.tmp;*log*.txt|RECURSE FileKey13=%Public%\ASUSFlipLog|* FileKey14=%SystemDrive%|wifi.log ExcludeKey1=FILE|%ProgramData%\ASUS\*\|install.log Tags=ccutil ID=ASUS * Author=Winapp2.ini Project [ASUS Dial & Control Panel *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSDialASUSControlPanel_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSDialASUSControlPanel_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSDialASUSControlPanel_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSDialASUSControlPanel_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSDialASUSControlPanel_qmba6cd70vzyy\TempState|*|REMOVESELF FileKey5=%ProgramData%\ASUS\ASUS Dial Control Panel Toolkit\Log|* Tags=ccutil ID=ASUS Dial & Control Panel * Author=Winapp2.ini Project [ASUS eSupport *] DetectFile=%SystemDrive%\eSupport\eDriver FileKey1=%SystemDrive%\eSupport\eDriver\Software|*.log;URLLog.dat|RECURSE Tags=ccutil ID=ASUS eSupport * Author=Winapp2.ini Project [ASUS Expert Site Manager *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSMulti-SiteManager_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSMulti-SiteManager_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSMulti-SiteManager_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSMulti-SiteManager_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSMulti-SiteManager_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccapps ID=ASUS Expert Site Manager * Author=Winapp2.ini Project [ASUS ExpertWidget *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSExpertWidget_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSExpertWidget_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSExpertWidget_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSExpertWidget_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSExpertWidget_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccapps ID=ASUS ExpertWidget * Author=Winapp2.ini Project [ASUS GlideX *] DetectFile=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\LocalState|aoac_glidexremote.txt FileKey3=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\LocalState\BulletinCache|*|REMOVESELF FileKey4=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\LocalState\log|* FileKey5=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\Settings|*.log* FileKey6=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\B9ECED6F.Glidex_qmba6cd70vzyy\TempState|*|REMOVESELF FileKey8=%ProgramData%\ASUS\GlideX\log|* Tags=ccutil ID=ASUS GlideX * Author=Winapp2.ini Project [ASUS Keyboard Hotkeys *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSKeyboardHotkeys_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSKeyboardHotkeys_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSKeyboardHotkeys_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSKeyboardHotkeys_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSKeyboardHotkeys_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccutil ID=ASUS Keyboard Hotkeys * Author=Winapp2.ini Project [ASUS ProArt Creator Hub *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\LocalState\ASUS\ProArt Creator Hub\Bulletin\Cache|* FileKey3=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\LocalState\log|* FileKey4=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\Settings|*.log* FileKey5=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\B9ECED6F.ProArtCreatorCenter_qmba6cd70vzyy\TempState|*|REMOVESELF FileKey7=%ProgramData%\ASUS\ProArt Creator Hub\log|* Tags=ccmedia ID=ASUS ProArt Creator Hub * Author=Winapp2.ini Project [ASUS Quick Launch *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSQuickLaunch_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSQuickLaunch_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSQuickLaunch_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSQuickLaunch_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSQuickLaunch_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccutil ID=ASUS Quick Launch * Author=Winapp2.ini Project [ASUS ROG GameVisual *] DetectFile=%LocalAppData%\Packages\B9ECED6F.GameVisual_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.GameVisual_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.GameVisual_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.GameVisual_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.GameVisual_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccutil ID=ASUS ROG GameVisual * Author=Winapp2.ini Project [ASUS TUF Aura Core *] DetectFile=%LocalAppData%\Packages\B9ECED6F.TUFAuraCore_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.TUFAuraCore_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.TUFAuraCore_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.TUFAuraCore_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.TUFAuraCore_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccutil ID=ASUS TUF Aura Core * Author=Winapp2.ini Project [ASUS USB Charger Plus *] DetectFile1=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy DetectFile2=%ProgramData%\USBChargerPlus FileKey1=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy\LocalState\log|* FileKey3=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy\Settings|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\B9ECED6F.USBChargerPlus_qmba6cd70vzyy\TempState|*|REMOVESELF FileKey6=%ProgramData%|AsACPLog.* FileKey7=%ProgramData%\ASUS\USBChargerPlus|*.log Tags=ccutil ID=ASUS USB Charger Plus * Author=Winapp2.ini Project [ASUS Windows Mixed Reality Headset *] DetectFile=%LocalAppData%\Packages\B9ECED6F.ASUSWindowsMixedRealityHMDDCA_qmba6cd70vzyy FileKey1=%LocalAppData%\Packages\B9ECED6F.ASUSWindowsMixedRealityHMDDCA_qmba6cd70vzyy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\B9ECED6F.ASUSWindowsMixedRealityHMDDCA_qmba6cd70vzyy\Settings|*.log* FileKey3=%LocalAppData%\Packages\B9ECED6F.ASUSWindowsMixedRealityHMDDCA_qmba6cd70vzyy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\B9ECED6F.ASUSWindowsMixedRealityHMDDCA_qmba6cd70vzyy\TempState|*|REMOVESELF Tags=ccmedia ID=ASUS Windows Mixed Reality Headset * Author=Winapp2.ini Project [Athentech Perfectly Clear *] Detect=HKLM\Software\Athentech FileKey1=%LocalAppData%\cache\Athentech|*|REMOVESELF Tags=ccapps ID=Athentech Perfectly Clear * Author=Winapp2.ini Project [Atlantis Quest *] DetectFile=%ProgramFiles%\GameTop.com\Atlantis Quest FileKey1=%ProgramFiles%\GameTop.com\Atlantis Quest|Error.log Tags=ccapps ID=Atlantis Quest * Author=Winapp2.ini Project [Atlantis Word Processor *] Detect=HKCU\Software\Atlantis Word Processor FileKey1=%AppData%\Atlantis|*.tmp|RECURSE FileKey2=%ProgramData%\Atlantis|Update.log RegKey1=HKCU\Software\Atlantis Word Processor\ClipLib|AddGraphicClip_RecentFolder RegKey2=HKCU\Software\Atlantis Word Processor\ClipLib|AddTextClip_RecentFolder RegKey3=HKCU\Software\Atlantis Word Processor\ClipLib|RecentClip RegKey4=HKCU\Software\Atlantis Word Processor\InsertDoc_Files RegKey5=HKCU\Software\Atlantis Word Processor\InsertPicture_Files RegKey6=HKCU\Software\Atlantis Word Processor\InsertPicture_Folders RegKey7=HKCU\Software\Atlantis Word Processor\Internal|ImportStyles_LastUsedFile RegKey8=HKCU\Software\Atlantis Word Processor\Internal|InitDir RegKey9=HKCU\Software\Atlantis Word Processor\Internal|LastBulPic RegKey10=HKCU\Software\Atlantis Word Processor\Internal|LastFavSubfolder RegKey11=HKCU\Software\Atlantis Word Processor\Internal|LastUsedDocTemplate RegKey12=HKCU\Software\Atlantis Word Processor\Internal\Envelopes|LastAddr RegKey13=HKCU\Software\Atlantis Word Processor\Internal\Envelopes|LastAddrBook RegKey14=HKCU\Software\Atlantis Word Processor\Internal\Envelopes|RetAddr RegKey15=HKCU\Software\Atlantis Word Processor\Internal\FindReplace RegKey16=HKCU\Software\Atlantis Word Processor\LangHistory RegKey17=HKCU\Software\Atlantis Word Processor\LoadSave|DocFolder RegKey18=HKCU\Software\Atlantis Word Processor\LoadSave|DocsToReload RegKey19=HKCU\Software\Atlantis Word Processor\LoadSave|Ebook_LastSavedDoc RegKey20=HKCU\Software\Atlantis Word Processor\OpenDoc_Files RegKey21=HKCU\Software\Atlantis Word Processor\RecentDocs RegKey22=HKCU\Software\Atlantis Word Processor\SaveDocAs_Files Tags=ccapps ID=Atlantis Word Processor * Author=Winapp2.ini Project [Attila *] DetectFile=%AppData%\The Creative Assembly\Attila FileKey1=%AppData%\The Creative Assembly\Attila\*_cache|*|RECURSE FileKey2=%AppData%\The Creative Assembly\Attila\Logs|* Tags=ccapps ID=Attila * Author=Winapp2.ini Project [aTube Catcher *] DetectFile=%ProgramFiles%\dsnet Corp\aTube Catcher* FileKey1=%AppData%\aTubeCatcher_10\FavIcons|* FileKey2=%ProgramFiles%\dsnet Corp\aTube Catcher*|ScrRecX.log Tags=ccmedia ID=aTube Catcher * Author=Winapp2.ini Project [Audacity *] DetectFile=%AppData%\Audacity FileKey1=%AppData%\Audacity|lastlog.txt FileKey2=%LocalAppData%\Audacity\CrashReports|* RegKey1=HKCU\Software\Audacity\Audacity|DefaultOpenPath Tags=ccmedia ID=Audacity * Author=Winapp2.ini Project [Audials *] DetectFile=%LocalAppData%\RapidSolution\Audials_Software FileKey1=%LocalAppData%\RapidSolution\Audials_*\Log|*.log;*.txt|RECURSE FileKey2=%LocalAppData%\RapidSolution\Audials_Software\RapidSolution\Audials_*\Log|*.log;*.txt|RECURSE FileKey3=%ProgramData%\RapidSolution\Audials_*\ChildMSILogs|*.txt Tags=ccmedia ID=Audials * Author=Winapp2.ini Project [Auslogics BitReplica *] DetectFile=%ProgramData%\Auslogics\BitReplica FileKey1=%ProgramData%\Auslogics\BitReplica\*|*.err;*cache.dat FileKey2=%ProgramData%\Auslogics\BitReplica\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\BitReplica\*\Logs|* FileKey4=%ProgramData%\Auslogics\BitReplica\*\Temp|* Tags=ccutil ID=Auslogics BitReplica * Author=Winapp2.ini Project [Auslogics BoostSpeed *] Detect=HKCU\Software\Auslogics\BoostSpeed DetectFile=%ProgramData%\Auslogics\BoostSpeed FileKey1=%ProgramData%\Auslogics\BoostSpeed\*.x|*.err FileKey2=%ProgramData%\Auslogics\BoostSpeed\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\BoostSpeed\*\Logs|* FileKey4=%ProgramData%\Auslogics\BoostSpeed\*\Reports|* FileKey5=%ProgramFiles%\Auslogics\Auslogics BoostSpeed|rdboot.log RegKey1=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|DiskCleaner.AppLogic.ErrorsFailed RegKey2=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|DiskCleaner.AppLogic.ErrorsFound RegKey3=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|DiskCleaner.AppLogic.ErrorsRemoved RegKey4=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|DiskCleaner.AppLogic.ErrorsRemovedTotal RegKey5=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|DiskCleaner.AppLogic.LastScan RegKey6=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey7=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey8=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey9=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey10=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|RegCleaner.AppLogic.LastScan RegKey11=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|TrackEraser.LastScan.DateTimeHi RegKey12=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|TrackEraser.LastScan.DateTimeLo RegKey13=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|TrackEraser.LastScan.FailedToRemove RegKey14=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|TrackEraser.LastScan.Found RegKey15=HKCU\Software\Auslogics\BoostSpeed\5.x\Settings|TrackEraser.LastScan.Removed RegKey16=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.DisksList.SelectedDrives RegKey17=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.DateTime RegKey18=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.DisksList RegKey19=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.FilesCount RegKey20=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey21=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey22=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey23=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey24=HKLM\Software\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.LastScan RegKey25=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.DisksList.SelectedDrives RegKey26=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.DateTime RegKey27=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.DisksList RegKey28=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|DiskDefrag.LastDefragment.FilesCount RegKey29=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey30=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey31=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey32=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey33=HKLM\Software\Wow6432Node\Auslogics\BoostSpeed\7.x\Settings|RegCleaner.AppLogic.LastScan Tags=ccutil ID=Auslogics BoostSpeed * Author=Winapp2.ini Project [Auslogics ChillMate *] DetectFile=%ProgramData%\Auslogics\ChillMate FileKey1=%ProgramData%\Auslogics\ChillMate\*|*.err FileKey2=%ProgramData%\Auslogics\ChillMate\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\ChillMate\*\Logs|* FileKey4=%ProgramData%\Auslogics\ChillMate\*\Temp|* Tags=ccutil ID=Auslogics ChillMate * Author=Winapp2.ini Project [Auslogics Disk Defrag *] Detect1=HKLM\Software\Auslogics\Disk Defrag Detect2=HKLM\Software\Auslogics\Disk Defrag Portable Detect3=HKLM\Software\Auslogics\Disk Defrag Professional DetectFile=%ProgramData%\Auslogics\Disk Defrag* FileKey1=%AppData%\Auslogics\Disk Defrag*\Reports|*|RECURSE FileKey2=%ProgramData%\Auslogics\Disk Defrag*\*|*.err FileKey3=%ProgramData%\Auslogics\Disk Defrag*\*\DeliveredAction|* FileKey4=%ProgramData%\Auslogics\Disk Defrag*\*\Logs|* FileKey5=%ProgramData%\Auslogics\Disk Defrag*\*\Reports|* FileKey6=%ProgramFiles%\Auslogics\Disk Defrag*|ndefrg.log Tags=ccutil ID=Auslogics Disk Defrag * Author=Winapp2.ini Project [Auslogics Driver Updater *] DetectFile=%ProgramData%\Auslogics\File Recovery FileKey1=%ProgramData%\Auslogics\File Recovery\*|*.err FileKey2=%ProgramData%\Auslogics\File Recovery\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\File Recovery\*\Logs|* FileKey4=%ProgramData%\Auslogics\File Recovery\*\Temp|* Tags=ccutil ID=Auslogics Driver Updater * Author=Winapp2.ini Project [Auslogics Duplicate File Finder *] DetectFile=%ProgramData%\Auslogics\Duplicate File Finder FileKey1=%ProgramData%\Auslogics\Duplicate File Finder\*|*.err FileKey2=%ProgramData%\Auslogics\Duplicate File Finder\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\Duplicate File Finder\*\Logs|* FileKey4=%ProgramData%\Auslogics\Duplicate File Finder\*\Reports|* RegKey1=HKLM\Software\Wow6432Node\Auslogics\Duplicate File Finder\7.x\Settings|DuplicateFileFinder.CheckDrives Tags=ccutil ID=Auslogics Duplicate File Finder * Author=Winapp2.ini Project [Auslogics Registry Cleaner *] DetectFile=%ProgramData%\Auslogics\Registry Cleaner FileKey1=%ProgramData%\Auslogics\Registry Cleaner\*|*.err FileKey2=%ProgramData%\Auslogics\Registry Cleaner\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\Registry Cleaner\*\Logs|* FileKey4=%ProgramData%\Auslogics\Registry Cleaner\*\Reports|* FileKey5=%ProgramData%\Auslogics\Registry Cleaner\*\Rescue\Auslogics Registry Cleaner|*.rsc RegKey1=HKCU\Software\Auslogics\Registry Cleaner\2.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey2=HKCU\Software\Auslogics\Registry Cleaner\2.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey3=HKCU\Software\Auslogics\Registry Cleaner\2.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey4=HKCU\Software\Auslogics\Registry Cleaner\2.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey5=HKCU\Software\Auslogics\Registry Cleaner\2.x\Settings|RegCleaner.AppLogic.LastScan RegKey6=HKLM\Software\Auslogics\DeliveredActions RegKey7=HKLM\Software\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey8=HKLM\Software\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey9=HKLM\Software\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey10=HKLM\Software\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey11=HKLM\Software\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.LastScan RegKey12=HKLM\Software\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey13=HKLM\Software\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey14=HKLM\Software\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey15=HKLM\Software\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey16=HKLM\Software\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.LastScan RegKey17=HKLM\Software\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey18=HKLM\Software\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey19=HKLM\Software\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey20=HKLM\Software\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey21=HKLM\Software\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.LastScan RegKey22=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey23=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey24=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey25=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey26=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\3.x\Settings|RegCleaner.AppLogic.LastScan RegKey27=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey28=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey29=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey30=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey31=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\4.x\Settings|RegCleaner.AppLogic.LastScan RegKey32=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsFailed RegKey33=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsFound RegKey34=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsRemoved RegKey35=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.ErrorsRemovedTotal RegKey36=HKLM\Software\Wow6432Node\Auslogics\Registry Cleaner\5.x\Settings|RegCleaner.AppLogic.LastScan Tags=ccutil ID=Auslogics Registry Cleaner * Author=Winapp2.ini Project [Auslogics Registry Defrag *] DetectFile1=%AppData%\Auslogics\Registry Defrag DetectFile2=%ProgramData%\Auslogics\Registry Defrag FileKey1=%AppData%\Auslogics\Registry Defrag\Logs|* FileKey2=%AppData%\Auslogics\Registry Defrag\Reports|* FileKey3=%ProgramData%\Auslogics\Registry Defrag\*|*.err FileKey4=%ProgramData%\Auslogics\Registry Defrag\*\DeliveredAction|* FileKey5=%ProgramData%\Auslogics\Registry Defrag\*\Logs|* FileKey6=%ProgramData%\Auslogics\Registry Defrag\*\Reports|* Tags=ccutil ID=Auslogics Registry Defrag * Author=Winapp2.ini Project [Auslogics SSD Optimizer *] DetectFile=%ProgramData%\Auslogics\SSD Optimizer FileKey1=%ProgramData%\Auslogics\SSD Optimizer\*|*.err FileKey2=%ProgramData%\Auslogics\SSD Optimizer\*\Logs|* FileKey3=%ProgramData%\Auslogics\SSD Optimizer\*\Reports|* Tags=ccutil ID=Auslogics SSD Optimizer * Author=Winapp2.ini Project [Auslogics Video Grabber *] DetectFile=%LocalAppData%\VideoGrabber FileKey1=%LocalAppData%\VideoGrabber|ErrorLog.txt FileKey2=%LocalAppData%\VideoGrabber\thumbnails|* Tags=ccutil ID=Auslogics Video Grabber * Author=Winapp2.ini Project [Auslogics Windows Slimmer *] DetectFile=%ProgramData%\Auslogics\Windows Slimmer FileKey1=%ProgramData%\Auslogics\Windows Slimmer\*|*.err FileKey2=%ProgramData%\Auslogics\Windows Slimmer\*\DeliveredAction|* FileKey3=%ProgramData%\Auslogics\Windows Slimmer\*\Logs|* FileKey4=%ProgramData%\Auslogics\Windows Slimmer\*\Reports|* Tags=ccutil ID=Auslogics Windows Slimmer * Author=Winapp2.ini Project [Autodesk AutoCAD *] Detect1=HKCU\Software\Autodesk\AutoCAD\R17.0 Detect2=HKCU\Software\Autodesk\AutoCAD\R18.0 Detect3=HKCU\Software\Autodesk\AutoCAD\R18.1 Detect4=HKCU\Software\Autodesk\AutoCAD\R19.0 Detect5=HKCU\Software\Autodesk\AutoCAD\R20.0 Detect6=HKCU\Software\Autodesk\AutoCAD\R23.0 Detect7=HKCU\Software\Autodesk\R19.0 Detect8=HKCU\Software\Autodesk\R22.0 FileKey1=%AppData%\Autodesk\ACA*\*\Recent|*.lnk|RECURSE FileKey2=%AppData%\Autodesk\ADPSDK\JSON\Upload|logstats.json FileKey3=%AppData%\Autodesk\AutoCAD*\r*\*\Recent|*.lnk|RECURSE FileKey4=%LocalAppData%\Autodesk\AutoCAD*|*.log|RECURSE FileKey5=%LocalAppData%\Autodesk\AutoCAD*\r*\*\BrowserCache|data_*;index FileKey6=%LocalAppData%\Autodesk\Autodesk Desktop App\BrowserCache|data_*;f_*;index FileKey7=%LocalAppData%\Autodesk\Web Services|*.log FileKey8=%UserProfile%\Documents|plot.log RegKey1=HKCU\Software\Autodesk\AutoCAD\R17.0\ACAD-5001:409\Recent File List RegKey2=HKCU\Software\Autodesk\AutoCAD\R18.0\ACAD-8001:409\Recent File List RegKey3=HKCU\Software\Autodesk\AutoCAD\R18.0\ACAD-8001:411\Recent File List RegKey4=HKCU\Software\Autodesk\AutoCAD\R18.1\ACAD-9000:409\Recent File List RegKey5=HKCU\Software\Autodesk\AutoCAD\R19.0\ACAD-B000:409\Recent File List RegKey6=HKCU\Software\Autodesk\AutoCAD\R19.0\ACAD-B001:409\Recent File List RegKey7=HKCU\Software\Autodesk\AutoCAD\R19.0\ACAD-B004:409\Recent File List RegKey8=HKCU\Software\Autodesk\AutoCAD\R20.0\ACAD-8001:409\Recent File List RegKey9=HKCU\Software\Autodesk\AutoCAD\R23.0\ACAD-A001:409\Recent File List RegKey10=HKCU\Software\Autodesk\R19.0\ACAD-B005:409\Recent File List RegKey11=HKCU\Software\Autodesk\R22.0\ACAD-1001:409\Recent File List Tags=ccapps ID=Autodesk AutoCAD * Author=Winapp2.ini Project [Autodesk Design Review *] Detect=HKCU\Software\AutoDesk\DWF Common RegKey1=HKCU\Software\AutoDesk\DWF Common\Preferences\MRUList Tags=ccmedia ID=Autodesk Design Review * Author=Winapp2.ini Project [Autodesk Installer *] DetectFile=%AppData%\Autodesk Installer FileKey1=%AppData%\Autodesk Installer|Network Persistent State FileKey2=%AppData%\Autodesk Installer\blob_storage|*|RECURSE FileKey3=%AppData%\Autodesk Installer\GPUCache|* FileKey4=%AppData%\Autodesk Installer\Logs|* Tags=ccapps ID=Autodesk Installer * Author=Winapp2.ini Project [Autodesk Inventor *] Detect1=HKCU\Software\Autodesk\Inventor\RegistryVersion19.0 Detect2=HKCU\Software\Autodesk\Inventor\RegistryVersion20.0 Detect3=HKCU\Software\Autodesk\Inventor\RegistryVersion21.0 Detect4=HKCU\Software\Autodesk\Inventor\RegistryVersion22.0 Detect5=HKCU\Software\Autodesk\Inventor\RegistryVersion23.0 Detect6=HKCU\Software\Autodesk\Inventor\RegistryVersion24.0 RegKey1=HKCU\Software\Autodesk\Inventor\RegistryVersion19.0\Recent File List RegKey2=HKCU\Software\Autodesk\Inventor\RegistryVersion20.0\Recent File List RegKey3=HKCU\Software\Autodesk\Inventor\RegistryVersion21.0\Recent File List RegKey4=HKCU\Software\Autodesk\Inventor\RegistryVersion22.0\Recent File List RegKey5=HKCU\Software\Autodesk\Inventor\RegistryVersion23.0\Recent File List RegKey6=HKCU\Software\Autodesk\Inventor\RegistryVersion24.0\Recent File List Tags=ccapps ID=Autodesk Inventor * Author=Winapp2.ini Project [Autodesk Revit *] DetectFile=%AppData%\Autodesk\Revit\Autodesk Revit* FileKey1=%AppData%\Autodesk\Revit\Autodesk Revit*\*\components|*.log FileKey2=%AppData%\Autodesk\Revit\Autodesk Revit*\RecentFileCache|*.jpg FileKey3=%LocalAppData%\Microsoft\Microsoft SQL Server Local DB\Instances\SteelConnections*|*.log;*.mdmp;*log.ldf;log*.trc;SQLDump*.txt;system_health_*.xel Tags=ccapps ID=Autodesk Revit * Author=Winapp2.ini Project [AutoIt3 *] Detect=HKCU\Software\AutoIt v3 FileKey1=%UserProfile%|SciTE.* RegKey1=HKCU\Software\AutoIt v3\Aut2Exe|LastExeDir RegKey2=HKCU\Software\AutoIt v3\Aut2Exe|LastIcon RegKey3=HKCU\Software\AutoIt v3\Aut2Exe|LastIconDir RegKey4=HKCU\Software\AutoIt v3\Aut2Exe|LastScriptDir Tags=ccapps ID=AutoIt3 * Author=Winapp2.ini Project [AV Stumpfl Wings Platinum *] DetectFile=%ProgramFiles%\AV Stumpfl\Wings Platinum FileKey1=%ProgramFiles%\AV Stumpfl\Wings Platinum|*Log.txt Tags=ccmedia ID=AV Stumpfl Wings Platinum * Author=Winapp2.ini Project [Avast *] Detect=HKCU\Software\AVAST Software\Avast DetectFile=%ProgramFiles%\Alwil Software\Avast* FileKey1=%AppData%\AVAST Software\Avast\Cache|*-journal;LOG;LOG.old;Network Persistent State;Visited Links|RECURSE FileKey2=%AppData%\AVAST Software\Avast\Cache\*Cache|*|RECURSE FileKey3=%AppData%\AVAST Software\Avast\Cache\blob_storage|*|RECURSE FileKey4=%AppData%\AVAST Software\Avast\log|*|RECURSE FileKey5=%LocalAppData%\Background_Fault|debug.log FileKey6=%ProgramData%\Alwil Software\Avast*\log|*|RECURSE FileKey7=%ProgramData%\Alwil Software\Avast*\report|*.txt FileKey8=%ProgramData%\AVAST Software\Avast|*.obsolete;*.old;backend.txt;Log.db FileKey9=%ProgramData%\AVAST Software\Avast\backup|*|RECURSE FileKey10=%ProgramData%\AVAST Software\Avast\log|*|RECURSE FileKey11=%ProgramData%\AVAST Software\Avast\report|*.txt FileKey12=%ProgramData%\AVAST Software\Browser|*|RECURSE FileKey13=%ProgramData%\AVAST Software\Persistent Data\Avast\Logs|*.log FileKey14=%ProgramFiles%\Alwil Software\Avast*\Setup|*.log FileKey15=%ProgramFiles%\AVAST Software\Avast|*.tmp RegKey1=HKCU\Software\AVAST Software\Avast Browser Cleanup Tags=ccutil ID=Avast * Author=Winapp2.ini Project [Avast Cleanup *] Detect1=HKCU\Software\AVAST Software\Tuneup Detect2=HKLM\Software\AVAST Software\Tuneup DetectFile=%ProgramData%\Avast Software\Cleanup FileKey1=%AppData%\Avast Software\Cleanup\Cache|*|RECURSE FileKey2=%AppData%\Avast Software\Cleanup\log|*|RECURSE FileKey3=%ProgramData%\Avast Software|notiylimit.lock FileKey4=%ProgramData%\Avast Software\Cleanup|crl_cache.json FileKey5=%ProgramData%\Avast Software\Cleanup\Cache|*|RECURSE FileKey6=%ProgramData%\Avast Software\Cleanup\log|*|RECURSE FileKey7=%ProgramData%\Avast Software\Cleanup\Software Updater|state_cache.json FileKey8=%ProgramData%\Avast Software\Cleanup\StateHistory|*.dat FileKey9=%ProgramData%\Avast Software\Icarus|*.lck FileKey10=%ProgramData%\Avast Software\Icarus\Logs|*|RECURSE RegKey1=HKCU\Software\AVAST Software\Tuneup\FixProblems RegKey2=HKLM\Software\AVAST Software\Tuneup\FixProblems Tags=ccutil ID=Avast Cleanup * Author=Winapp2.ini Project [Avast Secure Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Avast Software\Browser\User Data\AutoFill*|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Avast Secure Browser Autoplay Preferences *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\MEIPreload|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Autoplay Preferences * Author=Winapp2.ini Project [Avast Secure Browser Bookmark Backups *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|Bookmarks.bak Tags=Avast,Browser ID=Avast Secure Browser Bookmark Backups * Author=Winapp2.ini Project [Avast Secure Browser Bookmark Favicons *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|favicons* Tags=Avast,Browser ID=Avast Secure Browser Bookmark Favicons * Author=Winapp2.ini Project [Avast Secure Browser Caches *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Avast Software\Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\Avast Software\Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Avast Software\Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Avast Software\Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Avast Software\Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Avast Software\Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Avast Software\Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Avast Software\Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Avast Software\Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Avast Software\Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Avast Software\Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Avast Software\Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Avast Software\Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Avast Software\Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Avast Software\Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Avast Software\Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Avast Software\Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Avast Software\Browser\User Data\Optimization*|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Caches * Author=Winapp2.ini Project [Avast Secure Browser Default App Handlers *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|PreferredApps Tags=Avast,Browser ID=Avast Secure Browser Default App Handlers * Author=Winapp2.ini Project [Avast Secure Browser Download History *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Download History * Author=Winapp2.ini Project [Avast Secure Browser DRM Data *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Avast Software\Browser\User Data\WidevineCdm|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser DRM Data * Author=Winapp2.ini Project [Avast Secure Browser Extension Cookies *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|Extension Cookies Tags=Avast,Browser ID=Avast Secure Browser Extension Cookies * Author=Winapp2.ini Project [Avast Secure Browser Pinned Tabs *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data RegKey1=HKCU\Software\AVAST Software\Browser\PreferenceMACs\Default|pinned_tabs Tags=Avast,Browser ID=Avast Secure Browser Pinned Tabs * Author=Winapp2.ini Project [Avast Secure Browser Privacy Sandbox *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Avast Software\Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Avast Software\Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Avast Software\Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Avast Software\Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Avast Software\Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Avast Software\Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Privacy Sandbox * Author=Winapp2.ini Project [Avast Secure Browser Progressive Web Apps *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\Web Applications|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Progressive Web Apps * Author=Winapp2.ini Project [Avast Secure Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|Login Data* Tags=Avast,Browser ID=Avast Secure Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Avast Secure Browser Security & Threat Detection *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Avast Software\Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Avast Software\Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Avast Software\Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Avast Software\Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Avast Software\Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Avast Software\Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Avast Software\Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Avast Software\Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Avast Software\Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Avast Software\Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Security & Threat Detection * Author=Winapp2.ini Project [Avast Secure Browser Shopping Insights *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Avast Software\Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Avast Software\Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Avast Software\Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Shopping Insights * Author=Winapp2.ini Project [Avast Secure Browser Storage Quota Manager *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|QuotaManager Tags=Avast,Browser ID=Avast Secure Browser Storage Quota Manager * Author=Winapp2.ini Project [Avast Secure Browser Sync Data *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\Sync Data|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Sync Data * Author=Winapp2.ini Project [Avast Secure Browser Telemetry *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\Application|debug.log FileKey2=%LocalAppData%\Avast Software\Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\AVAST Software\Browser\CrashReports|*|REMOVESELF FileKey4=%LocalAppData%\Avast Software\Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey5=%LocalAppData%\Avast Software\Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Avast Software\Browser\User Data\*|*.log FileKey7=%LocalAppData%\Avast Software\Browser\User Data\*\DataSharing|*|REMOVESELF FileKey8=%LocalAppData%\Avast Software\Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey9=%LocalAppData%\Avast Software\Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%LocalAppData%\Avast Software\Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey11=%LocalAppData%\Avast Software\Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey12=%LocalAppData%\Avast Software\Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey13=%LocalAppData%\Avast Software\Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey14=%LocalAppData%\Avast Software\Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey15=%LocalAppData%\Avast Software\Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey16=%LocalAppData%\Avast Software\Browser\User Data\Crash Reports|*|REMOVESELF FileKey17=%LocalAppData%\Avast Software\Browser\User Data\Crashpad|*|REMOVESELF FileKey18=%LocalAppData%\Avast Software\Browser\User Data\Local Traces|*|REMOVESELF FileKey19=%LocalAppData%\Avast Software\Browser\User Data\OriginTrials|*|REMOVESELF FileKey20=%LocalAppData%\Avast Software\Browser\User Data\Stability|*|REMOVESELF FileKey21=%ProgramFiles%\Avast Software\Browser\Application|debug.log FileKey22=%ProgramFiles%\Avast Software\Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\AVAST Software\Browser\BlBeacon|failed_count RegKey2=HKCU\Software\AVAST Software\Browser\BlBeacon|state RegKey3=HKCU\Software\AVAST Software\Browser\Installer|LastChecked RegKey4=HKCU\Software\AVAST Software\Browser\StabilityMetrics Tags=Avast,Browser ID=Avast Secure Browser Telemetry * Author=Winapp2.ini Project [Avast Secure Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Avast,Browser ID=Avast Secure Browser Web Browsing Cookies * Author=Winapp2.ini Project [Avast Secure Browser Web Browsing History *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Avast,Browser ID=Avast Secure Browser Web Browsing History * Author=Winapp2.ini Project [Avast Secure Browser Web Browsing Session *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\Sessions|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Web Browsing Session * Author=Winapp2.ini Project [Avast Secure Browser Web Storage *] DetectFile=%LocalAppData%\Avast Software\Browser\User Data FileKey1=%LocalAppData%\Avast Software\Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Avast Software\Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Avast Software\Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Avast Software\Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Avast Software\Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Avast Software\Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Avast Software\Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Avast Software\Browser\User Data\*\WebStorage|*|REMOVESELF Tags=Avast,Browser ID=Avast Secure Browser Web Storage * Author=Winapp2.ini Project [AVG *] Detect1=HKCU\Software\AVG Detect2=HKLM\Software\AVG FileKey1=%LocalAppData%\Avg\Log|*|RECURSE FileKey2=%LocalAppData%\AvgSetupLog|*|REMOVESELF FileKey3=%WinDir%\System32\config\systemprofile\AppData\Local\Avg\log|*|RECURSE FileKey4=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Avg\log|*|RECURSE Tags=ccutil ID=AVG * Author=Winapp2.ini Project [AVG AntiVirus *] Detect=HKLM\Software\AVG FileKey1=%AppData%\AVG\Antivirus\cache|ChromeDWriteFontCache FileKey2=%AppData%\AVG\Antivirus\log|*|RECURSE FileKey3=%LocalAppData%\MFAData\logs|*.log* FileKey4=%ProgramData%\AVG\Antivirus|*.old FileKey5=%ProgramData%\AVG\Antivirus\GrimeFighter2|*.txt FileKey6=%ProgramData%\AVG\Antivirus\log|*.log FileKey7=%ProgramData%\AVG\Antivirus\opm|*|RECURSE FileKey8=%ProgramData%\AVG\Antivirus\report|*|RECURSE FileKey9=%ProgramData%\AVG\Antivirus\SWCUData\Cache|*|RECURSE FileKey10=%ProgramData%\AVG\Antivirus\SWCUData\icons|*|RECURSE FileKey11=%ProgramData%\AVG\Persistent Data\Antivirus\Logs|*|RECURSE FileKey12=%ProgramFiles%\AVG\Antivirus|*.tmp|RECURSE FileKey13=%WinDir%\System32\config\systemprofile\AppData\Local\AvgSetupLog|*|REMOVESELF FileKey14=%WinDir%\System32\config\systemprofile\AppData\Local\MFAData\logs|*|RECURSE FileKey15=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\AvgSetupLog|*|REMOVESELF FileKey16=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\MFAData\logs|*|RECURSE RegKey1=HKLM\Software\AVG\Antivirus\PUB-Detected RegKey2=HKLM\Software\AVG\Antivirus\PUB-Removed RegKey3=HKLM\Software\Wow6432Node\AVG\Antivirus\PUB-Detected RegKey4=HKLM\Software\Wow6432Node\AVG\Antivirus\PUB-Removed Tags=ccutil ID=AVG AntiVirus * Author=Winapp2.ini Project [AVG PC TuneUp *] Detect1=HKCU\Software\AVG\AWL\RegistryCleaner Detect2=HKCU\Software\TuneUp DetectFile=%AppData%\AVG TuneUp FileKey1=%AppData%\AVG TuneUp\Cache|*|RECURSE FileKey2=%AppData%\AVG TuneUp\log|* FileKey3=%AppData%\AVG\AVG TuneUp\Cache|ChromeDWriteFontCache;data_*;f_*;index FileKey4=%AppData%\AVG\AVG TuneUp\log|* FileKey5=%AppData%\AVG\AWL*\CrashDumps|* FileKey6=%AppData%\AVG\TuneUp\log|* FileKey7=%AppData%\TuneUp Software\TuneUp Utilities\CrashDumps|* FileKey8=%LocalAppData%\Avg\AWL*\Log|*.log|RECURSE FileKey9=%LocalAppData%\Avg\dumps\fmw1|* FileKey10=%LocalAppData%\Microsoft\Windows|*_tureg_new.LOG*;*_tureg_old FileKey11=%LocalAppData%\TuneUp Software|*.log|RECURSE FileKey12=%ProgramData%|*_tureg_new.LOG*;*_tureg_old FileKey13=%ProgramData%\AVG\AVG TuneUp\Backups|*.rcb FileKey14=%ProgramData%\AVG\AVG TuneUp\Cache|*.log|RECURSE FileKey15=%ProgramData%\AVG\AVG TuneUp\log|* FileKey16=%ProgramData%\AVG\AWL*|*.tudb FileKey17=%ProgramData%\AVG\Icarus\Logs|* FileKey18=%ProgramData%\AVG\TuneUp|*.bak;*.old FileKey19=%ProgramData%\AVG\TuneUp\log|*|RECURSE FileKey20=%ProgramData%\TuneUp Software\tu*|*.tudb FileKey21=%ProgramData%\TuneUp Software\TuneUp Utilities*|*.log|RECURSE FileKey22=%ProgramData%\TuneUp Software\TuneUp Utilities\Program Statistics|*.tudb FileKey23=%ProgramFiles%\AVG\AVG TuneUp\DATA\log|* FileKey24=%ProgramFiles%\AVG\AVG TuneUp\x*\DATA\log|* FileKey25=%ProgramFiles%\AVG\TuneUp\DATA\log|* FileKey26=%ProgramFiles%\AVG\TuneUp\DATA\report|* FileKey27=%Public%|*_tureg_new.LOG*;*_tureg_old FileKey28=%SystemDrive%\Boot|BCD_tureg_new.LOG*;BCD_tureg_old FileKey29=%SystemDrive%\Documents and Settings\LocalService*|*_tureg_new.LOG*;*_tureg_old FileKey30=%SystemDrive%\Documents and Settings\NetworkService*|*_tureg_new.LOG*;*_tureg_old FileKey31=%SystemDrive%\Users\Default\AppData\Local\Avg\Log\tu*|*.log|RECURSE FileKey32=%UserProfile%|*_tureg_new.LOG*;*_tureg_old FileKey33=%WinDir%\ServiceProfiles\*|*_tureg_new.LOG*;*_tureg_old FileKey34=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows|*_tureg_new.LOG*;*_tureg_old FileKey35=%WinDir%\System32\config|*_tureg_new.LOG*;*_tureg_old Tags=ccutil ID=AVG PC TuneUp * Author=Winapp2.ini Project [AVG Secure Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\AVG\Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\AVG\Browser\User Data\AutoFill*|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [AVG Secure Browser Autoplay Preferences *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\MEIPreload|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Autoplay Preferences * Author=Winapp2.ini Project [AVG Secure Browser Bookmark Backups *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|Bookmarks.bak Tags=AVG,Browser ID=AVG Secure Browser Bookmark Backups * Author=Winapp2.ini Project [AVG Secure Browser Bookmark Favicons *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|favicons* Tags=AVG,Browser ID=AVG Secure Browser Bookmark Favicons * Author=Winapp2.ini Project [AVG Secure Browser Caches *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\AVG\Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\AVG\Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\AVG\Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\AVG\Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\AVG\Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\AVG\Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\AVG\Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\AVG\Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\AVG\Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\AVG\Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\AVG\Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\AVG\Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\AVG\Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\AVG\Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\AVG\Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\AVG\Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\AVG\Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\AVG\Browser\User Data\Optimization*|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Caches * Author=Winapp2.ini Project [AVG Secure Browser Default App Handlers *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|PreferredApps Tags=AVG,Browser ID=AVG Secure Browser Default App Handlers * Author=Winapp2.ini Project [AVG Secure Browser Download History *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\AVG\Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Download History * Author=Winapp2.ini Project [AVG Secure Browser DRM Data *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\AVG\Browser\User Data\WidevineCdm|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser DRM Data * Author=Winapp2.ini Project [AVG Secure Browser Extension Cookies *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|Extension Cookies Tags=AVG,Browser ID=AVG Secure Browser Extension Cookies * Author=Winapp2.ini Project [AVG Secure Browser Pinned Tabs *] DetectFile=%LocalAppData%\AVG\Browser\User Data RegKey1=HKCU\Software\AVG\Browser\PreferenceMACs\Default|pinned_tabs Tags=AVG,Browser ID=AVG Secure Browser Pinned Tabs * Author=Winapp2.ini Project [AVG Secure Browser Privacy Sandbox *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\AVG\Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\AVG\Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\AVG\Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\AVG\Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\AVG\Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\AVG\Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\AVG\Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Privacy Sandbox * Author=Winapp2.ini Project [AVG Secure Browser Progressive Web Apps *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\Web Applications|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Progressive Web Apps * Author=Winapp2.ini Project [AVG Secure Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|Login Data* Tags=AVG,Browser ID=AVG Secure Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [AVG Secure Browser Security & Threat Detection *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\AVG\Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\AVG\Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\AVG\Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\AVG\Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\AVG\Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\AVG\Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\AVG\Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\AVG\Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\AVG\Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\AVG\Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\AVG\Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Security & Threat Detection * Author=Winapp2.ini Project [AVG Secure Browser Shopping Insights *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\AVG\Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\AVG\Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\AVG\Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\AVG\Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Shopping Insights * Author=Winapp2.ini Project [AVG Secure Browser Storage Quota Manager *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|QuotaManager Tags=AVG,Browser ID=AVG Secure Browser Storage Quota Manager * Author=Winapp2.ini Project [AVG Secure Browser Sync Data *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\Sync Data|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Sync Data * Author=Winapp2.ini Project [AVG Secure Browser Telemetry *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\Application|debug.log FileKey2=%LocalAppData%\AVG\Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\AVG\Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\AVG\Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\AVG\Browser\User Data\*|*.log FileKey6=%LocalAppData%\AVG\Browser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\AVG\Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\AVG\Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\AVG\Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\AVG\Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\AVG\Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\AVG\Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\AVG\Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\AVG\Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\AVG\Browser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\AVG\Browser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\AVG\Browser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\AVG\Browser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\AVG\Browser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\AVG\Browser\Application|debug.log FileKey21=%ProgramFiles%\AVG\Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\AVG\Browser\BlBeacon|failed_count RegKey2=HKCU\Software\AVG\Browser\BlBeacon|state RegKey3=HKCU\Software\AVG\Browser\Installer|LastChecked RegKey4=HKCU\Software\AVG\Browser\StabilityMetrics Tags=AVG,Browser ID=AVG Secure Browser Telemetry * Author=Winapp2.ini Project [AVG Secure Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=AVG,Browser ID=AVG Secure Browser Web Browsing Cookies * Author=Winapp2.ini Project [AVG Secure Browser Web Browsing History *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=AVG,Browser ID=AVG Secure Browser Web Browsing History * Author=Winapp2.ini Project [AVG Secure Browser Web Browsing Session *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\AVG\Browser\User Data\*\Sessions|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Web Browsing Session * Author=Winapp2.ini Project [AVG Secure Browser Web Storage *] DetectFile=%LocalAppData%\AVG\Browser\User Data FileKey1=%LocalAppData%\AVG\Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\AVG\Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\AVG\Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\AVG\Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\AVG\Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\AVG\Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\AVG\Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\AVG\Browser\User Data\*\WebStorage|*|REMOVESELF Tags=AVG,Browser ID=AVG Secure Browser Web Storage * Author=Winapp2.ini Project [Avi-Mux GUI *] DetectFile=%ProgramFiles%\AVIMuxGUI FileKey1=%ProgramFiles%\AVIMuxGUI|*.dmp;AVI-Mux GUI - Logfile*.* Tags=ccmedia ID=Avi-Mux GUI * Author=Winapp2.ini Project [AVIcodec *] Detect=HKLM\Software\AVIcodec RegKey1=HKLM\Software\AVIcodec|szInitDir Tags=ccmedia ID=AVIcodec * Author=Winapp2.ini Project [Avid *] DetectFile1=%AppData%\Digidesign DetectFile2=%LocalAppData%\Avid FileKey1=%AppData%\Digidesign\Recent Files|*|RECURSE FileKey2=%AppData%\Digidesign\Recent Folders|*|RECURSE FileKey3=%LocalAppData%\Avid\Crashlog|* FileKey4=%LocalAppData%\Avid\Logs|*.dlog;*_log.txt FileKey5=%LocalAppData%\Avid\Pro Tools\Cache|*|RECURSE Tags=ccmedia ID=Avid * Author=Winapp2.ini Project [Avidemux *] DetectFile=%AppData%\avidemux FileKey1=%AppData%\avidemux|admlog.txt Tags=ccmedia ID=Avidemux * Author=Winapp2.ini Project [Avira AntiVir Desktop *] Detect1=HKCU\Software\Avira\Antivirus Detect2=HKLM\Software\Avira\AntiVir Desktop FileKey1=%ProgramData%\Avira\Antivir*\EVENTDB\Logs|* FileKey2=%ProgramData%\Avira\AntiVir*\IPM|*|RECURSE FileKey3=%ProgramData%\Avira\AntiVir*\REPORTS|* FileKey4=%ProgramData%\Avira\OptimizerHost\Logs|* FileKey5=%ProgramFiles%\Avira GmbH|*.log|RECURSE Tags=ccutil ID=Avira AntiVir Desktop * Author=Winapp2.ini Project [Avira Launcher *] DetectFile=%ProgramData%\Avira\Launcher FileKey1=%ProgramData%\Avira\Launcher|*.backup FileKey2=%ProgramData%\Avira\Launcher\Logfiles*|* FileKey3=%ProgramData%\Avira\Launcher\Temp|*|RECURSE FileKey4=%ProgramFiles%\Avira\Launcher|*.backup Tags=ccapps ID=Avira Launcher * Author=Winapp2.ini Project [Avira Phantom VPN *] DetectFile=%ProgramData%\Avira\VPN FileKey1=%ProgramData%\Avira\VPN|*.log Tags=ccinternet ID=Avira Phantom VPN * Author=Winapp2.ini Project [Avira Secure Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\Avira\Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Avira\Browser\User Data\AutoFill*|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Avira Secure Browser Autoplay Preferences *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\MEIPreload|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Autoplay Preferences * Author=Winapp2.ini Project [Avira Secure Browser Bookmark Backups *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|Bookmarks.bak Tags=Avira,Browser ID=Avira Secure Browser Bookmark Backups * Author=Winapp2.ini Project [Avira Secure Browser Bookmark Favicons *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|favicons* Tags=Avira,Browser ID=Avira Secure Browser Bookmark Favicons * Author=Winapp2.ini Project [Avira Secure Browser Caches *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Avira\Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\Avira\Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Avira\Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Avira\Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Avira\Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Avira\Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Avira\Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Avira\Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Avira\Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Avira\Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Avira\Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Avira\Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Avira\Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Avira\Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Avira\Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Avira\Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Avira\Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Avira\Browser\User Data\Optimization*|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Caches * Author=Winapp2.ini Project [Avira Secure Browser Default App Handlers *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|PreferredApps Tags=Avira,Browser ID=Avira Secure Browser Default App Handlers * Author=Winapp2.ini Project [Avira Secure Browser Download History *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Avira\Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Download History * Author=Winapp2.ini Project [Avira Secure Browser DRM Data *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Avira\Browser\User Data\WidevineCdm|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser DRM Data * Author=Winapp2.ini Project [Avira Secure Browser Extension Cookies *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|Extension Cookies Tags=Avira,Browser ID=Avira Secure Browser Extension Cookies * Author=Winapp2.ini Project [Avira Secure Browser Pinned Tabs *] DetectFile=%LocalAppData%\Avira\Browser\User Data RegKey1=HKCU\Software\Avira\Browser\PreferenceMACs\Default|pinned_tabs Tags=Avira,Browser ID=Avira Secure Browser Pinned Tabs * Author=Winapp2.ini Project [Avira Secure Browser Privacy Sandbox *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Avira\Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Avira\Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Avira\Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Avira\Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Avira\Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Avira\Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Avira\Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Privacy Sandbox * Author=Winapp2.ini Project [Avira Secure Browser Progressive Web Apps *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\Web Applications|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Progressive Web Apps * Author=Winapp2.ini Project [Avira Secure Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|Login Data* Tags=Avira,Browser ID=Avira Secure Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Avira Secure Browser Security & Threat Detection *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\Avira\Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Avira\Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Avira\Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Avira\Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Avira\Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Avira\Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Avira\Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Avira\Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Avira\Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Avira\Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Avira\Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Security & Threat Detection * Author=Winapp2.ini Project [Avira Secure Browser Shopping Insights *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Avira\Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Avira\Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Avira\Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Avira\Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Shopping Insights * Author=Winapp2.ini Project [Avira Secure Browser Storage Quota Manager *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|QuotaManager Tags=Avira,Browser ID=Avira Secure Browser Storage Quota Manager * Author=Winapp2.ini Project [Avira Secure Browser Sync Data *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\Sync Data|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Sync Data * Author=Winapp2.ini Project [Avira Secure Browser Telemetry *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\Application|debug.log FileKey2=%LocalAppData%\Avira\Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Avira\Browser\CrashReports|*|REMOVESELF FileKey4=%LocalAppData%\Avira\Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey5=%LocalAppData%\Avira\Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Avira\Browser\User Data\*|*.log FileKey7=%LocalAppData%\Avira\Browser\User Data\*\DataSharing|*|REMOVESELF FileKey8=%LocalAppData%\Avira\Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey9=%LocalAppData%\Avira\Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%LocalAppData%\Avira\Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey11=%LocalAppData%\Avira\Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey12=%LocalAppData%\Avira\Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey13=%LocalAppData%\Avira\Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey14=%LocalAppData%\Avira\Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey15=%LocalAppData%\Avira\Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey16=%LocalAppData%\Avira\Browser\User Data\Crash Reports|*|REMOVESELF FileKey17=%LocalAppData%\Avira\Browser\User Data\Crashpad|*|REMOVESELF FileKey18=%LocalAppData%\Avira\Browser\User Data\Local Traces|*|REMOVESELF FileKey19=%LocalAppData%\Avira\Browser\User Data\OriginTrials|*|REMOVESELF FileKey20=%LocalAppData%\Avira\Browser\User Data\Stability|*|REMOVESELF FileKey21=%ProgramFiles%\Avira\Browser\Application|debug.log FileKey22=%ProgramFiles%\Avira\Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Avira\Browser\BlBeacon|failed_count RegKey2=HKCU\Software\Avira\Browser\BlBeacon|state RegKey3=HKCU\Software\Avira\Browser\Installer|LastChecked RegKey4=HKCU\Software\Avira\Browser\StabilityMetrics Tags=Avira,Browser ID=Avira Secure Browser Telemetry * Author=Winapp2.ini Project [Avira Secure Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Avira,Browser ID=Avira Secure Browser Web Browsing Cookies * Author=Winapp2.ini Project [Avira Secure Browser Web Browsing History *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Avira,Browser ID=Avira Secure Browser Web Browsing History * Author=Winapp2.ini Project [Avira Secure Browser Web Browsing Session *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Avira\Browser\User Data\*\Sessions|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Web Browsing Session * Author=Winapp2.ini Project [Avira Secure Browser Web Storage *] DetectFile=%LocalAppData%\Avira\Browser\User Data FileKey1=%LocalAppData%\Avira\Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Avira\Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Avira\Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Avira\Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Avira\Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Avira\Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Avira\Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Avira\Browser\User Data\*\WebStorage|*|REMOVESELF Tags=Avira,Browser ID=Avira Secure Browser Web Storage * Author=Winapp2.ini Project [Avira System Speedup *] DetectFile=%ProgramData%\Avira\SystemSpeedup FileKey1=%LocalAppData%\AviraSpeedup\logs|* FileKey2=%ProgramData%\Avira\Launcher\Logfiles|*.log FileKey3=%ProgramData%\Avira\SystemSpeedup\Errors|* FileKey4=%ProgramData%\Avira\SystemSpeedup\Logs|* FileKey5=%ProgramData%\Avira\SystemSpeedup\Update|*.exe Tags=ccutil ID=Avira System Speedup * Author=Winapp2.ini Project [AVS Audio Converter *] DetectFile=%AppData%\AVS4YOU\AVSAudioConverter* FileKey1=%AppData%\AVS4YOU\AVSAudioConverter*|*.log;RecentFiles.* Tags=ccmedia ID=AVS Audio Converter * Author=Winapp2.ini Project [AVS Audio Editor *] DetectFile=%AppData%\AVS4YOU\AVSAudioEditor FileKey1=%AppData%\AVS4YOU\AVSAudioEditor|*.log;Recent*.txt FileKey2=%AppData%\AVS4YOU\AVSAudioEditor\Temp|* Tags=ccmedia ID=AVS Audio Editor * Author=Winapp2.ini Project [AVS Registry Cleaner *] DetectFile=%AppData%\AVS4YOU\AVSRegistryCleaner FileKey1=%AppData%\AVS4YOU\AVSRegistryCleaner\Logs|*.log FileKey2=%AppData%\AVS4YOU\AVSRegistryCleaner\RollBack|*|RECURSE Tags=ccutil ID=AVS Registry Cleaner * Author=Winapp2.ini Project [AxCrypt *] DetectFile=%LocalAppData%\AxCrypt FileKey1=%LocalAppData%\AxCrypt|ReportSnapshot.txt Tags=ccutil ID=AxCrypt * Author=Winapp2.ini Project [Axialis CursorWorkshop *] Detect=HKCU\Software\Axialis\CursorWorkshop RegKey1=HKCU\Software\Axialis\CursorWorkshop\Axialis Recent Files RegKey2=HKCU\Software\Axialis\CursorWorkshop\folders|CurrentOpenDirectory RegKey3=HKCU\Software\Axialis\CursorWorkshop\folders|LibrarianLastPath Tags=ccmedia ID=Axialis CursorWorkshop * Author=Winapp2.ini Project [Axialis IconVectors *] Detect=HKCU\Software\Axialis\IconVectors RegKey1=HKCU\Software\Axialis\IconVectors|file1 RegKey2=HKCU\Software\Axialis\IconVectors|file2 RegKey3=HKCU\Software\Axialis\IconVectors|file3 RegKey4=HKCU\Software\Axialis\IconVectors|file4 RegKey5=HKCU\Software\Axialis\IconVectors|file5 RegKey6=HKCU\Software\Axialis\IconVectors|file6 RegKey7=HKCU\Software\Axialis\IconVectors|file7 RegKey8=HKCU\Software\Axialis\IconVectors|file8 RegKey9=HKCU\Software\Axialis\IconVectors|file9 RegKey10=HKCU\Software\Axialis\IconVectors|file10 RegKey11=HKCU\Software\Axialis\IconVectors|file11 RegKey12=HKCU\Software\Axialis\IconVectors|file12 RegKey13=HKCU\Software\Axialis\IconVectors|file13 RegKey14=HKCU\Software\Axialis\IconVectors|file14 RegKey15=HKCU\Software\Axialis\IconVectors|file15 RegKey16=HKCU\Software\Axialis\IconVectors|file16 RegKey17=HKCU\Software\Axialis\IconVectors|file17 RegKey18=HKCU\Software\Axialis\IconVectors|file18 RegKey19=HKCU\Software\Axialis\IconVectors|file19 RegKey20=HKCU\Software\Axialis\IconVectors|file20 RegKey21=HKCU\Software\Axialis\IconVectors\folders|CurrentOpenDirectory RegKey22=HKCU\Software\Axialis\IconVectors\folders|LibrarianLastPath Tags=ccmedia ID=Axialis IconVectors * Author=Winapp2.ini Project [Axialis IconWorkshop *] Detect=HKCU\Software\Axialis\IconWorkshop FileKey1=%AppData%\Axialis\Temporary Preview Files|*|RECURSE FileKey2=%LocalAppData%\Axialis\Temporary Preview Files|*|RECURSE FileKey3=%UserProfile%\Documents\Axialis Librarian\Deleted Items|*.del;*.ii RegKey1=HKCU\Software\Axialis\IconWorkshop\folders|CurrentExportDirectory RegKey2=HKCU\Software\Axialis\IconWorkshop\folders|CurrentImportDirectory RegKey3=HKCU\Software\Axialis\IconWorkshop\folders|CurrentOpenDirectory RegKey4=HKCU\Software\Axialis\IconWorkshop\folders|LibrarianLastPath RegKey5=HKCU\Software\Axialis\IconWorkshop\rss|Axialis Recent Files RegKey6=HKCU\Software\Axialis\IconWorkshop\rss|CoolBarList RegKey7=HKCU\Software\Axialis\IconWorkshop\rss|MostRecentNewsId RegKey8=HKCU\Software\Axialis\IconWorkshop\rss|News1 RegKey9=HKCU\Software\Axialis\IconWorkshop\rss|News2 RegKey10=HKCU\Software\Axialis\IconWorkshop\rss|News3 RegKey11=HKCU\Software\Axialis\IconWorkshop\rss|News4 RegKey12=HKCU\Software\Axialis\IconWorkshop\rss|News5 RegKey13=HKCU\Software\Axialis\IconWorkshop\rss|News6 RegKey14=HKCU\Software\Axialis\IconWorkshop\rss|News7 RegKey15=HKCU\Software\Axialis\IconWorkshop\rss|News8 RegKey16=HKCU\Software\Axialis\IconWorkshop\rss|News9 RegKey17=HKCU\Software\Axialis\IconWorkshop\rss|News10 RegKey18=HKCU\Software\Axialis\IconWorkshop\rss|News11 RegKey19=HKCU\Software\Axialis\IconWorkshop\rss|News12 RegKey20=HKCU\Software\Axialis\IconWorkshop\rss|News13 RegKey21=HKCU\Software\Axialis\IconWorkshop\rss|News14 RegKey22=HKCU\Software\Axialis\IconWorkshop\rss|News15 RegKey23=HKCU\Software\Axialis\IconWorkshop\rss|News16 RegKey24=HKCU\Software\Axialis\IconWorkshop\rss|News17 RegKey25=HKCU\Software\Axialis\IconWorkshop\rss|News18 RegKey26=HKCU\Software\Axialis\IconWorkshop\rss|News19 RegKey27=HKCU\Software\Axialis\IconWorkshop\rss|News20 RegKey28=HKCU\Software\Axialis\IconWorkshop\rss|Recent File List RegKey29=HKCU\Software\Axialis\IconWorkshop\rss|UnreadNews Tags=ccmedia ID=Axialis IconWorkshop * Author=Winapp2.ini Project [Axialis Screensaver Producer *] Detect=HKCU\Software\Axialis\Screensaver Producer FileKey1=%LocalAppData%\Axialis\Temporary Preview Files|*|RECURSE RegKey1=HKCU\Software\Axialis\Screensaver Producer\folders|CurrentOpenDirectory RegKey2=HKCU\Software\Axialis\Screensaver Producer\folders|LibrarianLastPath RegKey3=HKCU\Software\Axialis\Screensaver Producer\Recent File List RegKey4=HKCU\Software\Axialis\Screensaver Producer\rss|MostRecentNewsId RegKey5=HKCU\Software\Axialis\Screensaver Producer\rss|News1 RegKey6=HKCU\Software\Axialis\Screensaver Producer\rss|News2 RegKey7=HKCU\Software\Axialis\Screensaver Producer\rss|News3 RegKey8=HKCU\Software\Axialis\Screensaver Producer\rss|News4 RegKey9=HKCU\Software\Axialis\Screensaver Producer\rss|News5 RegKey10=HKCU\Software\Axialis\Screensaver Producer\rss|News6 RegKey11=HKCU\Software\Axialis\Screensaver Producer\rss|News7 RegKey12=HKCU\Software\Axialis\Screensaver Producer\rss|News8 RegKey13=HKCU\Software\Axialis\Screensaver Producer\rss|News9 RegKey14=HKCU\Software\Axialis\Screensaver Producer\rss|News10 RegKey15=HKCU\Software\Axialis\Screensaver Producer\rss|News11 RegKey16=HKCU\Software\Axialis\Screensaver Producer\rss|News12 RegKey17=HKCU\Software\Axialis\Screensaver Producer\rss|News13 RegKey18=HKCU\Software\Axialis\Screensaver Producer\rss|News14 RegKey19=HKCU\Software\Axialis\Screensaver Producer\rss|News15 RegKey20=HKCU\Software\Axialis\Screensaver Producer\rss|News16 RegKey21=HKCU\Software\Axialis\Screensaver Producer\rss|News17 RegKey22=HKCU\Software\Axialis\Screensaver Producer\rss|News18 RegKey23=HKCU\Software\Axialis\Screensaver Producer\rss|News19 RegKey24=HKCU\Software\Axialis\Screensaver Producer\rss|News20 RegKey25=HKCU\Software\Axialis\Screensaver Producer\rss|UnreadNews Tags=ccmedia ID=Axialis Screensaver Producer * Author=Winapp2.ini Project [Axigen Mail Server *] DetectFile=%ProgramFiles%\Axigen Mail Server FileKey1=%ProgramFiles%\Axigen Mail Server\Log|LOG_FILE.txt Tags=ccinternet ID=Axigen Mail Server * Author=Winapp2.ini Project [Azahar *] DetectFile=%AppData%\Azahar FileKey1=%AppData%\Azahar\log|azahar_log* Tags=ccapps ID=Azahar * Author=Winapp2.ini Project [AzureWave *] DetectFile=%ProgramData%\AzureWave FileKey1=%ProgramData%\AzureWave|*.log Tags=ccinternet ID=AzureWave * Author=Winapp2.ini Project [Babylon *] Detect=HKCU\Software\Babylon\Babylon Translator FileKey1=%AppData%\Babylon|log_file.txt RegKey1=HKCU\Software\Babylon\Babylon Translator\UserInfo\History Tags=ccutil ID=Babylon * Author=Winapp2.ini Project [Backyard Basketball 2004 *] DetectFile=%ProgramFiles%\Atari\Backyard Basketball 2004 FileKey1=%ProgramFiles%\Atari\Backyard Basketball 2004|*.log Tags=ccapps ID=Backyard Basketball 2004 * Author=Winapp2.ini Project [Bad Piggies *] DetectFile=%ProgramFiles%\Rovio\Bad Piggies FileKey1=%ProgramFiles%\Rovio\Bad Piggies\BadPiggies_Data|output_log.txt Tags=ccapps ID=Bad Piggies * Author=Winapp2.ini Project [Badlion Client *] DetectFile=%AppData%\Badlion Client FileKey1=%AppData%\Badlion Client|*.log FileKey2=%AppData%\Badlion Client\GPUCache|* FileKey3=%AppData%\Badlion Client\logs\launcher|* Tags=ccapps ID=Badlion Client * Author=Winapp2.ini Project [Baldur's Gate 3 *] DetectFile=%ProgramFiles%\Steam\steamapps\common\Baldur's Gate 3 FileKey1=%ProgramFiles%\Steam\steamapps\common\Baldur's Gate 3\bin|*.log|RECURSE Tags=ccapps ID=Baldur's Gate 3 * Author=Winapp2.ini Project [Baldur's Gate II: Enhanced Edition *] DetectFile=%UserProfile%\Documents\Baldur's Gate II - Enhanced Edition FileKey1=%UserProfile%\Documents\Baldur's Gate II - Enhanced Edition\Scrnshot|*.png Tags=ccapps ID=Baldur's Gate II: Enhanced Edition * Author=Winapp2.ini Project [Banished *] Detect=HKCU\Software\Valve\Steam\Apps\242920 FileKey1=%UserProfile%\Documents\Banished\Save|Crash*.dmp Tags=ccapps ID=Banished * Author=Winapp2.ini Project [Basilisk Autocomplete History *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|formhistory* Tags=ccapps ID=Basilisk Autocomplete History * Author=Winapp2.ini Project [Basilisk Autofill Data *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|autofill-profiles.json Tags=ccapps ID=Basilisk Autofill Data * Author=Winapp2.ini Project [Basilisk Bookmark Backups *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Basilisk Bookmark Backups * Author=Winapp2.ini Project [Basilisk Bookmark Favicons *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|favicons* Tags=ccapps ID=Basilisk Bookmark Favicons * Author=Winapp2.ini Project [Basilisk Caches *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\notificationstore|* FileKey4=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\security_state|* FileKey5=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\shader-cache|* FileKey6=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Basilisk-Dev\Basilisk\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Basilisk-Dev\Basilisk\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Basilisk-Dev\Basilisk\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Basilisk Caches * Author=Winapp2.ini Project [Basilisk Privacy Sandbox *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Basilisk Privacy Sandbox * Author=Winapp2.ini Project [Basilisk Saved Usernames & Passwords *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|key4.db;logins.json Tags=ccapps ID=Basilisk Saved Usernames & Passwords * Author=Winapp2.ini Project [Basilisk Synced Tabs *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|synced-tabs.db* Tags=ccapps ID=Basilisk Synced Tabs * Author=Winapp2.ini Project [Basilisk Telemetry *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk|*.log|RECURSE FileKey2=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\crashes|* FileKey4=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\minidumps|* FileKey6=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\weave\logs|* Tags=ccapps ID=Basilisk Telemetry * Author=Winapp2.ini Project [Basilisk Web Browsing Cookies *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|cookies* Tags=ccapps ID=Basilisk Web Browsing Cookies * Author=Winapp2.ini Project [Basilisk Web Browsing Session *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|session*.json* Tags=ccapps ID=Basilisk Web Browsing Session * Author=Winapp2.ini Project [Basilisk Web Browsing Session Backups *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Basilisk Web Browsing Session Backups * Author=Winapp2.ini Project [Basilisk Web Storage *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Basilisk Web Storage * Author=Winapp2.ini Project [Basilisk Website Permissions *] DetectFile=%AppData%\Basilisk-Dev\Basilisk\Profiles FileKey1=%AppData%\Basilisk-Dev\Basilisk\Profiles\*|permissions.sqlite Tags=ccapps ID=Basilisk Website Permissions * Author=Winapp2.ini Project [Batman: Arkham Asylum *] Detect1=HKLM\Software\Eidos Interactive Limited\Batman: Arkham Asylum Detect2=HKLM\Software\RocksteadyLtd\Batman Arkham Asylum FileKey1=%UserProfile%\Documents\*\Batman Arkham Asylum*\BmGame|*.log|RECURSE Tags=ccapps ID=Batman: Arkham Asylum * Author=Winapp2.ini Project [Batman: Arkham City *] DetectFile=%UserProfile%\Documents\WB Games\Batman Arkham City* FileKey1=%UserProfile%\Documents\WB Games\Batman Arkham City*\BmGame\Logs|* Tags=ccapps ID=Batman: Arkham City * Author=Winapp2.ini Project [Batman: Arkham Origins *] DetectFile=%ProgramFiles%\Steam\steamapps\common\Batman Arkham Origins FileKey1=%ProgramFiles%\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Logs|* Tags=ccapps ID=Batman: Arkham Origins * Author=Winapp2.ini Project [Battle Islands *] Detect=HKCU\Software\Valve\Steam\Apps\305260 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Battle Islands\BattleIslands_Data|output_log.txt Tags=ccapps ID=Battle Islands * Author=Winapp2.ini Project [Battle.net *] Detect=HKCU\Software\Blizzard Entertainment\Battle.net FileKey1=%AppData%\Battle.net\Telemetry|* FileKey2=%LocalAppData%\Battle.net|CachedData.db FileKey3=%LocalAppData%\Battle.net\*Cache|*|REMOVESELF FileKey4=%LocalAppData%\Battle.net\BrowserCaches\common|*|RECURSE FileKey5=%LocalAppData%\Battle.net\Errors|* FileKey6=%LocalAppData%\Battle.net\Logs|*|RECURSE FileKey7=%LocalAppData%\Blizzard Entertainment\Battle.net\Cache|*|RECURSE FileKey8=%LocalAppData%\Blizzard Entertainment\System Survey|*.log;log.txt|RECURSE FileKey9=%LocalAppData%\Blizzard Entertainment\Telemetry|* FileKey10=%ProgramData%\Battle.net|*.log|RECURSE FileKey11=%ProgramData%\Battle.net\*\Logs|*|RECURSE FileKey12=%ProgramData%\Battle.net\Agent\Agent.*\Logs|*|RECURSE FileKey13=%ProgramData%\Battle.net\Agent\data\*cache|*|RECURSE FileKey14=%ProgramData%\Battle.net\Client\Blizzard Launcher.*\Logs|*|RECURSE FileKey15=%ProgramData%\Battle.net\Setup\*\Logs|* FileKey16=%ProgramData%\Battle.net\Telemetry|* FileKey17=%ProgramData%\Battle.net_components\battlenet_helpersvc\Logs|* FileKey18=%ProgramData%\Blizzard Entertainment\Battle.net\Cache|*|RECURSE FileKey19=%ProgramFiles%\Blizzard App\Logs|*.log Tags=ccapps ID=Battle.net * Author=Winapp2.ini Project [BDtoAVCHD *] DetectFile=%ProgramFiles%\BDtoAVCHD FileKey1=%ProgramFiles%\BDtoAVCHD\*ac3to|log.txt Tags=ccmedia ID=BDtoAVCHD * Author=Winapp2.ini Project [Be My Eyes *] DetectFile=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt FileKey1=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\Be My Eyes\EBWebView\ZxcvbnData|*|REMOVESELF FileKey66=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\LocalCache\Local\BeMyEyes\Be My Eyes\logs|* FileKey67=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\Settings|*.log* FileKey68=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\BeMyEyes.BeMyEyes_7yeb8xxw19svt\TempState|*|REMOVESELF Tags=ccapps ID=Be My Eyes * Author=Winapp2.ini Project [BeamNG.drive *] DetectFile=%UserProfile%\Documents\BeamNG.drive FileKey1=%UserProfile%\Documents\BeamNG.drive|*.log Tags=ccapps ID=BeamNG.drive * Author=Winapp2.ini Project [Beckhoff TwinCat *] Detect=HKCU\Software\Beckhoff FileKey1=%SystemDrive%\TwinCAT\3.1\Components\TcEventLogger\EventConfigurator|~evtCfgTmp*.html FileKey2=%UserProfile%|*TwinCat*.log;TC*.log;TF*.log Tags=ccapps ID=Beckhoff TwinCat * Author=Winapp2.ini Project [Behringer SYNTHTRIBE *] DetectFile=%LocalAppData%\Behringer\Synthtribe FileKey1=%LocalAppData%\Behringer\Synthtribe\Cache\qmlcache|* Tags=ccmedia ID=Behringer SYNTHTRIBE * Author=Winapp2.ini Project [Belarc Advisor *] Detect=HKCU\Software\Belarc FileKey1=%ProgramFiles%\Belarc\*Advisor|*.bci;install.log FileKey2=%ProgramFiles%\Belarc\*Advisor\System|Progress.Log FileKey3=%ProgramFiles%\Belarc\*Advisor\System\Security\BelNotify|*.log FileKey4=%ProgramFiles%\Belarc\*Advisor\System\Tmp|* Tags=ccutil ID=Belarc Advisor * Author=Winapp2.ini Project [Benthic PLEdit *] Detect=HKCU\Software\Benthic\PLEdit32 RegKey1=HKCU\Software\Benthic\PLEdit32\RecentFiles Tags=ccutil ID=Benthic PLEdit * Author=Winapp2.ini Project [Betrayer *] Detect=HKCU\Software\Valve\Steam\Apps\243120 FileKey1=%UserProfile%\Documents\Betrayer\UDKGame\Logs|* Tags=ccapps ID=Betrayer * Author=Winapp2.ini Project [Big City Adventure *] DetectFile=%ProgramData%\JollyBear\Big City Adventure * FileKey1=%ProgramData%\JollyBear\Big City Adventure *|error.* Tags=ccapps ID=Big City Adventure * Author=Winapp2.ini Project [Big Fish Games *] Detect=HKCU\Software\Big Fish Games FileKey1=%ProgramData%\Big Fish Games\Game Manager\resources-old|*|RECURSE FileKey2=%ProgramData%\Big Fish\Game Manager\Addons\BFGameLauncher|*.log|RECURSE FileKey3=%ProgramData%\BigFishCache|*.exe|RECURSE FileKey4=%ProgramData%\BigFishCache\GameManager\log|*.txt|RECURSE FileKey5=%ProgramData%\BigFishGamesCache\GameManager\log|* Tags=ccapps ID=Big Fish Games * Author=Winapp2.ini Project [BiglyBT *] Detect=HKCU\Software\BiglyBT FileKey1=%AppData%\BiglyBT|ipfilter.cache FileKey2=%AppData%\BiglyBT\active|*.bak FileKey3=%AppData%\BiglyBT\logs|* FileKey4=%AppData%\BiglyBT\tmp|* FileKey5=%ProgramFiles%\BiglyBT|*.log|RECURSE Tags=ccinternet ID=BiglyBT * Author=Winapp2.ini Project [BioShock Infinite *] DetectFile=%UserProfile%\Documents\My Games\BioShock Infinite FileKey1=%UserProfile%\Documents\My Games\BioShock Infinite\Benchmarks|* Tags=ccapps ID=BioShock Infinite * Author=Winapp2.ini Project [Bit Dungeon III *] DetectFile=%UserProfile%\AppData\LocalLow\KintoGames\bd3 FileKey1=%UserProfile%\AppData\LocalLow\KintoGames\bd3\Unity|*|REMOVESELF Tags=ccapps ID=Bit Dungeon III * Author=Winapp2.ini Project [BIT.TRIP *] DetectFile=%LocalAppData%\BIT.TRIP * FileKey1=%LocalAppData%\BIT.TRIP *|*.txt Tags=ccapps ID=BIT.TRIP * Author=Winapp2.ini Project [Bitcoin *] DetectFile=%AppData%\Bitcoin FileKey1=%AppData%\Bitcoin|*.log;*.old Tags=ccinternet ID=Bitcoin * Author=Winapp2.ini Project [Bitdefender *] Detect1=HKLM\Software\Bitdefender\Bitdefender Internet Security Detect2=HKLM\Software\Bitdefender\Bitdefender Total Security Detect3=HKLM\Software\Bitdefender\Bitdefender Total Security 2015 Detect4=HKLM\Software\Softwin\Bitdefender Antivirus FileKey1=%AppData%\Bitdefender\Desktop\profiles\Logs\*|*.xml FileKey2=%ProgramData%\Bitdefender\DTrace|*.log FileKey3=%ProgramFiles%\Softwin\Bitdefender*\Logs|* FileKey4=%SystemDrive%|bdlog.txt Tags=ccutil ID=Bitdefender * Author=Winapp2.ini Project [BitTorrent *] DetectFile1=%AppData%\BitTorrent DetectFile2=%ProgramFiles%\BitTorrent FileKey1=%AppData%\BitTorrent\ie|*.tmp FileKey2=%AppData%\BitTorrent\Updates|*.exe|REMOVESELF FileKey3=%UserProfile%\AppData\LocalLow\BitTorrent|BitTorrent_* Tags=ccinternet ID=BitTorrent * Author=Winapp2.ini Project [BitTorrent Incomplete Downloads *] Detect=HKCU\Software\BitTorrent FileKey1=%AppData%\BitTorrent\incomplete|* Tags=ccinternet ID=BitTorrent Incomplete Downloads * Author=Winapp2.ini Project [Bitwarden *] DetectFile=%AppData%\Bitwarden FileKey1=%AppData%\Bitwarden|*-journal;*.old;LOG;Network Persistent State;Visited Links|RECURSE FileKey2=%AppData%\Bitwarden\*Cache|*|RECURSE FileKey3=%AppData%\Bitwarden\Bitwarden\Logs|* FileKey4=%AppData%\Bitwarden\blob_storage|*|RECURSE FileKey5=%AppData%\Bitwarden\Logs|* FileKey6=%LocalAppData%\Bitwarden-Updater|package.7z Tags=ccutil ID=Bitwarden * Author=Winapp2.ini Project [bkspot BatteryCare *] DetectFile=%AppData%\BatteryCare FileKey1=%AppData%\BatteryCare|log.txt Tags=ccutil ID=bkspot BatteryCare * Author=Winapp2.ini Project [BlackBeltPrivacy DarkNet *] DetectFile=%LocalAppData%\BlackBeltPrivacy FileKey1=%AppData%\i2pd|i2pd.log FileKey2=%LocalAppData%\BlackBeltPrivacy\3rdParty|*|REMOVESELF FileKey3=%LocalAppData%\BlackBeltPrivacy\DarkNet\logs|*|RECURSE FileKey4=%LocalAppData%\BlackBeltPrivacy\Docs|* FileKey5=%LocalAppData%\BlackBeltPrivacy\Logs|*|RECURSE FileKey6=%LocalAppData%\BlackBeltPrivacy\MicroSip|MicroSIP.log ExcludeKey1=FILE|%LocalAppData%\BlackBeltPrivacy\Docs\|readme.pdf Tags=ccmedia ID=BlackBeltPrivacy DarkNet * Author=Winapp2.ini Project [BlackBerry Desktop *] Detect=HKCU\Software\Research In Motion\BlackBerry FileKey1=%AppData%|Rim*.log FileKey2=%AppData%\Research In Motion\BlackBerry Desktop|*.dmp FileKey3=%AppData%\Research In Motion\BlackBerry\AddinSync|sync.log FileKey4=%AppData%\Research In Motion\BlackBerry\Intellisync|*.log|RECURSE FileKey5=%LocalAppData%\Research In Motion\BlackBerry*Desktop\*\*|*.backup FileKey6=%LocalAppData%\Research In Motion\BlackBerry*Desktop\*\*\Log|*.html FileKey7=%LocalAppData%\Research In Motion\BlackBerry*Desktop\Logs|*|REMOVESELF Tags=ccmedia ID=BlackBerry Desktop * Author=Winapp2.ini Project [Blackmagic Design DaVinci Resolve *] Detect=HKCU\SOFTWARE\Blackmagic Design\DaVinci Resolve FileKey1=%AppData%\Blackmagic Design\DaVinci Resolve\Support\logs|*|REMOVESELF FileKey2=%ProgramData%\Blackmagic Design\DaVinci Resolve\Support\logs|*|REMOVESELF Tags=ccmedia ID=Blackmagic Design DaVinci Resolve * Author=Winapp2.ini Project [Blade Symphony *] DetectFile=%ProgramFiles%\Steam\Steamapps\common\Blade Symphony FileKey1=%ProgramFiles%\Steam\Steamapps\common\Blade Symphony\workshop_temp|*|RECURSE Tags=ccapps ID=Blade Symphony * Author=Winapp2.ini Project [Blades of Time *] DetectFile=%LocalAppData%\BladesOfTime FileKey1=%LocalAppData%\BladesOfTime\_debuginfo|* Tags=ccapps ID=Blades of Time * Author=Winapp2.ini Project [BleachBit *] Detect=HKCU\Software\BleachBit FileKey1=%ProgramFiles%\BleachBit|bleachbit.exe.log Tags=ccutil ID=BleachBit * Author=Winapp2.ini Project [Blender *] Detect=HKLM\Software\BlenderFoundation FileKey1=%AppData%\Blender Foundation\Blender\*\config|recent-files.txt Tags=ccmedia ID=Blender * Author=Winapp2.ini Project [Blood Bowl: Legendary Edition *] DetectFile=%UserProfile%\Documents\BloodBowlLegendary FileKey1=%UserProfile%\Documents\BloodBowlLegendary|*.log FileKey2=%UserProfile%\Documents\BloodBowlLegendary\Cache\3d|*|REMOVESELF FileKey3=%UserProfile%\Documents\BloodBowlLegendary\Cache\DB|*|REMOVESELF Tags=ccapps ID=Blood Bowl: Legendary Edition * Author=Winapp2.ini Project [Bloodstained: Ritual of the Night *] DetectFile=%LocalAppData%\BloodstainedRotN FileKey1=%LocalAppData%\BloodstainedRotN\Saved\Logs|*|RECURSE Tags=ccapps ID=Bloodstained: Ritual of the Night * Author=Winapp2.ini Project [Blue Prince *] DetectFile=%UserProfile%\AppData\LocalLow\Dogubomb\BLUE PRINCE FileKey1=%ProgramFiles%\Steam\steamapps\common\Blue Prince\MelonLoader|*.log|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\Dogubomb\BLUE PRINCE|*log Tags=ccapps ID=Blue Prince * Author=Winapp2.ini Project [Blueberry Software Camigo *] DetectFile=%AppData%\Blueberry Software\Camigo FileKey1=%AppData%\Blueberry Software\Camigo|*.bak;*stat.dat FileKey2=%ProgramData%\Blueberry Software\Camigo\Logs|*|REMOVESELF FileKey3=%ProgramFiles%\Blueberry Software\Camigo|*.log Tags=ccmedia ID=Blueberry Software Camigo * Author=Winapp2.ini Project [Blueberry Software FlashBack Express *] DetectFile=%AppData%\Blueberry Software\FlashbackExpress* FileKey1=%AppData%\Blueberry Software\FlashbackExpress*|*.bak;*stat.dat FileKey2=%AppData%\Blueberry Software\FlashbackExpress*\RecordThumbs|* FileKey3=%ProgramData%\Blueberry Software\FlashbackExpress*\Logs|*|REMOVESELF FileKey4=%ProgramFiles%\Blueberry Software\Flashback Express *|*.log Tags=ccmedia ID=Blueberry Software FlashBack Express * Author=Winapp2.ini Project [Blueberry Software FlashbackSDK *] DetectFile=%ProgramFiles%\Blueberry Software\FlashBack SDK 5 FileKey1=%ProgramFiles%\Blueberry Software\FlashBack SDK 5|install.log Tags=ccmedia ID=Blueberry Software FlashbackSDK * Author=Winapp2.ini Project [Blueberry Software FlashbackVideoConverter *] DetectFile=%AppData%\Blueberry Software\FlashbackVideoConverter FileKey1=%AppData%\Blueberry Software\FlashbackVideoConverter|*.bak;*stat.dat FileKey2=%AppData%\Blueberry Software\FlashbackVideoConverter\*Thumbs|* FileKey3=%ProgramData%\Blueberry Software\FlashbackVideoConverter\Logs|*|REMOVESELF FileKey4=%ProgramFiles%\Blueberry Software\Flashback Video Converter|install.log Tags=ccmedia ID=Blueberry Software FlashbackVideoConverter * Author=Winapp2.ini Project [BlueStacks *] DetectFile1=%AppData%\bluestacks-services DetectFile2=%ProgramData%\BlueStacks FileKey1=%AppData%\bluestacks-services\*Cache|*|RECURSE FileKey2=%LocalAppData%\BlueStacks|*.log FileKey3=%LocalAppData%\bluestacks-services-updater|* FileKey4=%LocalAppData%\BlueStacksSetup|BlueStacksInstaller*.exe FileKey5=%LocalAppData%\HD-Player\cache|*|RECURSE FileKey6=%ProgramData%\BlueStacks\CefData\Cache|*|RECURSE FileKey7=%ProgramData%\BlueStacks\Engine|*.log*|RECURSE FileKey8=%ProgramData%\BlueStacks\Logs|*.log|RECURSE FileKey9=%ProgramData%\BlueStacks_nxt\Dumps|*|RECURSE FileKey10=%ProgramData%\BlueStacksSetup|*.apk FileKey11=%UserProfile%\Pictures\BlueStacks|*_Screenshot_*.jpg Tags=ccapps ID=BlueStacks * Author=Winapp2.ini Project [Bluetack Blocklist Manager *] Detect=HKCU\Software\Bluetack\Blocklist Manager FileKey1=%ProgramFiles%\Bluetack\Blocklist Manager\Cache|* Tags=ccutil ID=Bluetack Blocklist Manager * Author=Winapp2.ini Project [Blumentals Easy GIF Animator *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Easy GIF Animator_is1 FileKey1=%ProgramFiles%\Easy GIF Animator|*.txt|RECURSE Tags=ccmedia ID=Blumentals Easy GIF Animator * Author=Winapp2.ini Project [Boilsoft Video Joiner *] DetectFile=%AppData%\Boilsoft Video Joiner FileKey1=%AppData%\Boilsoft Video Joiner\*Cache|*|RECURSE FileKey2=%AppData%\Boilsoft Video Joiner\tempDir|*|REMOVESELF FileKey3=%LocalAppData%\boilsoft-video-joiner-updater|* Tags=ccmedia ID=Boilsoft Video Joiner * Author=Winapp2.ini Project [Boilsoft Video Splitter *] DetectFile=%AppData%\Boilsoft Video Splitter FileKey1=%AppData%\Boilsoft Video Splitter\*Cache|*|RECURSE FileKey2=%AppData%\Boilsoft Video Splitter\tempDir|*|REMOVESELF FileKey3=%LocalAppData%\boilsoft-video-splitter-updater|* Tags=ccmedia ID=Boilsoft Video Splitter * Author=Winapp2.ini Project [BOINC Manager *] DetectFile=%LocalAppData%\BOINC Manager FileKey1=%LocalAppData%\BOINC Manager\EBWebView\*Cache|*|RECURSE FileKey2=%LocalAppData%\BOINC Manager\EBWebView\crashpad|*|RECURSE FileKey3=%LocalAppData%\BOINC Manager\EBWebView\Default\*Cache|*|RECURSE FileKey4=%ProgramData%\BOINC|std*.txt;time_stats_log FileKey5=%ProgramFiles%\BOINC|stderr*.*;stdout*.* Tags=ccutil ID=BOINC Manager * Author=Winapp2.ini Project [Borderlands *] DetectFile=%UserProfile%\Documents\My Games\Borderlands* FileKey1=%UserProfile%\Documents\My Games\Borderlands*\WillowGame\Logs|* Tags=ccapps ID=Borderlands * Author=Winapp2.ini Project [Borland C++ Builder 5.0 *] Detect=HKCU\Software\Borland\C++Builder\5.0 RegKey1=HKCU\Software\Borland\C++Builder\5.0\Closed Files RegKey2=HKCU\Software\Borland\C++Builder\5.0\Closed Projects RegKey3=HKCU\Software\Borland\C++Builder\5.0\Session Tags=ccutil ID=Borland C++ Builder 5.0 * Author=Winapp2.ini Project [Borland Delphi 7 *] Detect=HKCU\Software\Borland\Delphi\7.0 RegKey1=HKCU\Software\Borland\Delphi\7.0\Closed Files RegKey2=HKCU\Software\Borland\Delphi\7.0\Closed Projects RegKey3=HKCU\Software\Borland\Delphi\7.0\Session Tags=ccutil ID=Borland Delphi 7 * Author=Winapp2.ini Project [Borland Developer Studio 2006 *] Detect=HKCU\Software\Borland\BDS\4.0 RegKey1=HKCU\Software\Borland\BDS\4.0\Closed Files RegKey2=HKCU\Software\Borland\BDS\4.0\Closed Projects RegKey3=HKCU\Software\Borland\BDS\4.0\Session Tags=ccutil ID=Borland Developer Studio 2006 * Author=Winapp2.ini Project [Box Drive *] DetectFile=%LocalAppData%\Box\Box FileKey1=%LocalAppData%\Box\Box\logs|* FileKey2=%ProgramData%\Box\Box\Logs|* Tags=ccapps ID=Box Drive * Author=Winapp2.ini Project [Box For Office *] DetectFile=%LocalAppData%\Box\BoxforOffice* FileKey1=%LocalAppData%\Box\BoxforOfficeLogs|* Tags=ccapps ID=Box For Office * Author=Winapp2.ini Project [Brave Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|*Web Data FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\AutoFill*|*|REMOVESELF Tags=Brave,Browser ID=Brave Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Brave Autoplay Preferences *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\MEIPreload|*|REMOVESELF Tags=Brave,Browser ID=Brave Autoplay Preferences * Author=Winapp2.ini Project [Brave Bookmark Backups *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Bookmarks.bak Tags=Brave,Browser ID=Brave Bookmark Backups * Author=Winapp2.ini Project [Brave Bookmark Favicons *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|favicons* Tags=Brave,Browser ID=Brave Bookmark Favicons * Author=Winapp2.ini Project [Brave Caches *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|Module Info Cache FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Optimization*|*|REMOVESELF Tags=Brave,Browser ID=Brave Caches * Author=Winapp2.ini Project [Brave Default App Handlers *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|PreferredApps Tags=Brave,Browser ID=Brave Default App Handlers * Author=Winapp2.ini Project [Brave Download History *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\shared_proto_db|*|REMOVESELF Tags=Brave,Browser ID=Brave Download History * Author=Winapp2.ini Project [Brave DRM Data *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\WidevineCdm|*|REMOVESELF Tags=Brave,Browser ID=Brave DRM Data * Author=Winapp2.ini Project [Brave Extension Cookies *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Extension Cookies Tags=Brave,Browser ID=Brave Extension Cookies * Author=Winapp2.ini Project [Brave Origin Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|*Web Data FileKey2=%LocalAppData%\Brave-Origin\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Brave-Origin\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Brave Origin Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Brave Origin Autoplay Preferences *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Brave Origin Autoplay Preferences * Author=Winapp2.ini Project [Brave Origin Bookmark Backups *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|Bookmarks.bak Tags=ccapps ID=Brave Origin Bookmark Backups * Author=Winapp2.ini Project [Brave Origin Bookmark Favicons *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|favicons* Tags=ccapps ID=Brave Origin Bookmark Favicons * Author=Winapp2.ini Project [Brave Origin Caches *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Brave-Origin\User Data|Module Info Cache FileKey3=%LocalAppData%\Brave-Origin\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Brave-Origin\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Brave-Origin\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Brave-Origin\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Brave-Origin\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Brave-Origin\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Brave-Origin\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Brave-Origin\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Brave-Origin\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Brave-Origin\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Brave-Origin\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Brave-Origin\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Brave-Origin\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Brave-Origin\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Brave-Origin\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Brave-Origin\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Brave-Origin\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Brave Origin Caches * Author=Winapp2.ini Project [Brave Origin Default App Handlers *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|PreferredApps Tags=ccapps ID=Brave Origin Default App Handlers * Author=Winapp2.ini Project [Brave Origin Download History *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Brave-Origin\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Brave Origin Download History * Author=Winapp2.ini Project [Brave Origin DRM Data *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Brave-Origin\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Brave Origin DRM Data * Author=Winapp2.ini Project [Brave Origin Extension Cookies *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|Extension Cookies Tags=ccapps ID=Brave Origin Extension Cookies * Author=Winapp2.ini Project [Brave Origin Pinned Tabs *] DetectFile=%LocalAppData%\Brave-Origin\User Data RegKey1=HKCU\Software\BraveSoftware\Brave-Origin\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Brave Origin Pinned Tabs * Author=Winapp2.ini Project [Brave Origin Privacy Sandbox *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data|*first_party_sets* FileKey2=%LocalAppData%\Brave-Origin\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Brave-Origin\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Brave-Origin\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Brave-Origin\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Brave-Origin\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Brave-Origin\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Brave-Origin\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Brave Origin Privacy Sandbox * Author=Winapp2.ini Project [Brave Origin Progressive Web Apps *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Brave Origin Progressive Web Apps * Author=Winapp2.ini Project [Brave Origin Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|Login Data* Tags=ccapps ID=Brave Origin Saved Usernames & Passwords * Author=Winapp2.ini Project [Brave Origin Security & Threat Detection *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|DIPS* FileKey2=%LocalAppData%\Brave-Origin\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Brave-Origin\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Brave-Origin\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Brave-Origin\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Brave-Origin\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Brave-Origin\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Brave-Origin\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Brave-Origin\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Brave-Origin\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Brave-Origin\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Brave-Origin\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Brave Origin Security & Threat Detection * Author=Winapp2.ini Project [Brave Origin Shopping Insights *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Brave-Origin\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Brave-Origin\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Brave-Origin\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Brave-Origin\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Brave Origin Shopping Insights * Author=Winapp2.ini Project [Brave Origin Storage Quota Manager *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|QuotaManager Tags=ccapps ID=Brave Origin Storage Quota Manager * Author=Winapp2.ini Project [Brave Origin Sync Data *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Brave Origin Sync Data * Author=Winapp2.ini Project [Brave Origin Telemetry *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\Application|debug.log FileKey2=%LocalAppData%\Brave-Origin\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Brave-Origin\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Brave-Origin\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Brave-Origin\User Data\*|*.log FileKey6=%LocalAppData%\Brave-Origin\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Brave-Origin\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Brave-Origin\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Brave-Origin\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Brave-Origin\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Brave-Origin\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Brave-Origin\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Brave-Origin\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Brave-Origin\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Brave-Origin\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Brave-Origin\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Brave-Origin\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Brave-Origin\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Brave-Origin\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Brave-Origin\Application|debug.log FileKey21=%ProgramFiles%\Brave-Origin\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\BraveSoftware\Brave-Origin\BlBeacon|failed_count RegKey2=HKCU\Software\BraveSoftware\Brave-Origin\BlBeacon|state RegKey3=HKCU\Software\BraveSoftware\Brave-Origin\Installer|LastChecked RegKey4=HKCU\Software\BraveSoftware\Brave-Origin\StabilityMetrics Tags=ccapps ID=Brave Origin Telemetry * Author=Winapp2.ini Project [Brave Origin Web Browsing Cookies *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Brave Origin Web Browsing Cookies * Author=Winapp2.ini Project [Brave Origin Web Browsing History *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Brave Origin Web Browsing History * Author=Winapp2.ini Project [Brave Origin Web Browsing Session *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Brave-Origin\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Brave Origin Web Browsing Session * Author=Winapp2.ini Project [Brave Origin Web Storage *] DetectFile=%LocalAppData%\Brave-Origin\User Data FileKey1=%LocalAppData%\Brave-Origin\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Brave-Origin\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Brave-Origin\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Brave-Origin\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Brave-Origin\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Brave-Origin\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Brave-Origin\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Brave-Origin\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Brave Origin Web Storage * Author=Winapp2.ini Project [Brave Pinned Tabs *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* RegKey1=HKCU\Software\BraveSoftware\Brave-Browser\PreferenceMACs\Default|pinned_tabs RegKey2=HKCU\Software\BraveSoftware\Brave-Browser-Beta\PreferenceMACs\Default|pinned_tabs RegKey3=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\PreferenceMACs\Default|pinned_tabs Tags=Brave,Browser ID=Brave Pinned Tabs * Author=Winapp2.ini Project [Brave Privacy Sandbox *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|*first_party_sets* FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Brave,Browser ID=Brave Privacy Sandbox * Author=Winapp2.ini Project [Brave Progressive Web Apps *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Web Applications|*|REMOVESELF Tags=Brave,Browser ID=Brave Progressive Web Apps * Author=Winapp2.ini Project [Brave Saved Usernames & Passwords *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Login Data* Tags=Brave,Browser ID=Brave Saved Usernames & Passwords * Author=Winapp2.ini Project [Brave Security & Threat Detection *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|DIPS* FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\ZxcvbnData|*|REMOVESELF Tags=Brave,Browser ID=Brave Security & Threat Detection * Author=Winapp2.ini Project [Brave Shopping Insights *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Brave,Browser ID=Brave Shopping Insights * Author=Winapp2.ini Project [Brave Storage Quota Manager *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|QuotaManager Tags=Brave,Browser ID=Brave Storage Quota Manager * Author=Winapp2.ini Project [Brave Sync Data *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Sync Data|*|REMOVESELF Tags=Brave,Browser ID=Brave Sync Data * Author=Winapp2.ini Project [Brave Telemetry *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\Application|debug.log FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|*.log FileKey6=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Stability|*|REMOVESELF FileKey20=%LocalAppData%\BraveSoftware\CrashReports|*|REMOVESELF FileKey21=%ProgramFiles%\BraveSoftware\Brave-Browser*\Application|debug.log FileKey22=%ProgramFiles%\BraveSoftware\Brave-Browser*\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\BraveSoftware\Brave-Browser\BlBeacon|failed_count RegKey2=HKCU\Software\BraveSoftware\Brave-Browser\BlBeacon|state RegKey3=HKCU\Software\BraveSoftware\Brave-Browser\Installer|LastChecked RegKey4=HKCU\Software\BraveSoftware\Brave-Browser\StabilityMetrics RegKey5=HKCU\Software\BraveSoftware\Brave-Browser-Beta\BlBeacon|failed_count RegKey6=HKCU\Software\BraveSoftware\Brave-Browser-Beta\BlBeacon|state RegKey7=HKCU\Software\BraveSoftware\Brave-Browser-Beta\Installer|LastChecked RegKey8=HKCU\Software\BraveSoftware\Brave-Browser-Beta\StabilityMetrics RegKey9=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\BlBeacon|failed_count RegKey10=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\BlBeacon|state RegKey11=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\Installer|LastChecked RegKey12=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\StabilityMetrics Tags=Brave,Browser ID=Brave Telemetry * Author=Winapp2.ini Project [Brave Web Browsing Cookies *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Brave,Browser ID=Brave Web Browsing Cookies * Author=Winapp2.ini Project [Brave Web Browsing History *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Brave,Browser ID=Brave Web Browsing History * Author=Winapp2.ini Project [Brave Web Browsing Session *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Sessions|*|REMOVESELF Tags=Brave,Browser ID=Brave Web Browsing Session * Author=Winapp2.ini Project [Brave Web Storage *] DetectFile=%LocalAppData%\BraveSoftware\Brave-Browser* FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\WebStorage|*|REMOVESELF Tags=Brave,Browser ID=Brave Web Storage * Author=Winapp2.ini Project [Bree AI *] DetectFile=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva FileKey1=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva\LocalCache\Local\BreeAI\Logs|* FileKey3=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva\Settings|*.log* FileKey4=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\BREEAITECHPTE.LTD.BreeAI_z5nd0wyapdvva\TempState|*|REMOVESELF Tags=ccapps ID=Bree AI * Author=Winapp2.ini Project [Breevy *] DetectFile1=%AppData%\aBreevy8 DetectFile2=%AppData%\Breevy FileKey1=%AppData%\aBreevy8\Backups|* FileKey2=%AppData%\Breevy\Backups|* Tags=ccapps ID=Breevy * Author=Winapp2.ini Project [BreeZip *] DetectFile=%LocalAppData%\Packages\3138AweZip.AweZip_ffd303wmbhcjt FileKey1=%LocalAppData%\Packages\3138AweZip.AweZip_ffd303wmbhcjt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\3138AweZip.AweZip_ffd303wmbhcjt\Settings|*.log* FileKey3=%LocalAppData%\Packages\3138AweZip.AweZip_ffd303wmbhcjt\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\3138AweZip.AweZip_ffd303wmbhcjt\TempState|*|REMOVESELF Tags=ccapps ID=BreeZip * Author=Winapp2.ini Project [BriskBard Autofill Data & Search Engine Preferences *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|*Web Data FileKey2=%LocalAppData%\BriskBard\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\AutoFill*|*|REMOVESELF FileKey4=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|*Web Data FileKey5=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\AutoFill*|*|REMOVESELF FileKey6=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\AutoFill*|*|REMOVESELF Tags=ccapps ID=BriskBard Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [BriskBard Autoplay Preferences *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\MEIPreload|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\MEIPreload|*|REMOVESELF Tags=ccapps ID=BriskBard Autoplay Preferences * Author=Winapp2.ini Project [BriskBard Bookmark Backups *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|Bookmarks.bak FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|Bookmarks.bak Tags=ccapps ID=BriskBard Bookmark Backups * Author=Winapp2.ini Project [BriskBard Bookmark Favicons *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|favicons* FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|favicons* Tags=ccapps ID=BriskBard Bookmark Favicons * Author=Winapp2.ini Project [BriskBard Caches *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard|*-journal|RECURSE FileKey2=%LocalAppData%\BriskBard|Module Info Cache FileKey3=%LocalAppData%\BriskBard\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\BriskBard\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\BriskBard\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\BriskBard\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\BriskBard\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\BriskBard\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\BriskBard\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\BriskBard\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\BriskBard\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\BriskBard\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\BriskBard\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\BriskBard\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\BriskBard\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\BriskBard\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\BriskBard\Optimization*|*|REMOVESELF FileKey20=%LocalAppData%\BriskBard\WebView\UserData\EBWebView|*-journal|RECURSE FileKey21=%LocalAppData%\BriskBard\WebView\UserData\EBWebView|Module Info Cache FileKey22=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey23=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\*Cache*|*|REMOVESELF FileKey24=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\blob_storage|*|REMOVESELF FileKey25=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\BudgetDatabase|*|REMOVESELF FileKey26=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Download Service|*|REMOVESELF FileKey27=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\File System|*|REMOVESELF FileKey28=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\optimization*|*|REMOVESELF FileKey31=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Platform Notifications|*|REMOVESELF FileKey32=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Service Worker|*|REMOVESELF FileKey33=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Shared Dictionary\cache|*|REMOVESELF FileKey34=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey35=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*Cache*|*|REMOVESELF FileKey37=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Avatars|*|REMOVESELF FileKey38=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Optimization*|*|REMOVESELF Tags=ccapps ID=BriskBard Caches * Author=Winapp2.ini Project [BriskBard Default App Handlers *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|PreferredApps FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|PreferredApps Tags=ccapps ID=BriskBard Default App Handlers * Author=Winapp2.ini Project [BriskBard Download History *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|DownloadMetadata FileKey2=%LocalAppData%\BriskBard\*\shared_proto_db|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|DownloadMetadata FileKey4=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=BriskBard Download History * Author=Winapp2.ini Project [BriskBard DRM Data *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\MediaFoundationCdmStore|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\WidevineCdm|*|REMOVESELF FileKey4=%LocalAppData%\BriskBard\WidevineCdm|*|REMOVESELF Tags=ccapps ID=BriskBard DRM Data * Author=Winapp2.ini Project [BriskBard Extension Cookies *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|Extension Cookies FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|Extension Cookies Tags=ccapps ID=BriskBard Extension Cookies * Author=Winapp2.ini Project [BriskBard Privacy Sandbox *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard|*first_party_sets* FileKey2=%LocalAppData%\BriskBard\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\BriskBard\*\Network|Trust Tokens* FileKey4=%LocalAppData%\BriskBard\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\BriskBard\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\BriskBard\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\TrustTokenKeyCommitments|*|REMOVESELF FileKey9=%LocalAppData%\BriskBard\WebView\UserData\EBWebView|*first_party_sets* FileKey10=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey11=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Network|Trust Tokens* FileKey12=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\CookieReadinessList|*|REMOVESELF FileKey13=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey14=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey15=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey16=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=BriskBard Privacy Sandbox * Author=Winapp2.ini Project [BriskBard Progressive Web Apps *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\Web Applications|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Web Applications|*|REMOVESELF Tags=ccapps ID=BriskBard Progressive Web Apps * Author=Winapp2.ini Project [BriskBard Saved Usernames & Passwords *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|Login Data* FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|Login Data* Tags=ccapps ID=BriskBard Saved Usernames & Passwords * Author=Winapp2.ini Project [BriskBard Security & Threat Detection *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|DIPS* FileKey2=%LocalAppData%\BriskBard\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\*\Network|TransportSecurity* FileKey4=%LocalAppData%\BriskBard\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\BriskBard\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\BriskBard\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\BriskBard\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\BriskBard\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\BriskBard\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|DIPS* FileKey13=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\ClientCertificates|*|REMOVESELF FileKey14=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Network|TransportSecurity* FileKey15=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Safe Browsing Network|*|REMOVESELF FileKey16=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\CertificateRevocation|*|REMOVESELF FileKey17=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Crowd Deny|*|REMOVESELF FileKey18=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\PKIMetadata|*|REMOVESELF FileKey19=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Safe Browsing|*|REMOVESELF FileKey20=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\SafetyTips|*|REMOVESELF FileKey21=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey22=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Subresource Filter|*|REMOVESELF FileKey23=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\ZxcvbnData|*|REMOVESELF FileKey24=%LocalAppData%\BriskBard\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=BriskBard Security & Threat Detection * Author=Winapp2.ini Project [BriskBard Shopping Insights *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\BriskBard\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\BriskBard\*\parcel_tracking_db|*|REMOVESELF FileKey6=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\chrome_cart_db|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\commerce_subscription_db|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\coupon_db|*|REMOVESELF FileKey9=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\discount*_db|*|REMOVESELF FileKey10=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=BriskBard Shopping Insights * Author=Winapp2.ini Project [BriskBard Storage Quota Manager *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|QuotaManager FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|QuotaManager Tags=ccapps ID=BriskBard Storage Quota Manager * Author=Winapp2.ini Project [BriskBard Sync Data *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\Sync Data|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Sync Data|*|REMOVESELF Tags=ccapps ID=BriskBard Sync Data * Author=Winapp2.ini Project [BriskBard Telemetry *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\Application|debug.log FileKey2=%LocalAppData%\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\BriskBard|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\BriskBard\*|*.log FileKey6=%LocalAppData%\BriskBard\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\BriskBard\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\BriskBard\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\BriskBard\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\BriskBard\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\BriskBard\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\BriskBard\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\BriskBard\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\BriskBard\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\BriskBard\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\BriskBard\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\BriskBard\Stability|*|REMOVESELF FileKey20=%LocalAppData%\BriskBard\WebView\UserData\Application|debug.log FileKey21=%LocalAppData%\BriskBard\WebView\UserData\Application\SetupMetrics|*|REMOVESELF FileKey22=%LocalAppData%\BriskBard\WebView\UserData\EBWebView|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey23=%LocalAppData%\BriskBard\WebView\UserData\EBWebView|*.pma;LOG;LOG.old|RECURSE FileKey24=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|*.log FileKey25=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\DataSharing|*|REMOVESELF FileKey26=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey28=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\PersistentOriginTrials|*|REMOVESELF FileKey29=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Site Characteristics Database|*|REMOVESELF FileKey30=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\VideoDecodeStats|*|REMOVESELF FileKey31=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\WebRTC Logs|*|REMOVESELF FileKey32=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\WebrtcVideoStats|*|REMOVESELF FileKey33=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey34=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Crash Reports|*|REMOVESELF FileKey35=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Crashpad|*|REMOVESELF FileKey36=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Local Traces|*|REMOVESELF FileKey37=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\OriginTrials|*|REMOVESELF FileKey38=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\Stability|*|REMOVESELF FileKey39=%ProgramFiles%\Application|debug.log FileKey40=%ProgramFiles%\Application\SetupMetrics|*|REMOVESELF FileKey41=%ProgramFiles%\BriskBard\WebView\UserData\Application|debug.log FileKey42=%ProgramFiles%\BriskBard\WebView\UserData\Application\SetupMetrics|*|REMOVESELF Tags=ccapps ID=BriskBard Telemetry * Author=Winapp2.ini Project [BriskBard Web Browsing Cookies *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\Network|Cookies*;Device Bound Sessions* FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=BriskBard Web Browsing Cookies * Author=Winapp2.ini Project [BriskBard Web Browsing History *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* FileKey2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=BriskBard Web Browsing History * Author=Winapp2.ini Project [BriskBard Web Browsing Session *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\*\Sessions|*|REMOVESELF FileKey3=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Extension State|*|REMOVESELF FileKey4=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Sessions|*|REMOVESELF Tags=ccapps ID=BriskBard Web Browsing Session * Author=Winapp2.ini Project [BriskBard Web Storage *] DetectFile1=%LocalAppData%\BriskBard DetectFile2=%LocalAppData%\BriskBard\WebView\UserData\EBWebView FileKey1=%LocalAppData%\BriskBard\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\BriskBard\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\BriskBard\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\BriskBard\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\BriskBard\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\BriskBard\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\BriskBard\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\BriskBard\*\WebStorage|*|REMOVESELF FileKey9=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\IndexedDB|*|REMOVESELF FileKey10=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Local Storage\*\IndexedDB\https*|* FileKey11=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Local Storage\*\Session Storage|* FileKey12=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey13=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Local Storage\*\WebStorage|*|RECURSE FileKey14=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Local Storage\leveldb|*|REMOVESELF FileKey15=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\Session Storage|*|REMOVESELF FileKey16=%LocalAppData%\BriskBard\WebView\UserData\EBWebView\*\WebStorage|*|REMOVESELF Tags=ccapps ID=BriskBard Web Storage * Author=Winapp2.ini Project [Broadcom Wireless LAN Driver *] DetectFile=%SystemDrive%\Drivers\Broadcom Wireless LAN Driver FileKey1=%SystemDrive%\Drivers\Broadcom Wireless LAN Driver|*.log|RECURSE Tags=ccapps ID=Broadcom Wireless LAN Driver * Author=Winapp2.ini Project [Broforce *] Detect=HKCU\Software\Valve\Steam\Apps\274190 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Broforce\*\Broforce Logs|*.csv Tags=ccapps ID=Broforce * Author=Winapp2.ini Project [Brother P-touch *] DetectFile=%LocalAppData%\Brother\P-touch Update Software FileKey1=%LocalAppData%\Brother\P-touch Update Software|*.log Tags=ccapps ID=Brother P-touch * Author=Winapp2.ini Project [Brother Printer Drivers *] DetectFile=%ProgramData%\Brother FileKey1=%ProgramData%\Brother\BrLog|*.log FileKey2=%ProgramFiles%\Brother|*.tmp|RECURSE Tags=ccutil ID=Brother Printer Drivers * Author=Winapp2.ini Project [Brothers - A Tale of Two Sons *] Detect=HKCU\Software\Valve\Steam\Apps\225080 FileKey1=%UserProfile%\Documents\my games\UnrealEngine3\P13\Logs|* Tags=ccapps ID=Brothers - A Tale of Two Sons * Author=Winapp2.ini Project [BrowserOS Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|*Web Data FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=BrowserOS Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [BrowserOS Autoplay Preferences *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=BrowserOS Autoplay Preferences * Author=Winapp2.ini Project [BrowserOS Bookmark Backups *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|Bookmarks.bak Tags=ccapps ID=BrowserOS Bookmark Backups * Author=Winapp2.ini Project [BrowserOS Bookmark Favicons *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|favicons* Tags=ccapps ID=BrowserOS Bookmark Favicons * Author=Winapp2.ini Project [BrowserOS Caches *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data|Module Info Cache FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\BrowserOS\BrowserOS\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\BrowserOS\BrowserOS\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\BrowserOS\BrowserOS\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=BrowserOS Caches * Author=Winapp2.ini Project [BrowserOS Default App Handlers *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|PreferredApps Tags=ccapps ID=BrowserOS Default App Handlers * Author=Winapp2.ini Project [BrowserOS Download History *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=BrowserOS Download History * Author=Winapp2.ini Project [BrowserOS DRM Data *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=BrowserOS DRM Data * Author=Winapp2.ini Project [BrowserOS Extension Cookies *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|Extension Cookies Tags=ccapps ID=BrowserOS Extension Cookies * Author=Winapp2.ini Project [BrowserOS Pinned Tabs *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data RegKey1=HKCU\Software\BrowserOS\BrowserOS\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=BrowserOS Pinned Tabs * Author=Winapp2.ini Project [BrowserOS Privacy Sandbox *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data|*first_party_sets* FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\BrowserOS\BrowserOS\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\BrowserOS\BrowserOS\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\BrowserOS\BrowserOS\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=BrowserOS Privacy Sandbox * Author=Winapp2.ini Project [BrowserOS Progressive Web Apps *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=BrowserOS Progressive Web Apps * Author=Winapp2.ini Project [BrowserOS Saved Usernames & Passwords *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|Login Data* Tags=ccapps ID=BrowserOS Saved Usernames & Passwords * Author=Winapp2.ini Project [BrowserOS Security & Threat Detection *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|DIPS* FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\BrowserOS\BrowserOS\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\BrowserOS\BrowserOS\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\BrowserOS\BrowserOS\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\BrowserOS\BrowserOS\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\BrowserOS\BrowserOS\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\BrowserOS\BrowserOS\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\BrowserOS\BrowserOS\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=BrowserOS Security & Threat Detection * Author=Winapp2.ini Project [BrowserOS Shopping Insights *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=BrowserOS Shopping Insights * Author=Winapp2.ini Project [BrowserOS Storage Quota Manager *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|QuotaManager Tags=ccapps ID=BrowserOS Storage Quota Manager * Author=Winapp2.ini Project [BrowserOS Sync Data *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=BrowserOS Sync Data * Author=Winapp2.ini Project [BrowserOS Telemetry *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\Application|debug.log FileKey2=%LocalAppData%\BrowserOS\BrowserOS\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|*.log FileKey6=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\BrowserOS\BrowserOS\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\BrowserOS\BrowserOS\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\BrowserOS\BrowserOS\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\BrowserOS\BrowserOS\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\BrowserOS\BrowserOS\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\BrowserOS\BrowserOS\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\BrowserOS\BrowserOS\Application|debug.log FileKey21=%ProgramFiles%\BrowserOS\BrowserOS\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\BrowserOS\BrowserOS\BlBeacon|failed_count RegKey2=HKCU\Software\BrowserOS\BrowserOS\BlBeacon|state RegKey3=HKCU\Software\BrowserOS\BrowserOS\Installer|LastChecked RegKey4=HKCU\Software\BrowserOS\BrowserOS\StabilityMetrics Tags=ccapps ID=BrowserOS Telemetry * Author=Winapp2.ini Project [BrowserOS Web Browsing Cookies *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=BrowserOS Web Browsing Cookies * Author=Winapp2.ini Project [BrowserOS Web Browsing History *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=BrowserOS Web Browsing History * Author=Winapp2.ini Project [BrowserOS Web Browsing Session *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=BrowserOS Web Browsing Session * Author=Winapp2.ini Project [BrowserOS Web Storage *] DetectFile=%LocalAppData%\BrowserOS\BrowserOS\User Data FileKey1=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\BrowserOS\BrowserOS\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=BrowserOS Web Storage * Author=Winapp2.ini Project [BSPlayer *] Detect1=HKCU\Software\BST\bsplayer Detect2=HKCU\Software\BST\bsplayerv1 DetectFile1=%ProgramFiles%\BSPlayer DetectFile2=%ProgramFiles%\Webteh\BSPlayer FileKey1=%AppData%\BSplayer\*|unreg.log FileKey2=%AppData%\BSplayer\AC3 Filter|Changes.txt FileKey3=%AppData%\BSplayer\cache|* FileKey4=%ProgramFiles%\BSPlayer|bugreport.txt FileKey5=%ProgramFiles%\BSPlayer\lang|lang_changes.txt FileKey6=%ProgramFiles%\Webteh\BSplayerPro|*.jpg FileKey7=%ProgramFiles%\Webteh\BSplayerPro\cache|*.mpos Tags=ccapps ID=BSPlayer * Author=Winapp2.ini Project [Bugsplat *] Detect=HKCU\Software\Bugsplat RegKey1=HKCU\Software\Bugsplat\gaspowered\SupremeCommander RegKey2=HKCU\Software\Bugsplat\lol_beta_riotgames_com\LOL_Public RegKey3=HKCU\Software\Bugsplat\Pando_win\Pando RegKey4=HKCU\Software\Bugsplat\Relic\CoH RegKey5=HKCU\Software\Bugsplat\Relic\RelicDownloader Tags=ccutil ID=Bugsplat * Author=Winapp2.ini Project [Bulk Image Downloader *] DetectFile=%LocalAppData%\Bulk Image Downloader FileKey1=%AppData%\BID\cef\cache|* FileKey2=%AppData%\BID\Log|*.log FileKey3=%LocalAppData%\Bulk Image Downloader\BID_CEF|*.7z FileKey4=%LocalAppData%\Bulk Image Downloader\BID_Chilkat|*.7z RegKey1=HKCU\Software\Antibody Software\Bulk Image Downloader\frmBIM|edDir.Text RegKey2=HKCU\Software\Antibody Software\Bulk Image Downloader\frmBIM|OpenDialog1.InitialDir RegKey3=HKCU\Software\Antibody Software\Bulk Image Downloader\frmBIM|SaveDialog1.InitialDir Tags=ccinternet ID=Bulk Image Downloader * Author=Winapp2.ini Project [Bullzip PDF Printer *] DetectFile=%AppData%\PDF Writer\Bullzip PDF Printer FileKey1=%AppData%\PDF Writer\Bullzip PDF Printer|user.ini Tags=ccinternet ID=Bullzip PDF Printer * Author=Winapp2.ini Project [Burger Shop *] Detect1=HKCU\Software\GoBit\BurgerShop Detect2=HKCU\Software\GoBit\BurgerShop2 FileKey1=%ProgramData%\GoBit Games\BurgerShop2\*\cached|*|REMOVESELF FileKey2=%ProgramFiles%\Burger Shop|*.db;*.txt|RECURSE FileKey3=%ProgramFiles%\Burger Shop\cached|*|REMOVESELF FileKey4=%ProgramFiles%\GoBit Games\Burger Shop 2|*.db;*.txt|RECURSE Tags=ccapps ID=Burger Shop * Author=Winapp2.ini Project [Burn Zombie Burn! *] Detect=HKLM\Software\Burn Zombie Burn FileKey1=%ProgramFiles%\P2 Games\Burn Zombie Burn|*.log FileKey2=%ProgramFiles%\P2 Games\Burn Zombie Burn\REQS\NET|*|REMOVESELF Tags=ccapps ID=Burn Zombie Burn! * Author=Winapp2.ini Project [Bus-Simulator 2009 *] DetectFile=%ProgramFiles%\Bus-Simulator 2009 FileKey1=%ProgramFiles%\Bus-Simulator 2009|*.dmp;*.log|RECURSE Tags=ccapps ID=Bus-Simulator 2009 * Author=Winapp2.ini Project [Business Objects Enterprise 11 *] DetectFile=%ProgramFiles%\Business Objects\Business Objects Enterprise 11 FileKey1=%ProgramFiles%\Business Objects\Business Objects Enterprise 11\Logging|* Tags=ccapps ID=Business Objects Enterprise 11 * Author=Winapp2.ini Project [ByteFence Anti-Malware *] Detect=HKCU\Software\ByteFence\RTOP FileKey1=%ProgramData%\ByteFence\RTOP|uclogfile.bin FileKey2=%ProgramFiles%\ByteFence\Logs|* Tags=ccutil ID=ByteFence Anti-Malware * Author=Winapp2.ini Project [CA Security Center *] Detect=HKLM\Software\CA\CAPF FileKey1=%ProgramData%\CA|*.log;*.txt|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\CA\Consumer\APH|*.log Tags=ccapps ID=CA Security Center * Author=Winapp2.ini Project [Caesium Image Compressor *] DetectFile=%LocalAppData%\SaeraSoft\Caesium Image Compressor FileKey1=%AppData%\SaeraSoft\Caesium Image Compressor|*.log FileKey2=%LocalAppData%\SaeraSoft\Caesium Image Compressor\cache|* Tags=ccutil ID=Caesium Image Compressor * Author=Winapp2.ini Project [Calendar Magic *] DetectFile1=%ProgramFiles%\EuroSoft\Calendar Magic DetectFile2=%SystemDrive%\EuroSoft\Calendar Magic FileKey1=%ProgramFiles%\EuroSoft\Calendar Magic|*.bak;debug.txt FileKey2=%SystemDrive%\EuroSoft\Calendar Magic|*.bak;debug.txt Tags=ccapps ID=Calendar Magic * Author=Winapp2.ini Project [Calibre *] DetectFile=%LocalAppData%\calibre-cache FileKey1=%LocalAppData%\calibre-cache|*|RECURSE FileKey2=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\OffTheRecord\GPUCache|*|RECURSE FileKey3=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup|Network Persistent State;Visited Links FileKey4=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\blob_storage|*|RECURSE FileKey5=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\GPUCache|*|RECURSE FileKey6=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Platform Notifications|*|RECURSE FileKey7=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Session Storage|*|RECURSE Tags=ccapps ID=Calibre * Author=Winapp2.ini Project [Calico *] DetectFile=%UserProfile%\AppData\LocalLow\Peachy Keen Games\Calico FileKey1=%UserProfile%\AppData\LocalLow\Peachy Keen Games\Calico|*log FileKey2=%UserProfile%\AppData\LocalLow\Peachy Keen Games\Calico\Unity|*|REMOVESELF Tags=ccapps ID=Calico * Author=Winapp2.ini Project [Call of Atlantis *] Detect=HKLM\Software\Playrix\Call of Atlantis FileKey1=%ProgramData%\Playrix Entertainment\Call of Atlantis*\Log|* Tags=ccapps ID=Call of Atlantis * Author=Winapp2.ini Project [Call of Juarez *] DetectFile=%UserProfile%\Documents\Call Of Juarez* FileKey1=%UserProfile%\Documents\Call Of Juarez*\Out\logs|*.log|RECURSE Tags=ccapps ID=Call of Juarez * Author=Winapp2.ini Project [Cameyo *] Detect=HKCU\Software\VOS FileKey1=%AppData%\VOS|*|REMOVESELF RegKey1=HKCU\Software\VOS Tags=ccapps ID=Cameyo * Author=Winapp2.ini Project [CamStudio *] Detect=HKCU\Software\CamStudioOpenSource for Nick FileKey1=%UserProfile%\Documents\My CamStudio Temp Files|* Tags=ccmedia ID=CamStudio * Author=Winapp2.ini Project [Camtasia *] Detect=HKCU\Software\TechSmith\Camtasia Studio FileKey1=%AppData%\TechSmith\CamtasiaStudio\Logs|*|RECURSE FileKey2=%LocalAppData%\TechSmith\Camtasia Studio\*\Trackerbird_Files|tblog.log FileKey3=%LocalAppData%\TechSmith\Logs|*|RECURSE FileKey4=%ProgramData%\TechSmith\Camtasia Studio *\Library *\Temp|*|RECURSE RegKey1=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Recorder\8.0\General|lstLastSaveDir RegKey2=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|ExportAsZipMru RegKey3=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|FileSaveAsMru RegKey4=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUImportFolder RegKey5=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUOpenProjectFolder RegKey6=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|RecentRecordingsMru RegKey7=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Recorder\9.0\General|lstLastSaveDir RegKey8=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Studio\9.0|ExportAsZipMru RegKey9=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Studio\9.0|FileSaveAsMru RegKey10=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Studio\9.0|MRUImportFolder RegKey11=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Studio\9.0|MRUOpenProjectFolder RegKey12=HKCU\Software\TechSmith\Camtasia Studio\9.0\Camtasia Studio\9.0|RecentRecordingsMru RegKey13=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Recorder\18.0\General|lstLastSaveDir RegKey14=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Studio\18.0|ExportAsZipMru RegKey15=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Studio\18.0|FileSaveAsMru RegKey16=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Studio\18.0|MRUImportFolder RegKey17=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Studio\18.0|MRUOpenProjectFolder RegKey18=HKCU\Software\TechSmith\Camtasia Studio\18.0\Camtasia Studio\18.0|RecentRecordingsMru Tags=ccmedia ID=Camtasia * Author=Winapp2.ini Project [Canon *] DetectFile=%ProgramData%\CanonBJ\IJPrinter\CNMWindows FileKey1=%ProgramData%\CanonBJ\IJPrinter\CNMWindows|*log*.*|RECURSE Tags=ccapps ID=Canon * Author=Winapp2.ini Project [Canon Digital Photo Professional 4 *] Detect=HKLM\Software\Canon_Inc_IC\DPP4 DetectFile=%ProgramFiles%\Canon\Digital Photo Professional 4 FileKey1=%AppData%\Canon_Inc_IC\DPP4\Application\Temp|*|RECURSE FileKey2=%AppData%\Canon_Inc_IC\DPP4\DppMWare\Cache|*|RECURSE FileKey3=%AppData%\Canon_Inc_IC\ServiceLog\AutoUpdateService|*.txt FileKey4=%AppData%\Canon_Inc_IC\ServiceLog\imagebrowserexservice|*.txt FileKey5=%ProgramData%\Canon_Inc_IC\UniversalInstaller\ServiceLog|*.TXT Tags=ccapps ID=Canon Digital Photo Professional 4 * Author=Winapp2.ini Project [Canon PRINT *] DetectFile=%LocalAppData%\Packages\34791E63.CanonInkjetSmartConnect_6e5tt8cgb93ep FileKey1=%LocalAppData%\Packages\34791E63.CanonInkjetSmartConnect_6e5tt8cgb93ep\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\34791E63.CanonInkjetSmartConnect_6e5tt8cgb93ep\Settings|*.log* FileKey3=%LocalAppData%\Packages\34791E63.CanonInkjetSmartConnect_6e5tt8cgb93ep\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\34791E63.CanonInkjetSmartConnect_6e5tt8cgb93ep\TempState|*|REMOVESELF Tags=ccapps ID=Canon PRINT * Author=Winapp2.ini Project [Canon Print Assistant *] DetectFile=%LocalAppData%\Packages\34791E63.CanonPrintAssistant_6e5tt8cgb93ep FileKey1=%LocalAppData%\Packages\34791E63.CanonPrintAssistant_6e5tt8cgb93ep\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\34791E63.CanonPrintAssistant_6e5tt8cgb93ep\Settings|*.log* FileKey3=%LocalAppData%\Packages\34791E63.CanonPrintAssistant_6e5tt8cgb93ep\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\34791E63.CanonPrintAssistant_6e5tt8cgb93ep\TempState|*|REMOVESELF Tags=ccapps ID=Canon Print Assistant * Author=Winapp2.ini Project [Canon Zoom Browser *] Detect=HKCU\Software\Canon\ZoomBrowser Ex DetectFile1=%AppData%\ZoomBrowser EX DetectFile2=%UserProfile%\Pictures\My Pictures\ZbThumbnail.info DetectFile3=%UserProfile%\Pictures\ZbThumbnail.info FileKey1=%UserProfile%\Pictures|ZbThumbnail.info|RECURSE Tags=ccapps ID=Canon Zoom Browser * Author=Winapp2.ini Project [Caphyon *] DetectFile=%ProgramData%\Caphyon FileKey1=%ProgramData%\Caphyon|*|REMOVESELF Tags=ccutil ID=Caphyon * Author=Winapp2.ini Project [Caprine *] DetectFile=%AppData%\Caprine FileKey1=%AppData%\Caprine|*-journal;LOG;LOG.old;Network Persistent State|RECURSE FileKey2=%AppData%\Caprine\*Cache|*|RECURSE FileKey3=%AppData%\Caprine\blob_storage|*|RECURSE FileKey4=%AppData%\Caprine\Caprine\logs|* FileKey5=%AppData%\Caprine\logs|* FileKey6=%AppData%\Caprine\Session Storage|*|RECURSE FileKey7=%LocalAppData%\caprine-updater|*|RECURSE Tags=ccinternet ID=Caprine * Author=Winapp2.ini Project [Captcha Brotherhood *] DetectFile=%LocalAppData%\Captcha_Brotherhood FileKey1=%LocalAppData%\Captcha_Brotherhood|*log*.txt Tags=ccutil ID=Captcha Brotherhood * Author=Winapp2.ini Project [CareUEyes *] DetectFile=%AppData%\careueyes FileKey1=%AppData%\careueyes\log|* Tags=ccapps ID=CareUEyes * Author=Winapp2.ini Project [Casper *] DetectFile=%ProgramData%\Future Systems Solutions\Casper FileKey1=%ProgramData%\Future Systems Solutions\Casper\Minidump|* Tags=ccutil ID=Casper * Author=Winapp2.ini Project [Castle of Illusion *] DetectFile=%ProgramFiles%\Castle of Illusion FileKey1=%ProgramFiles%\Castle of Illusion\_CommonRedist\vcredist\*|vc*redist_x*.exe Tags=ccapps ID=Castle of Illusion * Author=Winapp2.ini Project [Casual Arts *] DetectFile=%AppData%\CasualArts FileKey1=%AppData%\casualArts\*|*.txt;logfile.*|RECURSE FileKey2=%ProgramData%\casualArts|*|REMOVESELF Tags=ccapps ID=Casual Arts * Author=Winapp2.ini Project [Cave Story+ *] Detect=HKCU\Software\Valve\Steam\Apps\200900 FileKey1=%ProgramFiles%\Steam\steamapps\common\cave story+|log.txt FileKey2=%ProgramFiles%\Steam\steamapps\common\cave story+\data|*.DS_STORE|RECURSE Tags=ccapps ID=Cave Story+ * Author=Winapp2.ini Project [CC Magic *] DetectFile=%UserProfile%\Documents\Electronic Arts\CC Magic\Logs FileKey1=%UserProfile%\Documents\Electronic Arts\CC Magic\Logs|*.log|RECURSE Tags=ccapps ID=CC Magic * Author=Winapp2.ini Project [CCDump *] DetectFile=%ProgramFiles%\CCleaner\CCDump.exe FileKey1=%ProgramFiles%\CCleaner|regkeys.output.txt;winapp.ini;winreg.ini;winsys.ini Tags=ccutil ID=CCDump * Author=Winapp2.ini Project [CCleaner *] Detect=HKCU\Software\Piriform\CCleaner DetectFile1=%AppData%\CCleaner DetectFile2=%ProgramFiles%\CCleaner Network\Management Server FileKey1=%AppData%\CCleaner\Dumps|* FileKey2=%AppData%\CCleaner\EBWebView\*cache|*|RECURSE FileKey3=%AppData%\CCleaner\EBWebView\BrowserMetrics|* FileKey4=%AppData%\CCleaner\EBWebView\crashpad|*|RECURSE FileKey5=%AppData%\CCleaner\EBWebView\Default|*.log FileKey6=%AppData%\CCleaner\Logs|* FileKey7=%AppData%\CCleanr\EBWebView\Default\*Cache|*|RECURSE FileKey8=%ProgramData%\Gibraltar\Local Logs\CCleaner Network|*.glf FileKey9=%ProgramData%\Piriform\CCleaner 7\log|* FileKey10=%ProgramData%\Piriform\Icarus\Logs|*|RECURSE FileKey11=%ProgramFiles%\CCleaner|*.dmp;*.log;CCleaner_log*.txt;gcapi_*.dll|RECURSE FileKey12=%ProgramFiles%\CCleaner Network\Management Server\Logs|* FileKey13=%ProgramFiles%\CCleaner\Data\log|* FileKey14=%ProgramFiles%\CCleaner\LOG|* FileKey15=%ProgramFiles%\CCleaner\Setup|*|REMOVESELF FileKey16=%ProgramFiles%\CCleaner\temp_ccupdate|*|REMOVESELF FileKey17=%ProgramFiles%\Piriform\CCleaner 7\data\log|* FileKey18=%ProgramFiles%\Piriform\CCleaner 7\log|* FileKey19=%UserProfile%|CCleaner_log*.txt RegKey1=HKLM\Software\Piriform\CCleaner|(Cfg)ABTestingNames RegKey2=HKLM\Software\Piriform\CCleaner|(Cfg)DTNP RegKey3=HKLM\Software\Piriform\CCleaner|(Cfg)DUNP RegKey4=HKLM\Software\Piriform\CCleaner|(Cfg)LastUpdate RegKey5=HKLM\Software\Piriform\CCleaner|BCD RegKey6=HKLM\Software\Piriform\CCleaner|FTU RegKey7=HKLM\Software\Piriform\CCleaner|GD RegKey8=HKLM\Software\Piriform\CCleaner|LatestICS RegKey9=HKLM\Software\Piriform\CCleaner|LLSR RegKey10=HKLM\Software\Piriform\CCleaner|PPC RegKey11=HKLM\Software\Piriform\CCleaner|RunICS RegKey12=HKLM\Software\Piriform\CCleaner|StateSig RegKey13=HKLM\Software\Piriform\CCleaner|STS RegKey14=HKLM\Software\Piriform\CCleaner|UpdateKey Tags=ccutil ID=CCleaner * Author=Winapp2.ini Project [CCleaner Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\CCleaner Browser\User Data\AutoFill*|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [CCleaner Browser Autoplay Preferences *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\MEIPreload|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Autoplay Preferences * Author=Winapp2.ini Project [CCleaner Browser Bookmark Backups *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|Bookmarks.bak Tags=CCleaner,Browser ID=CCleaner Browser Bookmark Backups * Author=Winapp2.ini Project [CCleaner Browser Bookmark Favicons *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|favicons* Tags=CCleaner,Browser ID=CCleaner Browser Bookmark Favicons * Author=Winapp2.ini Project [CCleaner Browser Caches *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\CCleaner Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\CCleaner Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\CCleaner Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\CCleaner Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\CCleaner Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\CCleaner Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\CCleaner Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\CCleaner Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\CCleaner Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\CCleaner Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\CCleaner Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\CCleaner Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\CCleaner Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\CCleaner Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\CCleaner Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\CCleaner Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\CCleaner Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\CCleaner Browser\User Data\Optimization*|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Caches * Author=Winapp2.ini Project [CCleaner Browser Default App Handlers *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|PreferredApps Tags=CCleaner,Browser ID=CCleaner Browser Default App Handlers * Author=Winapp2.ini Project [CCleaner Browser Download History *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Download History * Author=Winapp2.ini Project [CCleaner Browser DRM Data *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\CCleaner Browser\User Data\WidevineCdm|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser DRM Data * Author=Winapp2.ini Project [CCleaner Browser Extension Cookies *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|Extension Cookies Tags=CCleaner,Browser ID=CCleaner Browser Extension Cookies * Author=Winapp2.ini Project [CCleaner Browser Pinned Tabs *] DetectFile=%LocalAppData%\CCleaner Browser\User Data RegKey1=HKCU\Software\Piriform\Browser\PreferenceMACs\Default|pinned_tabs Tags=CCleaner,Browser ID=CCleaner Browser Pinned Tabs * Author=Winapp2.ini Project [CCleaner Browser Privacy Sandbox *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\CCleaner Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\CCleaner Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\CCleaner Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\CCleaner Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\CCleaner Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\CCleaner Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\CCleaner Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Privacy Sandbox * Author=Winapp2.ini Project [CCleaner Browser Progressive Web Apps *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\Web Applications|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Progressive Web Apps * Author=Winapp2.ini Project [CCleaner Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|Login Data* Tags=CCleaner,Browser ID=CCleaner Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [CCleaner Browser Security & Threat Detection *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\CCleaner Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\CCleaner Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\CCleaner Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\CCleaner Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\CCleaner Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\CCleaner Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\CCleaner Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\CCleaner Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\CCleaner Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\CCleaner Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Security & Threat Detection * Author=Winapp2.ini Project [CCleaner Browser Shopping Insights *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\CCleaner Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\CCleaner Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\CCleaner Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Shopping Insights * Author=Winapp2.ini Project [CCleaner Browser Storage Quota Manager *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|QuotaManager Tags=CCleaner,Browser ID=CCleaner Browser Storage Quota Manager * Author=Winapp2.ini Project [CCleaner Browser Sync Data *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\Sync Data|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Sync Data * Author=Winapp2.ini Project [CCleaner Browser Telemetry *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\Application|debug.log FileKey2=%LocalAppData%\CCleaner Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\CCleaner Browser\CrashReports|*|REMOVESELF FileKey4=%LocalAppData%\CCleaner Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey5=%LocalAppData%\CCleaner Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\CCleaner Browser\User Data\*|*.log FileKey7=%LocalAppData%\CCleaner Browser\User Data\*\DataSharing|*|REMOVESELF FileKey8=%LocalAppData%\CCleaner Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey9=%LocalAppData%\CCleaner Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%LocalAppData%\CCleaner Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey11=%LocalAppData%\CCleaner Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey12=%LocalAppData%\CCleaner Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey13=%LocalAppData%\CCleaner Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey14=%LocalAppData%\CCleaner Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey15=%LocalAppData%\CCleaner Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey16=%LocalAppData%\CCleaner Browser\User Data\Crash Reports|*|REMOVESELF FileKey17=%LocalAppData%\CCleaner Browser\User Data\Crashpad|*|REMOVESELF FileKey18=%LocalAppData%\CCleaner Browser\User Data\Local Traces|*|REMOVESELF FileKey19=%LocalAppData%\CCleaner Browser\User Data\OriginTrials|*|REMOVESELF FileKey20=%LocalAppData%\CCleaner Browser\User Data\Stability|*|REMOVESELF FileKey21=%ProgramFiles%\CCleaner Browser\Application|debug.log FileKey22=%ProgramFiles%\CCleaner Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Piriform\Browser\BlBeacon|failed_count RegKey2=HKCU\Software\Piriform\Browser\BlBeacon|state RegKey3=HKCU\Software\Piriform\Browser\Installer|LastChecked RegKey4=HKCU\Software\Piriform\Browser\StabilityMetrics Tags=CCleaner,Browser ID=CCleaner Browser Telemetry * Author=Winapp2.ini Project [CCleaner Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=CCleaner,Browser ID=CCleaner Browser Web Browsing Cookies * Author=Winapp2.ini Project [CCleaner Browser Web Browsing History *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=CCleaner,Browser ID=CCleaner Browser Web Browsing History * Author=Winapp2.ini Project [CCleaner Browser Web Browsing Session *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\Sessions|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Web Browsing Session * Author=Winapp2.ini Project [CCleaner Browser Web Storage *] DetectFile=%LocalAppData%\CCleaner Browser\User Data FileKey1=%LocalAppData%\CCleaner Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\CCleaner Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\CCleaner Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\CCleaner Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\CCleaner Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\CCleaner Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\CCleaner Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\CCleaner Browser\User Data\*\WebStorage|*|REMOVESELF Tags=CCleaner,Browser ID=CCleaner Browser Web Storage * Author=Winapp2.ini Project [CCTV Security *] DetectFile=%ProgramFiles%\CCTV Security FileKey1=%ProgramFiles%\CCTV Security\Log|* Tags=ccapps ID=CCTV Security * Author=Winapp2.ini Project [CD-R Diagnostic *] Detect=HKCU\Software\CDROM_Productions\CDRDIAG FileKey1=%ProgramFiles%\CDRDiagnostic|*.cnt FileKey2=%UserProfile%\Documents|ERRORLOG.TXT RegKey1=HKCU\Software\CDROM_Productions\CDRDIAG|LastCopyDir RegKey2=HKCU\Software\CDROM_Productions\CDRDIAG|LastDevice Tags=ccutil ID=CD-R Diagnostic * Author=Winapp2.ini Project [CDBurnerXP *] Detect=HKCU\Software\Canneverbe Limited\CDBurnerXP FileKey1=%AppData%\Canneverbe Limited\CDBurnerXP|*.log Tags=ccutil ID=CDBurnerXP * Author=Winapp2.ini Project [CDex *] Detect=HKLM\Software\CDex FileKey1=%UserProfile%\Music\CDDB|*.txt Tags=ccutil ID=CDex * Author=Winapp2.ini Project [CefSharp *] DetectFile=%LocalAppData%\CefSharp FileKey1=%LocalAppData%\CefSharp\Cache|*|RECURSE Tags=ccinternet ID=CefSharp * Author=Winapp2.ini Project [Cent Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|*Web Data FileKey2=%LocalAppData%\CentBrowser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\CentBrowser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Cent Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Cent Browser Autoplay Preferences *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Cent Browser Autoplay Preferences * Author=Winapp2.ini Project [Cent Browser Bookmark Backups *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|Bookmarks.bak Tags=ccapps ID=Cent Browser Bookmark Backups * Author=Winapp2.ini Project [Cent Browser Bookmark Favicons *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|favicons* Tags=ccapps ID=Cent Browser Bookmark Favicons * Author=Winapp2.ini Project [Cent Browser Caches *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\CentBrowser\User Data|Module Info Cache FileKey3=%LocalAppData%\CentBrowser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\CentBrowser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\CentBrowser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\CentBrowser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\CentBrowser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\CentBrowser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\CentBrowser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\CentBrowser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\CentBrowser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\CentBrowser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\CentBrowser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\CentBrowser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\CentBrowser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\CentBrowser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\CentBrowser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\CentBrowser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\CentBrowser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Cent Browser Caches * Author=Winapp2.ini Project [Cent Browser Default App Handlers *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|PreferredApps Tags=ccapps ID=Cent Browser Default App Handlers * Author=Winapp2.ini Project [Cent Browser Download History *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\CentBrowser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Cent Browser Download History * Author=Winapp2.ini Project [Cent Browser DRM Data *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\CentBrowser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Cent Browser DRM Data * Author=Winapp2.ini Project [Cent Browser Extension Cookies *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|Extension Cookies Tags=ccapps ID=Cent Browser Extension Cookies * Author=Winapp2.ini Project [Cent Browser Pinned Tabs *] DetectFile=%LocalAppData%\CentBrowser\User Data RegKey1=HKCU\Software\CentBrowser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Cent Browser Pinned Tabs * Author=Winapp2.ini Project [Cent Browser Privacy Sandbox *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data|*first_party_sets* FileKey2=%LocalAppData%\CentBrowser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\CentBrowser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\CentBrowser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\CentBrowser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\CentBrowser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\CentBrowser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\CentBrowser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Cent Browser Privacy Sandbox * Author=Winapp2.ini Project [Cent Browser Progressive Web Apps *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Cent Browser Progressive Web Apps * Author=Winapp2.ini Project [Cent Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|Login Data* Tags=ccapps ID=Cent Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Cent Browser Security & Threat Detection *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|DIPS* FileKey2=%LocalAppData%\CentBrowser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\CentBrowser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\CentBrowser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\CentBrowser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\CentBrowser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\CentBrowser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\CentBrowser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\CentBrowser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\CentBrowser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\CentBrowser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\CentBrowser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Cent Browser Security & Threat Detection * Author=Winapp2.ini Project [Cent Browser Shopping Insights *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\CentBrowser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\CentBrowser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\CentBrowser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\CentBrowser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Cent Browser Shopping Insights * Author=Winapp2.ini Project [Cent Browser Storage Quota Manager *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|QuotaManager Tags=ccapps ID=Cent Browser Storage Quota Manager * Author=Winapp2.ini Project [Cent Browser Sync Data *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Cent Browser Sync Data * Author=Winapp2.ini Project [Cent Browser Telemetry *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\Application|debug.log FileKey2=%LocalAppData%\CentBrowser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\CentBrowser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\CentBrowser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\CentBrowser\User Data\*|*.log FileKey6=%LocalAppData%\CentBrowser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\CentBrowser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\CentBrowser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\CentBrowser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\CentBrowser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\CentBrowser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\CentBrowser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\CentBrowser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\CentBrowser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\CentBrowser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\CentBrowser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\CentBrowser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\CentBrowser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\CentBrowser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\CentBrowser\Application|debug.log FileKey21=%ProgramFiles%\CentBrowser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\CentBrowser\BlBeacon|failed_count RegKey2=HKCU\Software\CentBrowser\BlBeacon|state RegKey3=HKCU\Software\CentBrowser\Installer|LastChecked RegKey4=HKCU\Software\CentBrowser\StabilityMetrics Tags=ccapps ID=Cent Browser Telemetry * Author=Winapp2.ini Project [Cent Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Cent Browser Web Browsing Cookies * Author=Winapp2.ini Project [Cent Browser Web Browsing History *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Cent Browser Web Browsing History * Author=Winapp2.ini Project [Cent Browser Web Browsing Session *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\CentBrowser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Cent Browser Web Browsing Session * Author=Winapp2.ini Project [Cent Browser Web Storage *] DetectFile=%LocalAppData%\CentBrowser\User Data FileKey1=%LocalAppData%\CentBrowser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\CentBrowser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\CentBrowser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\CentBrowser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\CentBrowser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\CentBrowser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\CentBrowser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\CentBrowser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Cent Browser Web Storage * Author=Winapp2.ini Project [Centarsia *] Detect=HKCU\Software\Centarsia RegKey1=HKCU\Software\Centarsia|RecentImage0 RegKey2=HKCU\Software\Centarsia|RecentImage1 RegKey3=HKCU\Software\Centarsia|RecentImage2 RegKey4=HKCU\Software\Centarsia|RecentImage3 RegKey5=HKCU\Software\Centarsia|RecentImage4 RegKey6=HKCU\Software\Centarsia|RecentImage5 RegKey7=HKCU\Software\Centarsia|RecentImage6 Tags=ccapps ID=Centarsia * Author=Winapp2.ini Project [Ceville *] Detect=HKCU\Software\Valve\Steam\Apps\23460 FileKey1=%AppData%|ceville_console_history.txt FileKey2=%UserProfile%\Documents\Ceville\logs|* Tags=ccapps ID=Ceville * Author=Winapp2.ini Project [CFE Exam Prep Course *] DetectFile=%ProgramFiles%\CFE Exam Prep Course FileKey1=%AppData%\ACFEExamPrep|*.log FileKey2=%ProgramFiles%\CFE Exam Prep Course\Log|*|RECURSE Tags=ccapps ID=CFE Exam Prep Course * Author=Winapp2.ini Project [cFosSpeed *] DetectFile=%ProgramData%\cFos\cFosSpeed FileKey1=%ProgramData%\cFos\cFosSpeed\Logs|*.ini Tags=ccinternet ID=cFosSpeed * Author=Winapp2.ini Project [Chameleon *] DetectFile=%UserProfile%\Documents\Chameleon Files FileKey1=%UserProfile%\Documents\Chameleon Files\Cache|*|RECURSE FileKey2=%UserProfile%\Documents\Chameleon Files\Log|*|RECURSE Tags=ccutil ID=Chameleon * Author=Winapp2.ini Project [Chameleon Clock *] DetectFile=%ProgramFiles%\Chameleon Clock FileKey1=%ProgramFiles%\Chameleon Clock|clock.lo0.txt Tags=ccapps ID=Chameleon Clock * Author=Winapp2.ini Project [Chameleon Startup Manager *] Detect=HKCU\Software\NeoSoftTools\System Manager RegKey1=HKCU\Software\NeoSoftTools\System Manager\Common\FileInfo Tags=ccutil ID=Chameleon Startup Manager * Author=Winapp2.ini Project [Champions Online *] Detect1=HKCU\Software\Cryptic\Champions Online Detect2=HKCU\Software\Valve\Steam\Apps\9880 FileKey1=%ProgramFiles%\Steam\Steamapps\Common\Champions Online\*\Logs\GameClient|* FileKey2=%ProgramFiles%\Steam\Steamapps\Common\Champions Online\Champions Online\*\Cache|* FileKey3=%Public%\Games\cryptic studios\Champions Online\*\Cache|* FileKey4=%Public%\Games\cryptic studios\Champions Online\*\Logs\GameClient|* Tags=ccapps ID=Champions Online * Author=Winapp2.ini Project [Cheat Engine *] Detect=HKCU\Software\Cheat Engine FileKey1=%ProgramFiles%\Cheat Engine*|*.tmp RegKey1=HKCU\SOFTWARE\Cheat Engine|Recent Files Tags=ccapps ID=Cheat Engine * Author=Winapp2.ini Project [CheatBook *] Detect=HKLM\Software\CheatBook FileKey1=%ProgramFiles%\Cheatbook Database *|*log.txt Tags=ccapps ID=CheatBook * Author=Winapp2.ini Project [Chicken Hunter *] Detect=HKLM\Software\Chicken Hunter FileKey1=%ProgramFiles%\Chicken Hunter|debug.txt Tags=ccapps ID=Chicken Hunter * Author=Winapp2.ini Project [Chicken Invaders *] DetectFile1=%AppData%\InterAction studios\CI3demo DetectFile2=%ProgramData%\InterAction studios\CI2rmdemo DetectFile3=%ProgramFiles%\Chicken*Invaders* FileKey1=%AppData%\InterAction studios|*.log|RECURSE FileKey2=%ProgramData%\InterAction studios|*.log|RECURSE FileKey3=%ProgramFiles%\*\Chicken Invaders*|*.html;*.log;*.png|RECURSE FileKey4=%ProgramFiles%\Chicken*Invaders*|*.log|RECURSE Tags=ccapps ID=Chicken Invaders * Author=Winapp2.ini Project [Children of the Nile *] Detect=HKCU\Software\Valve\Steam\Apps\17100 FileKey1=%UserProfile%\Documents\Tilted Mill\Children of the Nile|*.log Tags=ccapps ID=Children of the Nile * Author=Winapp2.ini Project [Chivalry: Medieval Warfare *] Detect=HKCU\Software\Valve\Steam\Apps\219640 FileKey1=%UserProfile%\Documents\My Games\Chivalry Medieval Warfare*\UDKGame\Logs|* Tags=ccapps ID=Chivalry: Medieval Warfare * Author=Winapp2.ini Project [Chocolatey *] DetectFile1=%ProgramData%\chocolatey DetectFile2=%ProgramData%\chocoportable FileKey1=%AppData%\ChocolateyGUI\Logs|* FileKey2=%ProgramData%\chocolatey\lib\*|*.txt FileKey3=%ProgramData%\chocolatey\logs|*.log FileKey4=%ProgramData%\chocoportable\logs|* FileKey5=%UserProfile%\.chocolatey\http-cache|*|RECURSE Tags=ccutil ID=Chocolatey * Author=Winapp2.ini Project [ChomikBox *] DetectFile=%LocalAppData%\ChomikBox FileKey1=%LocalAppData%\ChomikBox|*.log;queue-download-*.ini FileKey2=%LocalAppData%\ChomikBox\Backup|*.log FileKey3=%LocalAppData%\ChomikBox\Cache\Thumbs|* Tags=ccinternet ID=ChomikBox * Author=Winapp2.ini Project [Christmas Adventure: Candy Storm *] Detect1=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Adventure - Candy Storm1.1 Detect2=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Adventure - Candy Stormv1.3 DetectFile=%ProgramFiles%\Christmas Adventure - Candy Storm FileKey1=%AppData%\Argali|*.log|RECURSE FileKey2=%ProgramFiles%\Christmas Adventure - Candy Storm|*.nfo;*.txt FileKey3=%ProgramFiles%\Foxy Games\Christmas Adventure - Candy Storm|*.html;*.msi;*.nfo;*.txt;*.url Tags=ccapps ID=Christmas Adventure: Candy Storm * Author=Winapp2.ini Project [Christmas Griddlers 2014 *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Griddlers 20141.1 FileKey1=%ProgramFiles%\*\Christmas Griddlers*|*.html;*.ico;*.nfo;*.txt;*.url;*msi|RECURSE FileKey2=%ProgramFiles%\Christmas Griddlers*|*.html;*.ico;*.nfo;*.txt;*.url;*msi|RECURSE Tags=ccapps ID=Christmas Griddlers 2014 * Author=Winapp2.ini Project [Christmas Wonderland *] Detect1=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 2 Detect2=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 3 1.0 Detect3=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 4 1.0.4 Detect4=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 21.0 Detect5=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 31.0 Detect6=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Wonderland 41.1 FileKey1=%ProgramFiles%\Christmas Wonderland *|*.html;*.nfo;*.txt;*.url|RECURSE FileKey2=%ProgramFiles%\Foxy Games\Christmas Wonderland *|*.html;*.nfo;*.txt;*.url|RECURSE FileKey3=%SystemDrive%\Games\Christmas Wonderland *|*.html;*.nfo;*.txt;*.url|RECURSE Tags=ccapps ID=Christmas Wonderland * Author=Winapp2.ini Project [Chroma Squad *] DetectFile=%UserProfile%\AppData\LocalLow\Behold Studios\Chroma Squad FileKey1=%UserProfile%\AppData\LocalLow\Behold Studios\Chroma Squad|*txt FileKey2=%UserProfile%\AppData\LocalLow\Behold Studios\Chroma Squad\Crashes|* FileKey3=%UserProfile%\AppData\LocalLow\Behold Studios\Chroma Squad\Unity|*|REMOVESELF Tags=ccapps ID=Chroma Squad * Author=Winapp2.ini Project [Chromium Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|*Web Data FileKey2=%LocalAppData%\Chromium\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Chromium\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Chromium Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Chromium Autoplay Preferences *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Chromium Autoplay Preferences * Author=Winapp2.ini Project [Chromium Bookmark Backups *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|Bookmarks.bak Tags=ccapps ID=Chromium Bookmark Backups * Author=Winapp2.ini Project [Chromium Bookmark Favicons *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|favicons* Tags=ccapps ID=Chromium Bookmark Favicons * Author=Winapp2.ini Project [Chromium Caches *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Chromium\User Data|Module Info Cache FileKey3=%LocalAppData%\Chromium\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Chromium\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Chromium\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Chromium\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Chromium\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Chromium\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Chromium\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Chromium\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Chromium\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Chromium\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Chromium\User Data\*\Search Logos|*|REMOVESELF FileKey14=%LocalAppData%\Chromium\User Data\*\Service Worker|*|REMOVESELF FileKey15=%LocalAppData%\Chromium\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%LocalAppData%\Chromium\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\Chromium\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\Chromium\User Data\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\Chromium\User Data\Avatars|*|REMOVESELF FileKey20=%LocalAppData%\Chromium\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Chromium Caches * Author=Winapp2.ini Project [Chromium Default App Handlers *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|PreferredApps Tags=ccapps ID=Chromium Default App Handlers * Author=Winapp2.ini Project [Chromium Download History *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Chromium\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Chromium Download History * Author=Winapp2.ini Project [Chromium DRM Data *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Chromium\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Chromium DRM Data * Author=Winapp2.ini Project [Chromium Embedded Framework *] DetectFile=%LocalAppData%\CEF\User Data FileKey1=%LocalAppData%\CEF\User Data|*.pma Tags=ccinternet ID=Chromium Embedded Framework * Author=Winapp2.ini Project [Chromium Extension Cookies *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|Extension Cookies Tags=ccapps ID=Chromium Extension Cookies * Author=Winapp2.ini Project [Chromium Pinned Tabs *] DetectFile=%LocalAppData%\Chromium\User Data RegKey1=HKCU\Software\Chromium\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Chromium Pinned Tabs * Author=Winapp2.ini Project [Chromium Privacy Sandbox *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data|*first_party_sets* FileKey2=%LocalAppData%\Chromium\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Chromium\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Chromium\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Chromium\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Chromium\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Chromium\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Chromium\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Chromium Privacy Sandbox * Author=Winapp2.ini Project [Chromium Progressive Web Apps *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Chromium Progressive Web Apps * Author=Winapp2.ini Project [Chromium Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|Login Data* Tags=ccapps ID=Chromium Saved Usernames & Passwords * Author=Winapp2.ini Project [Chromium Security & Threat Detection *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|DIPS* FileKey2=%LocalAppData%\Chromium\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Chromium\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Chromium\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Chromium\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Chromium\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Chromium\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Chromium\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Chromium\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Chromium\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Chromium\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Chromium\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Chromium Security & Threat Detection * Author=Winapp2.ini Project [Chromium Shopping Insights *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Chromium\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Chromium\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Chromium\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Chromium\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Chromium Shopping Insights * Author=Winapp2.ini Project [Chromium Storage Quota Manager *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|QuotaManager Tags=ccapps ID=Chromium Storage Quota Manager * Author=Winapp2.ini Project [Chromium Sync Data *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Chromium Sync Data * Author=Winapp2.ini Project [Chromium Telemetry *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\Application|debug.log FileKey2=%LocalAppData%\Chromium\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Chromium\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Chromium\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Chromium\User Data\*|*.log FileKey6=%LocalAppData%\Chromium\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Chromium\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Chromium\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Chromium\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Chromium\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Chromium\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Chromium\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Chromium\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Chromium\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Chromium\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Chromium\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Chromium\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Chromium\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Chromium\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Chromium\Application|debug.log FileKey21=%ProgramFiles%\Chromium\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Chromium\BlBeacon|failed_count RegKey2=HKCU\Software\Chromium\BlBeacon|state RegKey3=HKCU\Software\Chromium\Installer|LastChecked RegKey4=HKCU\Software\Chromium\StabilityMetrics Tags=ccapps ID=Chromium Telemetry * Author=Winapp2.ini Project [Chromium Web Browsing Cookies *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Chromium Web Browsing Cookies * Author=Winapp2.ini Project [Chromium Web Browsing History *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Chromium Web Browsing History * Author=Winapp2.ini Project [Chromium Web Browsing Session *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Chromium\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Chromium Web Browsing Session * Author=Winapp2.ini Project [Chromium Web Storage *] DetectFile=%LocalAppData%\Chromium\User Data FileKey1=%LocalAppData%\Chromium\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Chromium\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Chromium\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Chromium\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Chromium\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Chromium\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Chromium\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Chromium\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Chromium Web Storage * Author=Winapp2.ini Project [Chronos Atomic Clock Synchronizer *] Detect=HKLM\Software\Chronos RegKey1=HKLM\Software\Chronos|LastCorrectionTime RegKey2=HKLM\Software\Chronos|LastCorrectionValue Tags=ccutil ID=Chronos Atomic Clock Synchronizer * Author=Winapp2.ini Project [Chuzzle Deluxe *] DetectFile=%ProgramFiles%\HP Games\Chuzzle Deluxe FileKey1=%ProgramFiles%\HP Games\Chuzzle Deluxe|DEBUG.TXT Tags=ccapps ID=Chuzzle Deluxe * Author=Winapp2.ini Project [Cinema Tycoon *] DetectFile=%ProgramFiles%\Cinema Tycoon* FileKey1=%ProgramFiles%\Cinema Tycoon*|*.txt;flashplayer7_winax.exe Tags=ccapps ID=Cinema Tycoon * Author=Winapp2.ini Project [Cisco Connect *] DetectFile=%ProgramData%\Cisco Systems\Cisco Connect FileKey1=%ProgramData%\Cisco Systems\Cisco Connect\Log|* Tags=ccinternet ID=Cisco Connect * Author=Winapp2.ini Project [Cisco HostScan *] DetectFile=%LocalAppData%\Cisco\Cisco HostScan FileKey1=%LocalAppData%\Cisco\Cisco HostScan\log|*.log Tags=ccapps ID=Cisco HostScan * Author=Winapp2.ini Project [Cisco VPN *] DetectFile=%UserProfile%\.cisco\VPN FileKey1=%UserProfile%\.cisco\VPN\Log|*.txt Tags=ccinternet ID=Cisco VPN * Author=Winapp2.ini Project [Cisco WebEx *] DetectFile=%LocalAppData%\WebEx FileKey1=%LocalAppData%\CiscoSparkLauncher|* FileKey2=%LocalAppData%\WebEx|webex_*.ini.bk FileKey3=%LocalAppData%\WebEx\wbxcache|*|RECURSE Tags=ccinternet ID=Cisco WebEx * Author=Winapp2.ini Project [Cities in Motion *] Detect=HKCU\Software\Valve\Steam\Apps\73010 FileKey1=%UserProfile%\Documents\Cities in Motion|log_metro.txt Tags=ccapps ID=Cities in Motion * Author=Winapp2.ini Project [Citrix Online Plug-in Web Setup Files *] Detect=HKLM\Software\Citrix\ICA Client FileKey1=%ProgramData%\Citrix\Citrix Online Plug-in - Web|*.cab;*.msi;eula*.rtf Tags=ccapps ID=Citrix Online Plug-in Web Setup Files * Author=Winapp2.ini Project [Citrix Receiver *] Detect=HKLM\Software\Citrix\ICA Client DetectFile=%LocalAppData%\Citrix\Receiver FileKey1=%AppData%\Citrix\ICA Client\Cache|*|RECURSE FileKey2=%AppData%\ICAClient|wfcwin*.log FileKey3=%AppData%\ICAClient\Cache|*|RECURSE FileKey4=%LocalAppData%\Citrix\AuthManager\Logs|* FileKey5=%LocalAppData%\Citrix\Citrix Files\Logs|* FileKey6=%LocalAppData%\Citrix\Receiver|*.log*;ErrorLog.xml FileKey7=%LocalAppData%\Citrix\SelfService\Temp|* FileKey8=%ProgramFiles%\Citrix\ICA Client|wfclient.log RegKey1=HKLM\Software\Citrix\ICA Client\Default Tags=ccapps ID=Citrix Receiver * Author=Winapp2.ini Project [Civilization *] Detect1=HKCU\Software\Firaxis\Civilization5 Detect2=HKLM\Software\Firaxis Games DetectFile=%AppData%\My Games\Civilizaton 4 FileKey1=%AppData%\My Games\Beyond the Sword\cache|*.dat FileKey2=%AppData%\My Games\Civilizaton 4\Cache|*|RECURSE FileKey3=%AppData%\My Games\Sid Meier's Civilization*\cache|*.dat FileKey4=%AppData%\My Games\Warlords\cache|*.dat FileKey5=%LocalAppData%\My Games\Beyond the Sword\cache|*.dat FileKey6=%LocalAppData%\My Games\Sid Meier's Civilization*\cache|*.dat FileKey7=%LocalAppData%\My Games\Warlords\cache|*.dat FileKey8=%ProgramFiles%\2K Games\Firaxis Games\Sid Meier's Civilization IV Colonization|*.txt FileKey9=%ProgramFiles%\Firaxis Games\Sid Meier's Civilization 4|*.txt FileKey10=%ProgramFiles%\Firaxis Games\Sid Meier's Civilization 4\*|*.txt FileKey11=%UserProfile%\Documents\My Games\Beyond the Sword\Logs|* FileKey12=%UserProfile%\Documents\My Games\Sid Meier's Civilization*\cache|*|RECURSE FileKey13=%UserProfile%\Documents\My Games\Sid Meier's Civilization*\Logs|* FileKey14=%UserProfile%\Documents\My Games\Warlords\Logs|* Tags=ccapps ID=Civilization * Author=Winapp2.ini Project [Civilization 5 Installers *] Detect=HKCU\Software\Firaxis\Civilization5 FileKey1=%ProgramFiles%\Civilization V*\DirectX|*|REMOVESELF FileKey2=%ProgramFiles%\Civilization V*\VCRedist|*|REMOVESELF Tags=ccapps ID=Civilization 5 Installers * Author=Winapp2.ini Project [Civilization 5 Old AutoSaves *] Detect=HKCU\Software\Firaxis\Civilization5 FileKey1=%UserProfile%\Documents\My Games\Sid Meier's Civilization 5\Saves\*\auto\prev|*.Civ5Save Tags=ccapps ID=Civilization 5 Old AutoSaves * Author=Winapp2.ini Project [Clam Sentinel *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{060FE577-1BDF-4330-ACCA-B6760AB07191}_is1 FileKey1=%AppData%\ClamSentinel|*.txt FileKey2=%ProgramFiles%\ClamSentinel|*.txt Tags=ccapps ID=Clam Sentinel * Author=Winapp2.ini Project [ClamWin *] Detect1=HKCU\Software\ClamWin Detect2=HKLM\Software\ClamWin DetectFile=%SystemDrive%\PortableApps\ClamWinPortable FileKey1=%AppData%\.clamwin\log|*|RECURSE FileKey2=%ProgramData%\.clamwin\log|*|RECURSE FileKey3=%ProgramFiles%\ClamWin\bin|*.txt FileKey4=%SystemDrive%\PortableApps\ClamWinPortable\Data\db\clamav*|*|REMOVESELF FileKey5=%SystemDrive%\PortableApps\ClamWinPortable\Data\db\tmp.*|*|REMOVESELF Tags=ccapps ID=ClamWin * Author=Winapp2.ini Project [ClassicShell *] Detect=HKCU\Software\IvoSoft\ClassicStartMenu RegKey1=HKCU\Software\IvoSoft\ClassicStartMenu\MRU Tags=ccutil ID=ClassicShell * Author=Winapp2.ini Project [Clean Genius 3 *] DetectFile=%ProgramFiles%\CleanGenius 3\Update FileKey1=%ProgramFiles%\CleanGenius 3\Update|update.log Tags=ccutil ID=Clean Genius 3 * Author=Winapp2.ini Project [Clean Master *] Detect=HKCU\Software\cmcm\cleanMaster DetectFile=%ProgramFiles%\cmcm\Clean Master FileKey1=%ProgramFiles%\Clean Master|*.log* FileKey2=%ProgramFiles%\Clean Master\log|* FileKey3=%ProgramFiles%\cmcm\Clean Master\log|ktrashscan.benchmark Tags=ccutil ID=Clean Master * Author=Winapp2.ini Project [CleanMyPC Registry Cleaner *] Detect=HKCU\Software\CleanMyPC\CleanMyPC - Registry Cleaner FileKey1=%AppData%\CleanMyPC Software\CleanMyPC Registry Cleaner|fixlog.ini RegKey1=HKCU\Software\CleanMyPC\CleanMyPC - Registry Cleaner\Recent File List Tags=ccutil ID=CleanMyPC Registry Cleaner * Author=Winapp2.ini Project [CleanUp! *] Detect=HKCU\Software\stevengould.org\CleanUp! FileKey1=%AppData%|CleanUp!.log RegKey1=HKCU\Software\stevengould.org\CleanUp!\Statistics Tags=ccutil ID=CleanUp! * Author=Winapp2.ini Project [ClearProg *] DetectFile=%AppData%\ClearProg FileKey1=%AppData%\ClearProg|ClearProg.log RegKey1=HKCU\Software\ClearProg|PlugIns Tags=ccutil ID=ClearProg * Author=Winapp2.ini Project [Clementine *] Detect=HKCU\Software\Clementine FileKey1=%UserProfile%\.config\Clementine\networkcache\http|*.cache|RECURSE Tags=ccmedia ID=Clementine * Author=Winapp2.ini Project [Click.to *] DetectFile=%LocalAppData%\click.to FileKey1=%LocalAppData%\click.to|*.txt|RECURSE Tags=ccapps ID=Click.to * Author=Winapp2.ini Project [ClickFree Full Imaging Backup *] DetectFile=%ProgramData%\ClickFree\FullImagingBackup FileKey1=%ProgramData%\ClickFree\FullImagingBackup|*.log Tags=ccutil ID=ClickFree Full Imaging Backup * Author=Winapp2.ini Project [ClipGrab *] DetectFile=%LocalAppData%\ClipGrab\ClipGrab FileKey1=%LocalAppData%\ClipGrab\ClipGrab\QtWebEngine\Default|Visited Links FileKey2=%LocalAppData%\ClipGrab\ClipGrab\QtWebEngine\Default\blob_storage|*|RECURSE FileKey3=%LocalAppData%\ClipGrab\ClipGrab\QtWebEngine\Default\GPUCache|* Tags=ccmedia ID=ClipGrab * Author=Winapp2.ini Project [ClipX *] DetectFile=%LocalAppData%\ClipX FileKey1=%LocalAppData%\ClipX\Storage|* Tags=ccutil ID=ClipX * Author=Winapp2.ini Project [Clockify *] DetectFile=%AppData%\Clockify FileKey1=%AppData%\Clockify\*Cache|* FileKey2=%AppData%\Clockify\*logs|* Tags=ccutil ID=Clockify * Author=Winapp2.ini Project [CloneDVD *] Detect=HKCU\Software\Elaborate Bytes\CloneDVD2 RegKey1=HKCU\Software\Elaborate Bytes\CloneDVD2|AnimationProcessingPath RegKey2=HKCU\Software\Elaborate Bytes\CloneDVD2|AnimationWritingPath RegKey3=HKCU\Software\Elaborate Bytes\CloneDVD2|LogFilePath RegKey4=HKCU\Software\Elaborate Bytes\CloneDVD2|VideoFilesPath Tags=ccapps ID=CloneDVD * Author=Winapp2.ini Project [CloneSpy *] DetectFile=%ProgramFiles%\CloneSpy FileKey1=%ProgramFiles%\CloneSpy|CloneSpy.log FileKey2=%UserProfile%\Documents\CloneSpy|CloneSpy.log Tags=ccutil ID=CloneSpy * Author=Winapp2.ini Project [Cloudflare Warp VPN *] DetectFile=%ProgramFiles%\Cloudflare\Cloudflare WARP FileKey1=%LocalAppData%\Cloudflare|WARP-GUI.log Tags=ccinternet ID=Cloudflare Warp VPN * Author=Winapp2.ini Project [Clover *] Detect=HKCU\Software\Clover FileKey1=%LocalAppData%\Clover\User Data\Default|Bookmarks.bak;Current *;Last * FileKey2=%LocalAppData%\Clover\User Data\Default\JumpListIcons*|*tmp FileKey3=%LocalAppData%\Clover\User Data\temp|*|RECURSE Tags=ccutil ID=Clover * Author=Winapp2.ini Project [CLZ Movie Collector *] Detect=HKCU\Software\Collectorz.com\Movie FileKey1=%LocalAppData%\Collectorz.com\Movie Collector\Temp\Images|* FileKey2=%UserProfile%\Documents\Movie Collector\Images|*.tmp Tags=ccmedia ID=CLZ Movie Collector * Author=Winapp2.ini Project [Cobian Backup *] DetectFile=%ProgramFiles%\Cobian Backup* FileKey1=%ProgramFiles%\Cobian Backup*\Logs|* FileKey2=%ProgramFiles%\Cobian Backup*\Settings|Cobian Backup*last updated.ini Tags=ccutil ID=Cobian Backup * Author=Winapp2.ini Project [CobraTek PC Info *] Detect=HKCU\Software\CobraTek\PC Info FileKey1=%LocalAppData%\CobraTek\PC Info\ChangeLog|*.txt FileKey2=%LocalAppData%\CobraTek\PC Info\Log|* Tags=ccutil ID=CobraTek PC Info * Author=Winapp2.ini Project [Coc Coc Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\CocCoc\Browser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Coc Coc Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Coc Coc Autoplay Preferences *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Coc Coc Autoplay Preferences * Author=Winapp2.ini Project [Coc Coc Bookmark Backups *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|Bookmarks.bak Tags=ccapps ID=Coc Coc Bookmark Backups * Author=Winapp2.ini Project [Coc Coc Bookmark Favicons *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|favicons* Tags=ccapps ID=Coc Coc Bookmark Favicons * Author=Winapp2.ini Project [Coc Coc Caches *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\CocCoc\Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\CocCoc\Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\CocCoc\Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\CocCoc\Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\CocCoc\Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\CocCoc\Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\CocCoc\Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\CocCoc\Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\CocCoc\Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\CocCoc\Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\CocCoc\Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\CocCoc\Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\CocCoc\Browser\User Data\*\Sidebar|Ad Icons FileKey16=%LocalAppData%\CocCoc\Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\CocCoc\Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\CocCoc\Browser\User Data\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\CocCoc\Browser\User Data\Avatars|*|REMOVESELF FileKey20=%LocalAppData%\CocCoc\Browser\User Data\Coccoc Notifications|*|REMOVESELF FileKey21=%LocalAppData%\CocCoc\Browser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Coc Coc Caches * Author=Winapp2.ini Project [Coc Coc Default App Handlers *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|PreferredApps Tags=ccapps ID=Coc Coc Default App Handlers * Author=Winapp2.ini Project [Coc Coc Download History *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Coc Coc Download History * Author=Winapp2.ini Project [Coc Coc DRM Data *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\CocCoc\Browser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Coc Coc DRM Data * Author=Winapp2.ini Project [Coc Coc Extension Cookies *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|Extension Cookies Tags=ccapps ID=Coc Coc Extension Cookies * Author=Winapp2.ini Project [Coc Coc Pinned Tabs *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data RegKey1=HKCU\Software\CocCoc\Browser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Coc Coc Pinned Tabs * Author=Winapp2.ini Project [Coc Coc Privacy Sandbox *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\CocCoc\Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\CocCoc\Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\CocCoc\Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\CocCoc\Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\CocCoc\Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\CocCoc\Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Coc Coc Privacy Sandbox * Author=Winapp2.ini Project [Coc Coc Progressive Web Apps *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Coc Coc Progressive Web Apps * Author=Winapp2.ini Project [Coc Coc Saved Usernames & Passwords *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|Login Data* Tags=ccapps ID=Coc Coc Saved Usernames & Passwords * Author=Winapp2.ini Project [Coc Coc Security & Threat Detection *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\CocCoc\Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\CocCoc\Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\CocCoc\Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\CocCoc\Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\CocCoc\Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\CocCoc\Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\CocCoc\Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\CocCoc\Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\CocCoc\Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\CocCoc\Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Coc Coc Security & Threat Detection * Author=Winapp2.ini Project [Coc Coc Shopping Insights *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\CocCoc\Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\CocCoc\Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\CocCoc\Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Coc Coc Shopping Insights * Author=Winapp2.ini Project [Coc Coc Storage Quota Manager *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|QuotaManager Tags=ccapps ID=Coc Coc Storage Quota Manager * Author=Winapp2.ini Project [Coc Coc Sync Data *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Coc Coc Sync Data * Author=Winapp2.ini Project [Coc Coc Telemetry *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\Application|debug.log FileKey2=%LocalAppData%\CocCoc\Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\CocCoc\Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\CocCoc\Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\CocCoc\Browser\User Data\*|*.log FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\CocCoc\Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\CocCoc\Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\CocCoc\Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\CocCoc\Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\CocCoc\Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\CocCoc\Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\CocCoc\Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\CocCoc\Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\CocCoc\Browser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\CocCoc\Browser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\CocCoc\Browser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\CocCoc\Browser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\CocCoc\Browser\User Data\Stability|*|REMOVESELF FileKey20=%LocalAppData%\CocCoc\CrashReports|*|REMOVESELF FileKey21=%ProgramData%\CocCoc\CrashReports|*|REMOVESELF FileKey22=%ProgramFiles%\CocCoc\Browser\Application|debug.log FileKey23=%ProgramFiles%\CocCoc\Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\CocCoc\Browser\BlBeacon|failed_count RegKey2=HKCU\Software\CocCoc\Browser\BlBeacon|state RegKey3=HKCU\Software\CocCoc\Browser\Installer|LastChecked RegKey4=HKCU\Software\CocCoc\Browser\StabilityMetrics Tags=ccapps ID=Coc Coc Telemetry * Author=Winapp2.ini Project [Coc Coc Web Browsing Cookies *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Coc Coc Web Browsing Cookies * Author=Winapp2.ini Project [Coc Coc Web Browsing History *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Coc Coc Web Browsing History * Author=Winapp2.ini Project [Coc Coc Web Browsing Session *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Coc Coc Web Browsing Session * Author=Winapp2.ini Project [Coc Coc Web Storage *] DetectFile=%LocalAppData%\CocCoc\Browser\User Data FileKey1=%LocalAppData%\CocCoc\Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\CocCoc\Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\CocCoc\Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\CocCoc\Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\CocCoc\Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\CocCoc\Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\CocCoc\Browser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Coc Coc Web Storage * Author=Winapp2.ini Project [Cocosenor System Tuner *] DetectFile=%ProgramFiles%\Cocosenor System Tuner FileKey1=%ProgramFiles%\Cocosenor System Tuner|*.log Tags=ccutil ID=Cocosenor System Tuner * Author=Winapp2.ini Project [CodeGear RAD Studio 2009 *] Detect=HKCU\Software\CodeGear\BDS\6.0 RegKey1=HKCU\Software\CodeGear\BDS\6.0\Closed Files RegKey2=HKCU\Software\CodeGear\BDS\6.0\Closed Projects RegKey3=HKCU\Software\CodeGear\BDS\6.0\Session Tags=ccutil ID=CodeGear RAD Studio 2009 * Author=Winapp2.ini Project [CodeMeter *] DetectFile=%ProgramData%\CodeMeter FileKey1=%ProgramData%\CodeMeter\Logs|* Tags=ccmedia ID=CodeMeter * Author=Winapp2.ini Project [CoffeeCup GIF Animator *] Detect=HKCU\Software\CoffeeCup Software\GIF Animator RegKey1=HKCU\Software\CoffeeCup Software\GIF Animator\Settings\MRU Tags=ccutil ID=CoffeeCup GIF Animator * Author=Winapp2.ini Project [Cogs *] Detect=HKCU\Software\Valve\Steam\Apps\26500 FileKey1=%LocalAppData%\Lazy 8 Studio\Cogs|log.txt Tags=ccapps ID=Cogs * Author=Winapp2.ini Project [CoinManage *] Detect1=HKCU\Software\Liberty Street Software\CoinManage Detect2=HKCU\Software\Liberty Street Software\CoinManage Canada FileKey1=%ProgramFiles%\CoinManage*|*.txt FileKey2=%UserProfile%\Documents|CoinManage.zip;CRASH.DMP;ERRORLOG.TXT;XCrashReport.ini;XCRASHREPORT_Mon1.bmp Tags=ccapps ID=CoinManage * Author=Winapp2.ini Project [Colors for Command Palette *] DetectFile=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76 FileKey1=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76\LocalCache\Local\JPSoftworks\ColorsExtension|* FileKey3=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76\Settings|*.log* FileKey4=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\JiriPolasek.ColorsforCommandPalette_15b1mzc2p8w76\TempState|*|REMOVESELF Tags=ccapps ID=Colors for Command Palette * Author=Winapp2.ini Project [ColorSchemer *] Detect=HKCU\Software\ColorSchemer FileKey1=%AppData%\ColorSchemer\Studio\*|recentfiles.xml Tags=ccmedia ID=ColorSchemer * Author=Winapp2.ini Project [ComboFix *] DetectFile=%SystemDrive%\Qoobox FileKey1=%SystemDrive%|ComboFix.txt FileKey2=%SystemDrive%\*.tmp|*|REMOVESELF FileKey3=%SystemDrive%\Qoobox|*.txt FileKey4=%SystemDrive%\Qoobox\LastRun|*|REMOVESELF FileKey5=%SystemDrive%\Qoobox\Quarantine|*.log FileKey6=%SystemDrive%\Qoobox\Test*|*|REMOVESELF Tags=ccutil ID=ComboFix * Author=Winapp2.ini Project [Comet Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|*Web Data FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Perplexity\Comet\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Comet Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Comet Autoplay Preferences *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Comet Autoplay Preferences * Author=Winapp2.ini Project [Comet Bookmark Backups *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|Bookmarks.bak Tags=ccapps ID=Comet Bookmark Backups * Author=Winapp2.ini Project [Comet Bookmark Favicons *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|favicons* Tags=ccapps ID=Comet Bookmark Favicons * Author=Winapp2.ini Project [Comet Caches *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Perplexity\Comet\User Data|Module Info Cache FileKey3=%LocalAppData%\Perplexity\Comet\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Perplexity\Comet\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Perplexity\Comet\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Perplexity\Comet\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Perplexity\Comet\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Perplexity\Comet\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Perplexity\Comet\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Perplexity\Comet\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Perplexity\Comet\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Perplexity\Comet\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Perplexity\Comet\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Perplexity\Comet\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Perplexity\Comet\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Perplexity\Comet\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Perplexity\Comet\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Perplexity\Comet\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Perplexity\Comet\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Comet Caches * Author=Winapp2.ini Project [Comet Default App Handlers *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|PreferredApps Tags=ccapps ID=Comet Default App Handlers * Author=Winapp2.ini Project [Comet Download History *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Comet Download History * Author=Winapp2.ini Project [Comet DRM Data *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Perplexity\Comet\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Comet DRM Data * Author=Winapp2.ini Project [Comet Extension Cookies *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|Extension Cookies Tags=ccapps ID=Comet Extension Cookies * Author=Winapp2.ini Project [Comet Pinned Tabs *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data RegKey1=HKCU\Software\Perplexity\Comet\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Comet Pinned Tabs * Author=Winapp2.ini Project [Comet Privacy Sandbox *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data|*first_party_sets* FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Perplexity\Comet\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Perplexity\Comet\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Perplexity\Comet\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Perplexity\Comet\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Perplexity\Comet\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Perplexity\Comet\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Comet Privacy Sandbox * Author=Winapp2.ini Project [Comet Progressive Web Apps *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Comet Progressive Web Apps * Author=Winapp2.ini Project [Comet Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|Login Data* Tags=ccapps ID=Comet Saved Usernames & Passwords * Author=Winapp2.ini Project [Comet Security & Threat Detection *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|DIPS* FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Perplexity\Comet\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Perplexity\Comet\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Perplexity\Comet\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Perplexity\Comet\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Perplexity\Comet\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Perplexity\Comet\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Perplexity\Comet\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Perplexity\Comet\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Perplexity\Comet\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Perplexity\Comet\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Comet Security & Threat Detection * Author=Winapp2.ini Project [Comet Shopping Insights *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Perplexity\Comet\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Perplexity\Comet\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Perplexity\Comet\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Comet Shopping Insights * Author=Winapp2.ini Project [Comet Storage Quota Manager *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|QuotaManager Tags=ccapps ID=Comet Storage Quota Manager * Author=Winapp2.ini Project [Comet Sync Data *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Comet Sync Data * Author=Winapp2.ini Project [Comet Telemetry *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\Application|debug.log FileKey2=%LocalAppData%\Perplexity\Comet\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Perplexity\Comet\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Perplexity\Comet\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Perplexity\Comet\User Data\*|*.log FileKey6=%LocalAppData%\Perplexity\Comet\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Perplexity\Comet\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Perplexity\Comet\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Perplexity\Comet\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Perplexity\Comet\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Perplexity\Comet\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Perplexity\Comet\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Perplexity\Comet\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Perplexity\Comet\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Perplexity\Comet\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Perplexity\Comet\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Perplexity\Comet\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Perplexity\Comet\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Perplexity\Comet\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Perplexity\Comet\Application|debug.log FileKey21=%ProgramFiles%\Perplexity\Comet\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Perplexity\Comet\BlBeacon|failed_count RegKey2=HKCU\Software\Perplexity\Comet\BlBeacon|state RegKey3=HKCU\Software\Perplexity\Comet\Installer|LastChecked RegKey4=HKCU\Software\Perplexity\Comet\StabilityMetrics Tags=ccapps ID=Comet Telemetry * Author=Winapp2.ini Project [Comet Web Browsing Cookies *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Comet Web Browsing Cookies * Author=Winapp2.ini Project [Comet Web Browsing History *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Comet Web Browsing History * Author=Winapp2.ini Project [Comet Web Browsing Session *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Comet Web Browsing Session * Author=Winapp2.ini Project [Comet Web Storage *] DetectFile=%LocalAppData%\Perplexity\Comet\User Data FileKey1=%LocalAppData%\Perplexity\Comet\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Perplexity\Comet\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Perplexity\Comet\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Perplexity\Comet\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Perplexity\Comet\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Perplexity\Comet\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Perplexity\Comet\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Perplexity\Comet\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Comet Web Storage * Author=Winapp2.ini Project [Comfort Keys Pro *] DetectFile=%AppData%\ComfortSoftware FileKey1=%AppData%\ComfortSoftware\CKeys|* Tags=ccapps ID=Comfort Keys Pro * Author=Winapp2.ini Project [ComicRack *] DetectFile=%LocalAppData%\cYo\ComicRack FileKey1=%LocalAppData%\cYo\ComicRack\Cache\Images|*|RECURSE FileKey2=%LocalAppData%\cYo\ComicRack\Cache\Thumbnails|*|RECURSE Tags=ccapps ID=ComicRack * Author=Winapp2.ini Project [Command Line Shell *] Detect=HKCU\Software\Juan M. Aguirregabiria\CmdShEd RegKey1=HKCU\Software\Juan M. Aguirregabiria\CmdShEd\Previous Tags=ccutil ID=Command Line Shell * Author=Winapp2.ini Project [Comodo *] Detect=HKCU\Software\ComodoGroup FileKey1=%AppData%\Comodo\CCE\Logs|* FileKey2=%AppData%\ComodoGroup\CSC\Cache|* FileKey3=%LocalAppData%\COMODO|*.tmp FileKey4=%ProgramData%\Comodo Downloader|* FileKey5=%ProgramData%\Comodo\Cis\Quarantine\Temp\TempFiles|* FileKey6=%ProgramData%\Comodo\CisDumps|* FileKey7=%ProgramData%\Comodo\Firewall Pro|cislogs.sdb FileKey8=%ProgramData%\Comodo\Installer|* FileKey9=%ProgramFiles%\COMODO\COMODO Internet Security|*.tmp;cmdagent.zip;CRASH.DMP Tags=ccutil ID=Comodo * Author=Winapp2.ini Project [Comodo AV Sandbox *] DetectFile=%SystemDrive%\VritualRoot FileKey1=%SystemDrive%\VritualRoot|*|RECURSE Tags=ccutil ID=Comodo AV Sandbox * Author=Winapp2.ini Project [Comodo CertSentry *] Detect=HKLM\Software\COMODO\CertSentry FileKey1=%LocalAppData%\COMODO\CertSentry|*.log Tags=ccinternet ID=Comodo CertSentry * Author=Winapp2.ini Project [Comodo Dragon Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|*Web Data FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Comodo\Dragon\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Comodo Dragon Autoplay Preferences *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Autoplay Preferences * Author=Winapp2.ini Project [Comodo Dragon Bookmark Backups *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|Bookmarks.bak Tags=ccapps ID=Comodo Dragon Bookmark Backups * Author=Winapp2.ini Project [Comodo Dragon Bookmark Favicons *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|favicons* Tags=ccapps ID=Comodo Dragon Bookmark Favicons * Author=Winapp2.ini Project [Comodo Dragon Caches *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Comodo\Dragon\User Data|Module Info Cache FileKey3=%LocalAppData%\Comodo\Dragon\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Comodo\Dragon\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Comodo\Dragon\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Comodo\Dragon\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Comodo\Dragon\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Comodo\Dragon\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Comodo\Dragon\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Comodo\Dragon\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Comodo\Dragon\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Comodo\Dragon\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Comodo\Dragon\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Comodo\Dragon\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Comodo\Dragon\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Comodo\Dragon\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Comodo\Dragon\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Comodo\Dragon\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Caches * Author=Winapp2.ini Project [Comodo Dragon Default App Handlers *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|PreferredApps Tags=ccapps ID=Comodo Dragon Default App Handlers * Author=Winapp2.ini Project [Comodo Dragon Download History *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Download History * Author=Winapp2.ini Project [Comodo Dragon DRM Data *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Comodo\Dragon\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Comodo Dragon DRM Data * Author=Winapp2.ini Project [Comodo Dragon Extension Cookies *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|Extension Cookies Tags=ccapps ID=Comodo Dragon Extension Cookies * Author=Winapp2.ini Project [Comodo Dragon Pinned Tabs *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data RegKey1=HKCU\Software\Comodo\Dragon\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Comodo Dragon Pinned Tabs * Author=Winapp2.ini Project [Comodo Dragon Privacy Sandbox *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data|*first_party_sets* FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Comodo\Dragon\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Comodo\Dragon\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Comodo\Dragon\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Comodo\Dragon\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Comodo\Dragon\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Comodo\Dragon\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Privacy Sandbox * Author=Winapp2.ini Project [Comodo Dragon Progressive Web Apps *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Progressive Web Apps * Author=Winapp2.ini Project [Comodo Dragon Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|Login Data* Tags=ccapps ID=Comodo Dragon Saved Usernames & Passwords * Author=Winapp2.ini Project [Comodo Dragon Security & Threat Detection *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|DIPS* FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Comodo\Dragon\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Comodo\Dragon\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Comodo\Dragon\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Comodo\Dragon\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Comodo\Dragon\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Comodo\Dragon\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Comodo\Dragon\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Comodo\Dragon\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Comodo\Dragon\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Comodo\Dragon\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Security & Threat Detection * Author=Winapp2.ini Project [Comodo Dragon Shopping Insights *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Comodo\Dragon\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Comodo\Dragon\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Comodo\Dragon\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Shopping Insights * Author=Winapp2.ini Project [Comodo Dragon Storage Quota Manager *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|QuotaManager Tags=ccapps ID=Comodo Dragon Storage Quota Manager * Author=Winapp2.ini Project [Comodo Dragon Sync Data *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Sync Data * Author=Winapp2.ini Project [Comodo Dragon Telemetry *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\Application|debug.log FileKey2=%LocalAppData%\Comodo\Dragon\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Comodo\Dragon\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Comodo\Dragon\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Comodo\Dragon\User Data\*|*.log FileKey6=%LocalAppData%\Comodo\Dragon\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Comodo\Dragon\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Comodo\Dragon\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Comodo\Dragon\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Comodo\Dragon\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Comodo\Dragon\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Comodo\Dragon\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Comodo\Dragon\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Comodo\Dragon\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Comodo\Dragon\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Comodo\Dragon\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Comodo\Dragon\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Comodo\Dragon\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Comodo\Dragon\Application|debug.log FileKey21=%ProgramFiles%\Comodo\Dragon\Application\SetupMetrics|*|REMOVESELF FileKey22=%WinDir%\temp\Comodo LogsFolder|*|REMOVESELF RegKey1=HKCU\Software\Comodo\Dragon\BlBeacon|failed_count RegKey2=HKCU\Software\Comodo\Dragon\BlBeacon|state RegKey3=HKCU\Software\Comodo\Dragon\Installer|LastChecked RegKey4=HKCU\Software\Comodo\Dragon\StabilityMetrics Tags=ccapps ID=Comodo Dragon Telemetry * Author=Winapp2.ini Project [Comodo Dragon Web Browsing Cookies *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Comodo Dragon Web Browsing Cookies * Author=Winapp2.ini Project [Comodo Dragon Web Browsing History *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Comodo Dragon Web Browsing History * Author=Winapp2.ini Project [Comodo Dragon Web Browsing Session *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Web Browsing Session * Author=Winapp2.ini Project [Comodo Dragon Web Storage *] DetectFile=%LocalAppData%\Comodo\Dragon\User Data FileKey1=%LocalAppData%\Comodo\Dragon\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Comodo\Dragon\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Comodo\Dragon\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Comodo\Dragon\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Comodo\Dragon\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Comodo\Dragon\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Comodo\Dragon\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Comodo Dragon Web Storage * Author=Winapp2.ini Project [Comodo GeekBuddy *] Detect=HKLM\Software\GeekBuddyRSP DetectFile=%ProgramFiles%\Comodo\GeekBuddy FileKey1=%ProgramFiles%\Comodo\GeekBuddy\logs|*|RECURSE Tags=ccapps ID=Comodo GeekBuddy * Author=Winapp2.ini Project [Comodo System Utilities *] DetectFile=%ProgramFiles%\COMODO\COMODO System Utilities FileKey1=%ProgramFiles%\COMODO\COMODO System Utilities\backup|*|RECURSE FileKey2=%ProgramFiles%\COMODO\COMODO System Utilities\dumps|*|RECURSE FileKey3=%ProgramFiles%\COMODO\COMODO System Utilities\logs|*|RECURSE FileKey4=%ProgramFiles%\COMODO\COMODO System Utilities\temp|*|RECURSE FileKey5=%ProgramFiles%\COMODO\COMODO System Utilities\update|*|RECURSE Tags=ccutil ID=Comodo System Utilities * Author=Winapp2.ini Project [Company of Heroes *] DetectFile=%UserProfile%\Documents\My Games\Company of Heroes* FileKey1=%UserProfile%\Documents\My Games\Company of Heroes*|*.log FileKey2=%UserProfile%\Documents\My Games\Company of Heroes*\Cache|* FileKey3=%UserProfile%\Documents\My Games\Company of Heroes*\LogFiles|* FileKey4=%UserProfile%\Documents\My Games\RelicDownloader|*.log Tags=ccapps ID=Company of Heroes * Author=Winapp2.ini Project [Complete Internet Repair *] DetectFile=%AppData%\Rizonesoft\ComIntRep FileKey1=%AppData%\Rizonesoft\ComIntRep\Logging|*|RECURSE Tags=ccutil ID=Complete Internet Repair * Author=Winapp2.ini Project [Composer Dependency Manager for PHP *] DetectFile=%ProgramData%\ComposerSetup\bin\composer.phar FileKey1=%AppData%\Composer|*-old.phar FileKey2=%LocalAppData%\Composer\files|*|REMOVESELF FileKey3=%LocalAppData%\Composer\repo|*|REMOVESELF FileKey4=%LocalAppData%\Composer\vcs|*|REMOVESELF Tags=ccutil ID=Composer Dependency Manager for PHP * Author=Winapp2.ini Project [Conceiva Mezzmo *] Detect=HKLM\Software\Conceiva\Mezzmo FileKey1=%LocalAppData%\Conceiva\Logs|*|REMOVESELF FileKey2=%LocalAppData%\Conceiva\Mezzmo|DebugCERwrite.txt FileKey3=%LocalAppData%\Conceiva\Mezzmo\Temporary_*_Files|*|REMOVESELF FileKey4=%ProgramData%\Conceiva\*|*.bat;*.exe;*.txt FileKey5=%ProgramData%\Conceiva\Mezzmo\CER|*.zip FileKey6=%ProgramFiles%\Conceiva\Mezzmo|*.txt FileKey7=%ProgramFiles%\Conceiva\Mezzmo\Third\MKVToolNix|*.txt FileKey8=%ProgramFiles%\Conceiva\Mezzmo\Third\OGMDemuxer\doc|*|REMOVESELF RegKey1=HKCU\Software\Conceiva\Mezzmo\General|LastWatchFolder Tags=ccmedia ID=Conceiva Mezzmo * Author=Winapp2.ini Project [Conexant *] Detect=HKCU\Software\Conexant FileKey1=%ProgramData%\Conexant\UCILogs\COINST|*.log FileKey2=%Public%|CAFADEBUG.log Tags=ccutil ID=Conexant * Author=Winapp2.ini Project [Connectify Hotspot *] Detect=HKLM\Software\Connectify FileKey1=%ProgramData%\Connectify\cache|*.cache;*.runtime;*.time FileKey2=%ProgramFiles%\Connectify\Installer|*|REMOVESELF FileKey3=%ProgramFiles%\Connectify\Portal|*|REMOVESELF Tags=ccinternet ID=Connectify Hotspot * Author=Winapp2.ini Project [Conquer Online *] DetectFile=%ProgramFiles%\NetDragon\Conquer Online 2.0\AutoPatch FileKey1=%ProgramFiles%\NetDragon\Conquer Online 2.0\AutoPatch|Update.log Tags=ccapps ID=Conquer Online * Author=Winapp2.ini Project [ConTEXT *] Detect=HKCU\Software\Eden\ConTEXT RegKey1=HKCU\Software\Eden\ConTEXT\FileHistory RegKey2=HKCU\Software\Eden\ConTEXT\FindHistory Tags=ccapps ID=ConTEXT * Author=Winapp2.ini Project [Cook'n *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n FileKey1=%AppData%\Mozilla\eclipse\Cache|* FileKey2=%LocalAppData%\DVO\Cook'n*App|*.log|RECURSE FileKey3=%LocalAppData%\DVO\Cook'n10App\plugins|Getting Started Guide.rtf|RECURSE FileKey4=%UserProfile%\Documents\Cook'n*|*.log|RECURSE Tags=ccapps ID=Cook'n * Author=Winapp2.ini Project [Cook'n Backups *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n FileKey1=%UserProfile%\Documents\Cook'n Backups|*.ckn FileKey2=%UserProfile%\Documents\Cook'n10\Workspace\data|download;dvodb.backup FileKey3=%UserProfile%\Documents\Cook'n10\Workspace\update|update.zip FileKey4=%UserProfile%\Documents\Cook'n11\Download|* Tags=ccapps ID=Cook'n Backups * Author=Winapp2.ini Project [Coolmuster PDF Image Extractor *] DetectFile=%ProgramFiles%\Coolmuster\Coolmuster PDF Image Extractor FileKey1=%UserProfile%\Documents\Coolmuster files\Coolmuster PDF Image Extractor|PDF_IMAGE_EXTRACTOR_COOL.cfg Tags=ccmedia ID=Coolmuster PDF Image Extractor * Author=Winapp2.ini Project [Copernic Desktop Search *] DetectFile1=%AppData%\Copernic\DesktopSearch* DetectFile2=%LocalAppData%\Copernic\DesktopSearch* FileKey1=%AppData%\Copernic\*\Searches|*|RECURSE FileKey2=%AppData%\Copernic\DesktopSearch*\Logs|*|REMOVESELF FileKey3=%LocalAppData%\Copernic\DesktopSearch*\Logs|*|REMOVESELF RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory Tags=ccutil ID=Copernic Desktop Search * Author=Winapp2.ini Project [Copy as Path ContextMenu *] DetectFile=%ProgramFiles%\Copy Path Context Menu FileKey1=%ProgramFiles%\Copy Path Context Menu|*.log Tags=ccutil ID=Copy as Path ContextMenu * Author=Winapp2.ini Project [CopyQ *] DetectFile=%AppData%\copyq FileKey1=%AppData%\copyq|*.bak FileKey2=%AppData%\copyq\copyq|copyq.log Tags=ccapps ID=CopyQ * Author=Winapp2.ini Project [CopyTo Synchronizer *] Detect=HKCU\Software\kishDesign\CopyTo RegKey1=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder00 RegKey2=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder01 RegKey3=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder02 RegKey4=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder03 RegKey5=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder04 RegKey6=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder05 RegKey7=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder06 RegKey8=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder07 RegKey9=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder08 RegKey10=HKCU\Software\kishDesign\CopyTo\settings3|scutFolder09 RegKey11=HKCU\Software\kishDesign\CopyTo\settings3|scutname00 RegKey12=HKCU\Software\kishDesign\CopyTo\settings3|scutname01 RegKey13=HKCU\Software\kishDesign\CopyTo\settings3|scutname02 RegKey14=HKCU\Software\kishDesign\CopyTo\settings3|scutname03 RegKey15=HKCU\Software\kishDesign\CopyTo\settings3|scutname04 RegKey16=HKCU\Software\kishDesign\CopyTo\settings3|scutname05 RegKey17=HKCU\Software\kishDesign\CopyTo\settings3|scutname06 RegKey18=HKCU\Software\kishDesign\CopyTo\settings3|scutname07 RegKey19=HKCU\Software\kishDesign\CopyTo\settings3|scutname08 RegKey20=HKCU\Software\kishDesign\CopyTo\settings3|scutname09 RegKey21=HKCU\Software\kishDesign\CopyTo\settings3|Source00 RegKey22=HKCU\Software\kishDesign\CopyTo\settings3|Source01 RegKey23=HKCU\Software\kishDesign\CopyTo\settings3|Source02 RegKey24=HKCU\Software\kishDesign\CopyTo\settings3|Source03 RegKey25=HKCU\Software\kishDesign\CopyTo\settings3|Source04 RegKey26=HKCU\Software\kishDesign\CopyTo\settings3|Source05 RegKey27=HKCU\Software\kishDesign\CopyTo\settings3|Source06 RegKey28=HKCU\Software\kishDesign\CopyTo\settings3|Source07 RegKey29=HKCU\Software\kishDesign\CopyTo\settings3|Source08 RegKey30=HKCU\Software\kishDesign\CopyTo\settings3|Source09 RegKey31=HKCU\Software\kishDesign\CopyTo\settings3|target00 RegKey32=HKCU\Software\kishDesign\CopyTo\settings3|target01 RegKey33=HKCU\Software\kishDesign\CopyTo\settings3|target02 RegKey34=HKCU\Software\kishDesign\CopyTo\settings3|target03 RegKey35=HKCU\Software\kishDesign\CopyTo\settings3|target04 RegKey36=HKCU\Software\kishDesign\CopyTo\settings3|target05 RegKey37=HKCU\Software\kishDesign\CopyTo\settings3|target06 RegKey38=HKCU\Software\kishDesign\CopyTo\settings3|target07 RegKey39=HKCU\Software\kishDesign\CopyTo\settings3|target08 RegKey40=HKCU\Software\kishDesign\CopyTo\settings3|target09 Tags=ccutil ID=CopyTo Synchronizer * Author=Winapp2.ini Project [CopyTrans *] DetectFile1=%AppData%\WindSolutions\CopyTrans* DetectFile2=%ProgramData%\WindSolutions\CopyTrans* FileKey1=%ProgramData%\WindSolutions|*.txt|RECURSE FileKey2=%ProgramData%\WindSolutions\CopyTrans*\Logs|*|RECURSE Tags=ccmedia ID=CopyTrans * Author=Winapp2.ini Project [Core Temp *] DetectFile=%ProgramFiles%\Core Temp FileKey1=%ProgramFiles%\Core Temp|*.csv Tags=ccutil ID=Core Temp * Author=Winapp2.ini Project [Corel AfterShot Pro *] Detect=HKCU\Software\Corel\AfterShot Pro V3 FileKey1=%LocalAppData%\Corel\AfterShot Pro *|*.log FileKey2=%LocalAppData%\Corel\AfterShot Pro *\Cache|*|RECURSE Tags=ccmedia ID=Corel AfterShot Pro * Author=Winapp2.ini Project [Corel Downloads *] DetectFile=%ProgramData%\Corel\Downloads FileKey1=%ProgramData%\Corel\Downloads|*|RECURSE Tags=ccapps ID=Corel Downloads * Author=Winapp2.ini Project [Corel PaintShop Pro *] Detect1=HKCU\Software\Corel\PaintShop Pro Detect2=HKCU\Software\Corel\PhotoDownloader FileKey1=%AppData%\Corel\PaintShop Photo Pro\13\Cache|*|RECURSE FileKey2=%LocalAppData%\Corel|*.db;*.PspCache FileKey3=%LocalAppData%\Corel PaintShop Pro\*\Cache|* FileKey4=%LocalAppData%\Corel PaintShop Pro\*\Database|*.db FileKey5=%LocalAppData%\Corel PaintShop Pro\*\Thumbs|*|RECURSE FileKey6=%LocalAppData%\Corel\Thumbs|*|RECURSE RegKey1=HKCU\Software\Corel\PaintShop Pro\X7\CoreMemoryManager\0 RegKey2=HKCU\Software\Corel\PaintShop Pro\X10\CoreMemoryManager\0 RegKey3=HKCU\Software\Corel\PhotoDownloader\2\PhotoDownloader\DefaultDownloadFolder RegKey4=HKCU\Software\Corel\PhotoDownloader\2\PhotoDownloader\DownloadFolder Tags=ccmedia ID=Corel PaintShop Pro * Author=Winapp2.ini Project [Corel PaintShop Pro AutoPreserve *] Detect=HKCU\Software\Corel\PaintShop Pro FileKey1=%UserProfile%\Pictures\Corel Auto-Preserve|* Tags=ccmedia ID=Corel PaintShop Pro AutoPreserve * Author=Winapp2.ini Project [Corel PhotoImpact X3 *] DetectFile=%AppData%\Ulead Systems\Ulead PhotoImpact\13.0 FileKey1=%AppData%\Ulead Systems\Ulead PhotoImpact\13.0\Ulead.DAT\BwsCache|* FileKey2=%AppData%\Ulead Systems\Ulead PhotoImpact\13.0\Ulead.DAT\Recently|*.lnk Tags=ccmedia ID=Corel PhotoImpact X3 * Author=Winapp2.ini Project [Corel VideoStudio Pro *] Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro FileKey1=%UserProfile%\Documents\Corel VideoStudio Pro\*.0\AudioTmp|* FileKey2=%UserProfile%\Documents\Corel VideoStudio Pro\*.0\SmartProxy|* RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Preference|Working Folder RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\16.0\HerRFL RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\17.0\HerRFL Tags=ccmedia ID=Corel VideoStudio Pro * Author=Winapp2.ini Project [Corel Wordperfect *] Detect=HKCU\Software\Corel\User Assistant RegKey1=HKCU\Software\Corel\User Assistant\11\Recent Work\Presentations RegKey2=HKCU\Software\Corel\User Assistant\12\Recent Work\Presentations RegKey3=HKCU\Software\Corel\User Assistant\13\Recent Work\Presentations RegKey4=HKCU\Software\Corel\User Assistant\14\Recent Work\Presentations RegKey5=HKCU\Software\Corel\User Assistant\X3\Recent Work\Presentations RegKey6=HKCU\Software\Corel\User Assistant\X4\Recent Work\Presentations RegKey7=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL Tags=ccapps ID=Corel Wordperfect * Author=Winapp2.ini Project [CorelDRAW Graphics Suite X7 *] Detect=HKCU\Software\Corel\CorelDRAW\17.0 FileKey1=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Config|capture.ini;corelpdf.ini FileKey2=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Connect|Connect.config FileKey3=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Draw|FindAndReplaceMRU.xml FileKey4=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Draw\Export|dialog.export.web.xml FileKey5=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Draw\Presets\HTML Export|default.pst FileKey6=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\Draw\PreviewCache|*|RECURSE FileKey7=%LocalAppData%\Corel\CorelDRAW Graphics Suite X7\PHOTO-PAINT\PreviewCache|*|RECURSE FileKey8=%ProgramData%\Bitstream\Font Navigator\6.0\Cache|*|RECURSE FileKey9=%ProgramFiles%\Corel\CorelDRAW Graphics Suite X7\Setup|*|REMOVESELF RegKey1=HKCU\Software\Bitstream\Font Navigator\6.0\Copy|Folders RegKey2=HKCU\Software\Bitstream\Font Navigator\6.0\Move|Folders RegKey3=HKCU\Software\Corel\CorelDRAW\17.0\Draw\Application Preferences\Directories|DrawDocsDir RegKey4=HKCU\Software\Corel\CorelDRAW\17.0\Draw\Application Preferences\Framework|RecentFiles RegKey5=HKCU\Software\Corel\CorelDRAW\17.0\Draw\Application Preferences\HTML Export|DestPath RegKey6=HKCU\Software\Corel\CorelDRAW\17.0\Draw\Application Preferences\NewFromTemplate|BrowseTemplateDir RegKey7=HKCU\Software\Corel\CorelDRAW\17.0\PHOTO-PAINT\Application Preferences\Framework|RecentFiles Tags=ccapps ID=CorelDRAW Graphics Suite X7 * Author=Winapp2.ini Project [Corsair iCue *] DetectFile=%ProgramData%\Corsair\CUE\Service logs FileKey1=%LocalAppData%\Corsair\CUE\logs|*.log FileKey2=%ProgramData%\Corsair\CorsairLLAccessService|*.log FileKey3=%ProgramData%\Corsair\CUE\Service logs|Service_Trace*.log Tags=ccutil ID=Corsair iCue * Author=Winapp2.ini Project [Cortana *] DetectFile1=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey6=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\AC|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\LocalState|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\Settings|*.log* FileKey10=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\TempState|*|REMOVESELF ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe\LocalState\DeviceSearchCache\|SettingsCache.txt Tags=ccwindows ID=Cortana * Author=Winapp2.ini Project [Counter-Strike *] DetectFile=%ProgramFiles%\Counter-Strike* FileKey1=%ProgramFiles%\Counter-Strike*|*.log FileKey2=%ProgramFiles%\Counter-Strike*\cstrike\addons\amxmodx\logs|*.log FileKey3=%ProgramFiles%\Counter-Strike*\cstrike\lhdoc\Demo Player\SK Player|history.txt FileKey4=%ProgramFiles%\Counter-Strike*\valve\bin|*.log Tags=ccapps ID=Counter-Strike * Author=Winapp2.ini Project [CrashRpt *] DetectFile=%LocalAppData%\CrashRpt FileKey1=%LocalAppData%\CrashRpt|*|RECURSE Tags=ccutil ID=CrashRpt * Author=Winapp2.ini Project [Crayon Physics Deluxe *] Detect=HKCU\Software\Valve\Steam\Apps\26900 FileKey1=%AppData%\Crayon Physics Deluxe|log.txt FileKey2=%AppData%\Crayon Physics Deluxe\data\recordings\temp|current_recording.tmp FileKey3=%ProgramFiles%\Steam\steamapps\common\crayon physics deluxe|log.txt FileKey4=%ProgramFiles%\Steam\steamapps\common\crayon physics deluxe\cache|* FileKey5=%ProgramFiles%\Steam\steamapps\common\crayon physics deluxe\data\editor|*.tmp FileKey6=%ProgramFiles%\Steam\steamapps\common\crayon physics deluxe\data\recordings\temp|*.tmp Tags=ccapps ID=Crayon Physics Deluxe * Author=Winapp2.ini Project [Creative Installation Information *] DetectFile=%ProgramFiles%\Creative Installation Information FileKey1=%ProgramFiles%\Creative Installation Information|*.log|RECURSE Tags=ccutil ID=Creative Installation Information * Author=Winapp2.ini Project [Creative Live! Central 3 *] DetectFile=%AppData%\Creative\Live! Central 3 FileKey1=%AppData%\Creative\Live! Central 3|*.txt|RECURSE Tags=ccmedia ID=Creative Live! Central 3 * Author=Winapp2.ini Project [Creative Pro Proteus VX *] Detect=HKCU\Software\Creative Professional\Proteus VX RegKey1=HKCU\Software\Creative Professional\Proteus VX VSTi\Recent File List Tags=ccmedia ID=Creative Pro Proteus VX * Author=Winapp2.ini Project [Creative Sound Blaster *] DetectFile=%ProgramData%\Creative\Software Update FileKey1=%ProgramData%\Creative\Software Update\Cache|*|RECURSE FileKey2=%ProgramData%\Creative\Software Update\Log|* Tags=ccutil ID=Creative Sound Blaster * Author=Winapp2.ini Project [Cricut Design Space *] DetectFile=%AppData%\Cricut Design Space FileKey1=%AppData%\Cricut Design Space|*-journal;*.old;LOG;Network Persistent State|RECURSE FileKey2=%AppData%\Cricut Design Space\*Cache|*|RECURSE FileKey3=%AppData%\Cricut Design Space\blob_storage|*|RECURSE FileKey4=%AppData%\Cricut Design Space\Native\Logs|* Tags=ccapps ID=Cricut Design Space * Author=Winapp2.ini Project [Cromite Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|*Web Data FileKey2=%LocalAppData%\Cromite\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Cromite\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Cromite Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Cromite Autoplay Preferences *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Cromite Autoplay Preferences * Author=Winapp2.ini Project [Cromite Bookmark Backups *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|Bookmarks.bak Tags=ccapps ID=Cromite Bookmark Backups * Author=Winapp2.ini Project [Cromite Bookmark Favicons *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|favicons* Tags=ccapps ID=Cromite Bookmark Favicons * Author=Winapp2.ini Project [Cromite Caches *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Cromite\User Data|Module Info Cache FileKey3=%LocalAppData%\Cromite\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Cromite\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Cromite\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Cromite\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Cromite\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Cromite\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Cromite\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Cromite\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Cromite\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Cromite\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Cromite\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Cromite\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Cromite\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Cromite\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Cromite\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Cromite\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Cromite\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Cromite Caches * Author=Winapp2.ini Project [Cromite Default App Handlers *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|PreferredApps Tags=ccapps ID=Cromite Default App Handlers * Author=Winapp2.ini Project [Cromite Download History *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Cromite\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Cromite Download History * Author=Winapp2.ini Project [Cromite DRM Data *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Cromite\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Cromite DRM Data * Author=Winapp2.ini Project [Cromite Extension Cookies *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|Extension Cookies Tags=ccapps ID=Cromite Extension Cookies * Author=Winapp2.ini Project [Cromite Pinned Tabs *] DetectFile=%LocalAppData%\Cromite\User Data RegKey1=HKCU\Software\Cromite\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Cromite Pinned Tabs * Author=Winapp2.ini Project [Cromite Privacy Sandbox *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data|*first_party_sets* FileKey2=%LocalAppData%\Cromite\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Cromite\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Cromite\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Cromite\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Cromite\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Cromite\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Cromite\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Cromite Privacy Sandbox * Author=Winapp2.ini Project [Cromite Progressive Web Apps *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Cromite Progressive Web Apps * Author=Winapp2.ini Project [Cromite Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|Login Data* Tags=ccapps ID=Cromite Saved Usernames & Passwords * Author=Winapp2.ini Project [Cromite Security & Threat Detection *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|DIPS* FileKey2=%LocalAppData%\Cromite\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Cromite\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Cromite\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Cromite\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Cromite\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Cromite\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Cromite\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Cromite\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Cromite\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Cromite\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Cromite\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Cromite Security & Threat Detection * Author=Winapp2.ini Project [Cromite Shopping Insights *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Cromite\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Cromite\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Cromite\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Cromite\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Cromite Shopping Insights * Author=Winapp2.ini Project [Cromite Storage Quota Manager *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|QuotaManager Tags=ccapps ID=Cromite Storage Quota Manager * Author=Winapp2.ini Project [Cromite Sync Data *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Cromite Sync Data * Author=Winapp2.ini Project [Cromite Telemetry *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\Application|debug.log FileKey2=%LocalAppData%\Cromite\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Cromite\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Cromite\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Cromite\User Data\*|*.log FileKey6=%LocalAppData%\Cromite\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Cromite\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Cromite\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Cromite\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Cromite\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Cromite\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Cromite\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Cromite\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Cromite\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Cromite\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Cromite\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Cromite\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Cromite\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Cromite\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Cromite\Application|debug.log FileKey21=%ProgramFiles%\Cromite\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Cromite\BlBeacon|failed_count RegKey2=HKCU\Software\Cromite\BlBeacon|state RegKey3=HKCU\Software\Cromite\Installer|LastChecked RegKey4=HKCU\Software\Cromite\StabilityMetrics Tags=ccapps ID=Cromite Telemetry * Author=Winapp2.ini Project [Cromite Web Browsing Cookies *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Cromite Web Browsing Cookies * Author=Winapp2.ini Project [Cromite Web Browsing History *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Cromite Web Browsing History * Author=Winapp2.ini Project [Cromite Web Browsing Session *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Cromite\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Cromite Web Browsing Session * Author=Winapp2.ini Project [Cromite Web Storage *] DetectFile=%LocalAppData%\Cromite\User Data FileKey1=%LocalAppData%\Cromite\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Cromite\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Cromite\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Cromite\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Cromite\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Cromite\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Cromite\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Cromite\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Cromite Web Storage * Author=Winapp2.ini Project [Crusader Kings *] DetectFile=%UserProfile%\Documents\Paradox Interactive\Crusader Kings * FileKey1=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\.launcher-cache\*|*|REMOVESELF FileKey2=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\Cache|* FileKey3=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\Crashes|*|REMOVESELF FileKey4=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\Dumps|* FileKey5=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\Logs|* FileKey6=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\oos|*.log|RECURSE FileKey7=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\shadercache\*\*|* FileKey8=%UserProfile%\Documents\Paradox Interactive\Crusader Kings*\TerrainCache|*.cache Tags=ccapps ID=Crusader Kings * Author=Winapp2.ini Project [Crypt of the NecroDancer *] Detect=HKCU\Software\Valve\Steam\Apps\247080 FileKey1=%LocalAppData%\NecroDancer\replays|*|REMOVESELF FileKey2=%ProgramFiles%\Steam\steamapps\common\Crypt of the NecroDancer\logs|* FileKey3=%ProgramFiles%\Steam\steamapps\common\Crypt of the NecroDancer\Necrodancer*|*.log FileKey4=%ProgramFiles%\Steam\steamapps\common\Crypt of the NecroDancer\replays|* Tags=ccapps ID=Crypt of the NecroDancer * Author=Winapp2.ini Project [CrypTool 2 *] Detect=HKCU\Software\CrypTool2.0 FileKey1=%LocalAppData%\CrypTool2\Temp|*|REMOVESELF RegKey1=HKCU\Software\CrypTool2.0|recentFileList Tags=ccutil ID=CrypTool 2 * Author=Winapp2.ini Project [Crysis *] DetectFile1=%ProgramFiles%\EA Games\Crysis* DetectFile2=%ProgramFiles%\Steam\Steamapps\common\Crysis* FileKey1=%ProgramFiles%\EA Games\Crysis *|*.log FileKey2=%ProgramFiles%\EA Games\Crysis *\LogBackups|* FileKey3=%ProgramFiles%\Steam\Steamapps\common\Crysis *|*.log FileKey4=%ProgramFiles%\Steam\Steamapps\common\Crysis *\LogBackups|* FileKey5=%UserProfile%\Documents\My Games\Crysis*\Shaders\Cache|*|RECURSE FileKey6=%UserProfile%\Saved Games\Crysis*\Shaders\Cache|*|RECURSE Tags=ccapps ID=Crysis * Author=Winapp2.ini Project [CrystalDiskInfo *] DetectFile=%ProgramFiles%\CrystalDiskInfo\Smart FileKey1=%ProgramFiles%\CrystalDiskInfo\Smart|*|RECURSE Tags=ccutil ID=CrystalDiskInfo * Author=Winapp2.ini Project [Cult of the Lamb *] DetectFile=%UserProfile%\AppData\LocalLow\Massive Monster\Cult of the Lamb FileKey1=%UserProfile%\AppData\LocalLow\Massive Monster\Cult of the Lamb|*.log FileKey2=%UserProfile%\AppData\LocalLow\Massive Monster\Cult of the Lamb\Unity|*|RECURSE Tags=ccapps ID=Cult of the Lamb * Author=Winapp2.ini Project [Cultist Simulator *] DetectFile=%UserProfile%\AppData\LocalLow\Weather Factory\Cultist Simulator FileKey1=%UserProfile%\AppData\LocalLow\Weather Factory\Cultist Simulator|*log FileKey2=%UserProfile%\AppData\LocalLow\Weather Factory\Cultist Simulator\Unity|*|REMOVESELF Tags=ccapps ID=Cultist Simulator * Author=Winapp2.ini Project [CurrencyManage *] Detect=HKCU\Software\Liberty Street Software\CurrencyManage FileKey1=%ProgramFiles%\CurrencyManage|*.txt Tags=ccapps ID=CurrencyManage * Author=Winapp2.ini Project [CurseForge *] DetectFile=%LocalAppData%\Programs\CurseForge Windows FileKey1=%AppData%\CurseForge|*-journal;*.old;LOG;QuotaManager|RECURSE FileKey2=%AppData%\CurseForge\*Cache|*|REMOVESELF FileKey3=%AppData%\CurseForge\agent|gamescache.json FileKey4=%AppData%\CurseForge\agent\logs\*|* FileKey5=%AppData%\CurseForge\agent\Thumbnails\*|* FileKey6=%AppData%\CurseForge\blob_storage|*|RECURSE FileKey7=%AppData%\CurseForge\Crashpad\Reports|* FileKey8=%AppData%\CurseForge\Logs|* FileKey9=%AppData%\CurseForge\Partitions\*\*cache*|*|REMOVESELF FileKey10=%AppData%\CurseForge\Service Worker\*Cache*|*|RECURSE FileKey11=%LocalAppData%\curseforge-updater|*|RECURSE Tags=ccapps ID=CurseForge * Author=Winapp2.ini Project [CursorArts *] Detect=HKCU\Software\CursorArts RegKey1=HKCU\Software\CursorArts\MRU Items RegKey2=HKCU\Software\CursorArts\MRU Library Items Tags=ccmedia ID=CursorArts * Author=Winapp2.ini Project [CursorFX *] Detect=HKCU\Software\CursorFX Theme Editor RegKey1=HKCU\Software\CursorFX Theme Editor\Recent File List Tags=ccutil ID=CursorFX * Author=Winapp2.ini Project [CustomFolder *] Detect=HKCU\Software\CustomFolder FileKey1=%ProgramFiles%\CustomFolder|*.log Tags=ccutil ID=CustomFolder * Author=Winapp2.ini Project [CuteFTP *] DetectFile=%AppData%\Globalscape\CuteFTP FileKey1=%AppData%\Globalscape\CuteFTP\*|*.log FileKey2=%AppData%\Globalscape\CuteFTP\*\Logs|* FileKey3=%LocalAppData%\Globalscape\CuteFTP\*\Cache*|*|RECURSE Tags=ccinternet ID=CuteFTP * Author=Winapp2.ini Project [CuteHTML 2.3 *] Detect=HKCU\Software\GlobalSCAPE\CuteHTML\2.3 RegKey1=HKCU\Software\GlobalSCAPE\CuteHTML\2.3\Recent File List Tags=ccutil ID=CuteHTML 2.3 * Author=Winapp2.ini Project [CutePDF Writer *] Detect=HKCU\Software\Acro Software Inc\CPW FileKey1=%LocalAppData%\CutePDF Writer|*.tmp RegKey1=HKCU\Software\Acro Software Inc\CPW|Filename RegKey2=HKCU\Software\Acro Software Inc\CPW|Title Tags=ccmedia ID=CutePDF Writer * Author=Winapp2.ini Project [Cyber Privacy Suite *] DetectFile=%AppData%\Cyber Privacy Suite FileKey1=%AppData%\Cyber Privacy Suite\Cyber Privacy Suite*\install|*log.txt FileKey2=%LocalAppData%\CyberPrivacySuite|*.log;log.rtf Tags=ccutil ID=Cyber Privacy Suite * Author=Winapp2.ini Project [Cyberduck *] Detect=HKCR\.cyberducklicense FileKey1=%AppData%\Cyberduck|*.log Tags=ccutil ID=Cyberduck * Author=Winapp2.ini Project [Cyberlab *] Detect=HKCU\Software\ZookaWare DetectFile=%LocalAppData%\Cyberlab FileKey1=%LocalAppData%\Cyberlab\ScanLogs|*.log FileKey2=%LocalAppData%\ZookaWare\ScanLogs|*.log Tags=ccutil ID=Cyberlab * Author=Winapp2.ini Project [CyberLink *] Detect=HKCU\Software\CyberLink FileKey1=%AppData%\CyberLink\MediaCache|*|RECURSE FileKey2=%ProgramData%\CyberLink\Boomerang\*|*.dmp;*.xml FileKey3=%ProgramData%\CyberLink\CBE\*|*|RECURSE FileKey4=%ProgramData%\CyberLink\Downloader|*|RECURSE FileKey5=%ProgramData%\install_backup|*|REMOVESELF FileKey6=%ProgramData%\install_clap|*|REMOVESELF RegKey1=HKCU\Software\CyberLink\DSSharedMediaInfo\SharedInfoCache RegKey2=HKCU\Software\CyberLink\MediaCache\Data4 RegKey3=HKCU\Software\CyberLink\MediaCache\Thumbnail4 RegKey4=HKCU\Software\CyberLink\MediaCache5\Data5 RegKey5=HKCU\Software\CyberLink\MediaCache5\Thumbnail5 Tags=ccmedia ID=CyberLink * Author=Winapp2.ini Project [CyberLink AudioDirector *] Detect1=HKCU\Software\CyberLink\AudioDirector4 Detect2=HKCU\Software\CyberLink\AudioDirector5 Detect3=HKCU\Software\CyberLink\AudioDirector6 Detect4=HKCU\Software\CyberLink\AudioDirector7 Detect5=HKCU\Software\CyberLink\AudioDirector8 Detect6=HKCU\Software\CyberLink\AudioDirector9 FileKey1=%LocalAppData%\Cyberlink\AudioDirector\*|*|RECURSE FileKey2=%UserProfile%\Documents\Cyberlink\AudioDirector\*\SplitterIndex|*|RECURSE RegKey1=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Data5 RegKey2=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Thumbnail5 RegKey3=HKCU\Software\CyberLink\AudioDirector5\MediaObj\MediaCache5\Data5 RegKey4=HKCU\Software\CyberLink\AudioDirector5\MediaObj\MediaCache5\Thumbnail5 RegKey5=HKCU\Software\CyberLink\AudioDirector6\MediaObj\MediaCache5\Data5 RegKey6=HKCU\Software\CyberLink\AudioDirector6\MediaObj\MediaCache5\Thumbnail5 RegKey7=HKCU\Software\CyberLink\AudioDirector7\MediaObj\MediaCache5\Data5 RegKey8=HKCU\Software\CyberLink\AudioDirector7\MediaObj\MediaCache5\Thumbnail5 RegKey9=HKCU\Software\CyberLink\AudioDirector8\MediaObj\MediaCache5\Data5 RegKey10=HKCU\Software\CyberLink\AudioDirector8\MediaObj\MediaCache5\Thumbnail5 RegKey11=HKCU\Software\CyberLink\AudioDirector9\MediaObj\MediaCache5\Data5 RegKey12=HKCU\Software\CyberLink\AudioDirector9\MediaObj\MediaCache5\Thumbnail5 Tags=ccmedia ID=CyberLink AudioDirector * Author=Winapp2.ini Project [CyberLink ColorDirector *] Detect1=HKCU\Software\CyberLink\ColorDirector3 Detect2=HKCU\Software\CyberLink\ColorDirector4 Detect3=HKCU\Software\CyberLink\ColorDirector5 Detect4=HKCU\Software\CyberLink\ColorDirector6 Detect5=HKCU\Software\CyberLink\ColorDirector7 FileKey1=%LocalAppData%\Cyberlink\ColorDirector\*|*|RECURSE RegKey1=HKCU\Software\CyberLink\ColorDirector3\MediaObj\MediaCache5\Data5 RegKey2=HKCU\Software\CyberLink\ColorDirector3\MediaObj\MediaCache5\Thumbnail5 RegKey3=HKCU\Software\CyberLink\ColorDirector4\MediaObj\MediaCache5\Data5 RegKey4=HKCU\Software\CyberLink\ColorDirector4\MediaObj\MediaCache5\Thumbnail5 RegKey5=HKCU\Software\CyberLink\ColorDirector5\MediaObj\MediaCache5\Data5 RegKey6=HKCU\Software\CyberLink\ColorDirector5\MediaObj\MediaCache5\Thumbnail5 RegKey7=HKCU\Software\CyberLink\ColorDirector6\MediaObj\MediaCache5\Data5 RegKey8=HKCU\Software\CyberLink\ColorDirector6\MediaObj\MediaCache5\Thumbnail5 RegKey9=HKCU\Software\CyberLink\ColorDirector7\MediaObj\MediaCache5\Data5 RegKey10=HKCU\Software\CyberLink\ColorDirector7\MediaObj\MediaCache5\Thumbnail5 Tags=ccmedia ID=CyberLink ColorDirector * Author=Winapp2.ini Project [CyberLink PhotoDirector *] DetectFile=%UserProfile%\Pictures\PhotoDirector FileKey1=%UserProfile%\Pictures\PhotoDirector\*\*|*|RECURSE ExcludeKey1=PATH|%UserProfile%\Pictures\PhotoDirector\*\*\|*.phd Tags=ccmedia ID=CyberLink PhotoDirector * Author=Winapp2.ini Project [CyberLink Power2Go *] Detect1=HKCU\Software\CyberLink\Power2Go9 Detect2=HKCU\Software\CyberLink\Power2Go10 Detect3=HKCU\Software\CyberLink\Power2Go11 Detect4=HKCU\Software\CyberLink\Power2Go12 FileKey1=%LocalAppData%\Cyberlink\Power2Go*|DLDB.db FileKey2=%ProgramFiles%\Cyberlink\Power2Go*|*.tmp;Thumbs.db|RECURSE FileKey3=%Public%\Documents\Cyberlink\Power2Go*|MP3Cache.log FileKey4=%UserProfile%\Documents\PDRMUSIC.TMP|*|REMOVESELF FileKey5=%UserProfile%\Music|*.tmp FileKey6=%UserProfile%\Pictures|*.tmp RegKey1=HKCU\Software\CyberLink\LabelPrint\Recent File List RegKey2=HKCU\Software\CyberLink\Power2Go9\9.0|CDRippingPath RegKey3=HKCU\Software\CyberLink\Power2Go9\9.0|CUEName RegKey4=HKCU\Software\CyberLink\Power2Go9\9.0|CUEPath RegKey5=HKCU\Software\CyberLink\Power2Go9\9.0|DestFolder RegKey6=HKCU\Software\CyberLink\Power2Go9\9.0|DVDFolderPath RegKey7=HKCU\Software\CyberLink\Power2Go9\9.0|ImagePath RegKey8=HKCU\Software\CyberLink\Power2Go9\9.0|LastBrowsePath RegKey9=HKCU\Software\CyberLink\Power2Go9\9.0|LastSaveProjPath RegKey10=HKCU\Software\CyberLink\Power2Go9\9.0|MonitorPaths RegKey11=HKCU\Software\CyberLink\Power2Go9\9.0|OpenPrjFilePath RegKey12=HKCU\Software\CyberLink\Power2Go9\9.0|SelectedFolderPath RegKey13=HKCU\Software\CyberLink\Power2Go9\9.0\MediaObj\MediaCache5\Data5 RegKey14=HKCU\Software\CyberLink\Power2Go9\9.0\MediaObj\MediaCache5\Thumbnail5 RegKey15=HKCU\Software\CyberLink\Power2Go10\10.0|CDRippingPath RegKey16=HKCU\Software\CyberLink\Power2Go10\10.0|CUEName RegKey17=HKCU\Software\CyberLink\Power2Go10\10.0|CUEPath RegKey18=HKCU\Software\CyberLink\Power2Go10\10.0|DestFolder RegKey19=HKCU\Software\CyberLink\Power2Go10\10.0|DVDFolderPath RegKey20=HKCU\Software\CyberLink\Power2Go10\10.0|ImagePath RegKey21=HKCU\Software\CyberLink\Power2Go10\10.0|LastBrowsePath RegKey22=HKCU\Software\CyberLink\Power2Go10\10.0|LastSaveProjPath RegKey23=HKCU\Software\CyberLink\Power2Go10\10.0|MonitorPaths RegKey24=HKCU\Software\CyberLink\Power2Go10\10.0|OpenPrjFilePath RegKey25=HKCU\Software\CyberLink\Power2Go10\10.0|SelectedFolderPath RegKey26=HKCU\Software\CyberLink\Power2Go10\10.0\MediaObj\MediaCache5\Data5 RegKey27=HKCU\Software\CyberLink\Power2Go10\10.0\MediaObj\MediaCache5\Thumbnail5 RegKey28=HKCU\Software\CyberLink\Power2Go11\11.0|CDRippingPath RegKey29=HKCU\Software\CyberLink\Power2Go11\11.0|CUEName RegKey30=HKCU\Software\CyberLink\Power2Go11\11.0|CUEPath RegKey31=HKCU\Software\CyberLink\Power2Go11\11.0|DestFolder RegKey32=HKCU\Software\CyberLink\Power2Go11\11.0|DVDFolderPath RegKey33=HKCU\Software\CyberLink\Power2Go11\11.0|ImagePath RegKey34=HKCU\Software\CyberLink\Power2Go11\11.0|LastBrowsePath RegKey35=HKCU\Software\CyberLink\Power2Go11\11.0|LastSaveProjPath RegKey36=HKCU\Software\CyberLink\Power2Go11\11.0|MonitorPaths RegKey37=HKCU\Software\CyberLink\Power2Go11\11.0|OpenPrjFilePath RegKey38=HKCU\Software\CyberLink\Power2Go11\11.0|SelectedFolderPath RegKey39=HKCU\Software\CyberLink\Power2Go11\11.0\MediaObj\MediaCache5\Data5 RegKey40=HKCU\Software\CyberLink\Power2Go11\11.0\MediaObj\MediaCache5\Thumbnail5 RegKey41=HKCU\Software\CyberLink\Power2Go12\12.0|CDRippingPath RegKey42=HKCU\Software\CyberLink\Power2Go12\12.0|CUEName RegKey43=HKCU\Software\CyberLink\Power2Go12\12.0|CUEPath RegKey44=HKCU\Software\CyberLink\Power2Go12\12.0|DestFolder RegKey45=HKCU\Software\CyberLink\Power2Go12\12.0|DVDFolderPath RegKey46=HKCU\Software\CyberLink\Power2Go12\12.0|ImagePath RegKey47=HKCU\Software\CyberLink\Power2Go12\12.0|LastBrowsePath RegKey48=HKCU\Software\CyberLink\Power2Go12\12.0|LastSaveProjPath RegKey49=HKCU\Software\CyberLink\Power2Go12\12.0|MonitorPaths RegKey50=HKCU\Software\CyberLink\Power2Go12\12.0|OpenPrjFilePath RegKey51=HKCU\Software\CyberLink\Power2Go12\12.0|SelectedFolderPath RegKey52=HKCU\Software\CyberLink\Power2Go12\12.0\MediaObj\MediaCache5\Data5 RegKey53=HKCU\Software\CyberLink\Power2Go12\12.0\MediaObj\MediaCache5\Thumbnail5 RegKey54=HKCU\Software\CyberLink\WaveEditor\2.0|ImportDir RegKey55=HKCU\Software\CyberLink\WaveEditor\2.0|TempFileDir RegKey56=HKCU\Software\CyberLink\WaveEditor\2.0|WorkDir Tags=ccmedia ID=CyberLink Power2Go * Author=Winapp2.ini Project [Cyberlink PowerCinema *] Detect=HKCU\Software\Cyberlink\PowerCinema DetectFile=%LocalAppData%\PowerCinema FileKey1=%LocalAppData%\PowerCinema|trace.* FileKey2=%ProgramData%|{*-*-*-*-*}.log Tags=ccmedia ID=Cyberlink PowerCinema * Author=Winapp2.ini Project [CyberLink PowerDirector *] Detect1=HKCU\Software\CyberLink\PowerDirector10 Detect2=HKCU\Software\CyberLink\PowerDirector11 Detect3=HKCU\Software\CyberLink\PowerDirector12 Detect4=HKCU\Software\CyberLink\PowerDirector13 Detect5=HKCU\Software\CyberLink\PowerDirector14 Detect6=HKCU\Software\CyberLink\PowerDirector15 Detect7=HKCU\Software\CyberLink\PowerDirector16 Detect8=HKCU\Software\CyberLink\PowerDirector17 FileKey1=%AppData%\Cyberlink\PowerDirector\*|Recentfiles.ini FileKey2=%AppData%\CyberLink\PowerDirector\*\AutoSave|*|RECURSE FileKey3=%AppData%\CyberLink\PowerDirector\*\photoTmp|*|RECURSE FileKey4=%AppData%\Cyberlink\PowerDirector\*\WaveForms|*|RECURSE FileKey5=%UserProfile%\Documents\CyberLink\PowerDirector\*|Snapshot(*).jpg FileKey6=%UserProfile%\Documents\CyberLink\PowerDirector\*\MyTitles|*|RECURSE FileKey7=%UserProfile%\Documents\Cyberlink\PowerDirector\*\PDRMUSIC.TMP|*|REMOVESELF FileKey8=%UserProfile%\Documents\Cyberlink\PowerDirector\*\PP.TWOPASS|*|REMOVESELF FileKey9=%UserProfile%\Documents\CyberLink\PowerDirector\*\Preview Cache Files|* FileKey10=%UserProfile%\Documents\CyberLink\PowerDirector\*\ShadowEditFiles|*.MPG FileKey11=%UserProfile%\Documents\CyberLink\PowerDirector\*\SplitterIndex|*.maidx RegKey1=HKCU\Software\CyberLink\Hanuman RegKey2=HKCU\Software\CyberLink\PowerDirector10\MediaObj\MediaCache5\Data5 RegKey3=HKCU\Software\CyberLink\PowerDirector10\MediaObj\MediaCache5\Thumbnail5 RegKey4=HKCU\Software\CyberLink\PowerDirector11\MediaObj\MediaCache5\Data5 RegKey5=HKCU\Software\CyberLink\PowerDirector11\MediaObj\MediaCache5\Thumbnail5 RegKey6=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Data5 RegKey7=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Thumbnail5 RegKey8=HKCU\Software\CyberLink\PowerDirector13\MediaObj\MediaCache5\Data5 RegKey9=HKCU\Software\CyberLink\PowerDirector13\MediaObj\MediaCache5\Thumbnail5 RegKey10=HKCU\Software\CyberLink\PowerDirector14\MediaObj\MediaCache5\Data5 RegKey11=HKCU\Software\CyberLink\PowerDirector14\MediaObj\MediaCache5\Thumbnail5 RegKey12=HKCU\Software\CyberLink\PowerDirector15\MediaObj\MediaCache5\Data5 RegKey13=HKCU\Software\CyberLink\PowerDirector15\MediaObj\MediaCache5\Thumbnail5 RegKey14=HKCU\Software\CyberLink\PowerDirector16\MediaObj\MediaCache5\Data5 RegKey15=HKCU\Software\CyberLink\PowerDirector16\MediaObj\MediaCache5\Thumbnail5 RegKey16=HKCU\Software\CyberLink\PowerDirector17\MediaObj\MediaCache5\Data5 RegKey17=HKCU\Software\CyberLink\PowerDirector17\MediaObj\MediaCache5\Thumbnail5 RegKey18=HKCU\Software\CyberLink\PowerDirector17\OldCacheFolder Tags=ccmedia ID=CyberLink PowerDirector * Author=Winapp2.ini Project [CyberLink PowerDVD *] Detect1=HKCU\Software\CyberLink\PowerDVD14 Detect2=HKCU\Software\CyberLink\PowerDVD15 Detect3=HKCU\Software\CyberLink\PowerDVD16 Detect4=HKCU\Software\CyberLink\PowerDVD17 Detect5=HKCU\Software\CyberLink\PowerDVD18 Detect6=HKCU\Software\CyberLink\PowerDVD19 Detect7=HKCU\Software\CyberLink\PowerDVD20 Detect8=HKCU\Software\CyberLink\PowerDVD21 Detect9=HKCU\Software\CyberLink\PowerDVD22 FileKey1=%AppData%\CyberLink\Webview|*.old|RECURSE FileKey2=%LocalAppData%\Cyberlink\DigitalHome|*.log|RECURSE FileKey3=%LocalAppData%\Cyberlink\PowerDVD*|*.log|RECURSE FileKey4=%LocalAppData%\Cyberlink\PowerDVD*\*\PowerDVDMainAP|*|RECURSE FileKey5=%LocalAppData%\Cyberlink\PowerDVD*\cache*|*|RECURSE FileKey6=%LocalAppData%\Cyberlink\PowerDVD*\CL_DMP_Browser|*|RECURSE FileKey7=%LocalAppData%\Cyberlink\PowerDVD*\DB*\computer|*.db|RECURSE FileKey8=%LocalAppData%\Cyberlink\PowerDVD*\DefaultMember|*|RECURSE FileKey9=%ProgramData%\Cyberlink\Evoparser|*.xml FileKey10=%ProgramData%\CyberLink\PowerDVD*\Boomerang\*|*.dmp;*.xml FileKey11=%ProgramData%\SUPPORTDIR\*|*.log RegKey1=HKCU\Software\CyberLink\PowerDVD15\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey2=HKCU\Software\CyberLink\PowerDVD15\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey3=HKCU\Software\CyberLink\PowerDVD15\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey4=HKCU\Software\CyberLink\PowerDVD16\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey5=HKCU\Software\CyberLink\PowerDVD16\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey6=HKCU\Software\CyberLink\PowerDVD16\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey7=HKCU\Software\CyberLink\PowerDVD17\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey8=HKCU\Software\CyberLink\PowerDVD17\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey9=HKCU\Software\CyberLink\PowerDVD17\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey10=HKCU\Software\CyberLink\PowerDVD18\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey11=HKCU\Software\CyberLink\PowerDVD18\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey12=HKCU\Software\CyberLink\PowerDVD18\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey13=HKCU\Software\CyberLink\PowerDVD19\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey14=HKCU\Software\CyberLink\PowerDVD19\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey15=HKCU\Software\CyberLink\PowerDVD19\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey16=HKCU\Software\CyberLink\PowerDVD20\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey17=HKCU\Software\CyberLink\PowerDVD20\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey18=HKCU\Software\CyberLink\PowerDVD20\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey19=HKCU\Software\CyberLink\PowerDVD20\CoarseSnapshot\MediaObj\MediaCache5\Data5 RegKey20=HKCU\Software\CyberLink\PowerDVD20\CoarseSnapshot\MediaObj\MediaCache5\ProgramInfo RegKey21=HKCU\Software\CyberLink\PowerDVD21\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey22=HKCU\Software\CyberLink\PowerDVD21\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey23=HKCU\Software\CyberLink\PowerDVD21\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey24=HKCU\Software\CyberLink\PowerDVD21\CoarseSnapshot\MediaObj\MediaCache5\Data5 RegKey25=HKCU\Software\CyberLink\PowerDVD21\CoarseSnapshot\MediaObj\MediaCache5\ProgramInfo RegKey26=HKCU\Software\CyberLink\PowerDVD22\CLMPSvc\MediaObj\MediaCache5\Data5 RegKey27=HKCU\Software\CyberLink\PowerDVD22\CLMPSvc\MediaObj\MediaCache5\ProgramInfo RegKey28=HKCU\Software\CyberLink\PowerDVD22\CLMPSvc\MediaObj\MediaCache5\Thumbnail5 RegKey29=HKCU\Software\CyberLink\PowerDVD22\CoarseSnapshot\MediaObj\MediaCache5\Data5 RegKey30=HKCU\Software\CyberLink\PowerDVD22\CoarseSnapshot\MediaObj\MediaCache5\ProgramInfo Tags=ccmedia ID=CyberLink PowerDVD * Author=Winapp2.ini Project [CyberLink PowerProducer *] DetectFile=%ProgramFiles%\HomeCinema FileKey1=%ProgramFiles%\HomeCinema\PowerProducer\Template\Cyberlink\frame|*tmp Tags=ccmedia ID=CyberLink PowerProducer * Author=Winapp2.ini Project [CyberLink YouCam *] Detect=HKCU\Software\CyberLink\YouCam FileKey1=%UserProfile%\Documents\YouCam|*.tmp Tags=ccmedia ID=CyberLink YouCam * Author=Winapp2.ini Project [CyberScrub Privacy Suite *] Detect=HKCU\Software\CyberScrub\Privacy Suite FileKey1=%AppData%\CyberScrub\Privacy Suite|cybscrub.log Tags=ccutil ID=CyberScrub Privacy Suite * Author=Winapp2.ini Project [Cybertron Privacy Eraser *] DetectFile=%AppData%\Cybertron\Privacy Eraser FileKey1=%AppData%\Cybertron\Privacy Eraser\Registry Backups|* Tags=ccutil ID=Cybertron Privacy Eraser * Author=Winapp2.ini Project [Cycling '74 *] DetectFile=%AppData%\Cycling '74 FileKey1=%AppData%\Cycling '74\Logs|* FileKey2=%AppData%\Cycling '74\Max*\Crash Recovery\MaxEditorLogFiles|* FileKey3=%AppData%\Cycling '74\Max*\Database|*-journal;*.bak;*.old FileKey4=%AppData%\Cycling '74\Max*\Settings\cef*|debug.log;Visited Links FileKey5=%AppData%\Cycling '74\Max*\Settings\cef*\blob_storage|*|RECURSE Tags=ccmedia ID=Cycling '74 * Author=Winapp2.ini Project [CzDC *] DetectFile=%AppData%\CzDC FileKey1=%AppData%\CzDC|*.bak|RECURSE Tags=ccinternet ID=CzDC * Author=Winapp2.ini Project [Daemon Tools *] Detect1=HKCU\Software\Disc Soft Detect2=HKCU\Software\DT Soft FileKey1=%AppData%\DAEMON Tools*|ImgList.dat FileKey2=%AppData%\DAEMON Tools*\*Cache|*|RECURSE FileKey3=%ProgramData%\DAEMON Tools*\Temp|*|RECURSE RegKey1=HKCU\Software\Disc Soft\DAEMON Tools Pro\GuiNamespace|MountFolder RegKey2=HKCU\Software\DT Soft\DAEMON Tools Pro\GuiNamespace|MountFolder Tags=ccutil ID=Daemon Tools * Author=Winapp2.ini Project [Dakota AG *] DetectFile=%SystemDrive%\dakotaag FileKey1=%SystemDrive%\dakotaag|*.log|RECURSE FileKey2=%UserProfile%\Documents|dakotaDeinstallieren.log Tags=ccapps ID=Dakota AG * Author=Winapp2.ini Project [DAMN Hash Calculator *] Detect=HKCU\Software\DAMN\Hash Calculator RegKey1=HKCU\Software\DAMN\Hash Calculator\Settings|LastDir Tags=ccutil ID=DAMN Hash Calculator * Author=Winapp2.ini Project [DAMN NFO Viewer *] Detect=HKCU\Software\DAMN\DAMN NFO Viewer RegKey1=HKCU\Software\DAMN\DAMN NFO Viewer|WorkingDirectory RegKey2=HKCU\Software\DAMN\DAMN NFO Viewer\Recently Viewed Files Tags=ccutil ID=DAMN NFO Viewer * Author=Winapp2.ini Project [Damned *] Detect=HKCU\Software\Valve\Steam\Apps\251170 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Damned|*.log|RECURSE Tags=ccapps ID=Damned * Author=Winapp2.ini Project [Danger Scavenger *] Detect=HKCU\Software\Valve\Steam\Apps\1169740 FileKey1=%UserProfile%\AppData\LocalLow\Star Drifters\Danger Scavenger|*.log FileKey2=%UserProfile%\AppData\LocalLow\Star Drifters\Danger Scavenger\Unity|*|REMOVESELF Tags=ccapps ID=Danger Scavenger * Author=Winapp2.ini Project [Dangerous Waters *] Detect=HKCU\Software\Valve\Steam\Apps\1600 DetectFile=%ProgramFiles%\Sonalysts Combat Simulations\Dangerous Waters FileKey1=%ProgramFiles%\Sonalysts Combat Simulations\Dangerous Waters|*.log FileKey2=%ProgramFiles%\Steam\SteamApps\Common\Dangerous Waters|*.log Tags=ccapps ID=Dangerous Waters * Author=Winapp2.ini Project [DARK *] Detect=HKCU\Software\Valve\Steam\Apps\225360 FileKey1=%AppData%\Kalypso Media\Dark|log.txt Tags=ccapps ID=DARK * Author=Winapp2.ini Project [Dark Manor *] DetectFile=%AppData%\DarkManor FileKey1=%AppData%\DarkManor|*.dmp Tags=ccapps ID=Dark Manor * Author=Winapp2.ini Project [DarkComet RAT *] DetectFile=%AppData%\DCLogs FileKey1=%AppData%\DCLogs|*.dc|REMOVESELF Tags=ccutil ID=DarkComet RAT * Author=Winapp2.ini Project [Darksiders Genesis *] DetectFile=%LocalAppData%\THQ Nordic\Darksiders Genesis FileKey1=%LocalAppData%\THQ Nordic\Darksiders Genesis\Saved\Logs|* Tags=ccapps ID=Darksiders Genesis * Author=Winapp2.ini Project [Darksiders II Deathinitive Edition Backups *] Detect=HKCU\Software\Valve\Steam\Apps\388410 FileKey1=%ProgramFiles%\Steam\steamapps\common\Darksiders II Deathinitive Edition\Debug Saves|* Tags=ccapps ID=Darksiders II Deathinitive Edition Backups * Author=Winapp2.ini Project [Darksiders Warmastered Edition *] Detect=HKCU\Software\Valve\Steam\Apps\462780 FileKey1=%ProgramFiles%\Steam\steamapps\common\Darksiders Warmastered Edition|*.log Tags=ccapps ID=Darksiders Warmastered Edition * Author=Winapp2.ini Project [Dashlane *] DetectFile=%AppData%\Dashlane FileKey1=%AppData%\Dashlane\*\background_cache|*|RECURSE Tags=ccinternet ID=Dashlane * Author=Winapp2.ini Project [DataNumen Disk Image *] Detect=HKCU\Software\DDKI RegKey1=HKCU\Software\DDKI\Misc|OpenDirectory Tags=ccutil ID=DataNumen Disk Image * Author=Winapp2.ini Project [DataNumen Outlook Password Recovery *] Detect=HKCU\Software\DOPR RegKey1=HKCU\Software\DOPR\Misc|OpenDirectory Tags=ccutil ID=DataNumen Outlook Password Recovery * Author=Winapp2.ini Project [DataNumen Outlook Repair *] Detect1=HKCU\Software\DOLKR Detect2=HKCU\Software\DOLKR64 RegKey1=HKCU\Software\DOLKR\Misc|OpenDirectory RegKey2=HKCU\Software\DOLKR64\Misc|OpenDirectory Tags=ccutil ID=DataNumen Outlook Repair * Author=Winapp2.ini Project [DataTron 7 *] DetectFile=%ProgramFiles%\DataTron7 FileKey1=%ProgramFiles%\DataTron7|*.BAK;*.GID Tags=ccapps ID=DataTron 7 * Author=Winapp2.ini Project [DATEV *] DetectFile=%SystemDrive%\DATEV FileKey1=%SystemDrive%\DATEV\LOG|*.log|RECURSE Tags=ccapps ID=DATEV * Author=Winapp2.ini Project [Daum Streaming Agent Manager *] DetectFile=%LocalAppData%\KakaoLiveAgent FileKey1=%LocalAppData%\KakaoLiveAgent\Log|* FileKey2=%LocalAppData%\KakaoLiveAgent\tmp|* Tags=ccmedia ID=Daum Streaming Agent Manager * Author=Winapp2.ini Project [Dawn of War *] DetectFile=%ProgramFiles%\Dawn of War* FileKey1=%ProgramFiles%\Dawn of War*|warnings.log FileKey2=%ProgramFiles%\Dawn of War*\Playback|temp.rec Tags=ccapps ID=Dawn of War * Author=Winapp2.ini Project [DayZ *] Detect=HKCU\Software\Valve\Steam\Apps\221100 FileKey1=%LocalAppData%\DayZ|DayZ.bidmp;DayZ.mdmp Tags=ccapps ID=DayZ * Author=Winapp2.ini Project [DAZ 3D Studio *] DetectFile=%AppData%\DAZ 3D\Studio* FileKey1=%AppData%\DAZ 3D\Studio*|log.txt FileKey2=%AppData%\DAZ 3D\Studio*\Temp|*|RECURSE Tags=ccapps ID=DAZ 3D Studio * Author=Winapp2.ini Project [DB Browser for SQLite *] Detect=HKCU\Software\sqlitebrowser\sqlitebrowser RegKey1=HKCU\Software\sqlitebrowser\sqlitebrowser\db|lastlocation RegKey2=HKCU\Software\sqlitebrowser\sqlitebrowser\General|recentFileList RegKey3=HKCU\Software\sqlitebrowser\sqlitebrowser\MainWindow Tags=ccutil ID=DB Browser for SQLite * Author=Winapp2.ini Project [DBFView *] Detect=HKCU\Software\DBFView RegKey1=HKCU\Software\DBFView\DBFView\Recent File List Tags=ccapps ID=DBFView * Author=Winapp2.ini Project [dBpoweramp *] Detect=HKCU\Software\Illustrate\dBpoweramp FileKey1=%AppData%\dBpoweramp|*.bin RegKey1=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder0 RegKey2=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder1 RegKey3=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder2 RegKey4=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder3 RegKey5=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder4 RegKey6=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder5 RegKey7=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder6 RegKey8=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder7 RegKey9=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder8 RegKey10=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder9 RegKey11=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder10 RegKey12=HKCU\Software\Illustrate\dBpoweramp|LastAccessedFolder RegKey13=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\[Multi Encoder]|DMCUserFolderStr RegKey14=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\AAC (Advanced Audio Compression)|DMCUserFolderStr RegKey15=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Aiff|DMCUserFolderStr RegKey16=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Apple Lossless|DMCUserFolderStr RegKey17=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\FLAC|DMCUserFolderStr RegKey18=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\mp3 (Lame)|DMCUserFolderStr RegKey19=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\ogg vorbis|DMCUserFolderStr RegKey20=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Test Conversion|DMCUserFolderStr RegKey21=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Wave|DMCUserFolderStr RegKey22=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Windows Media Audio 10|DMCUserFolderStr Tags=ccmedia ID=dBpoweramp * Author=Winapp2.ini Project [DC Universe Online *] Detect=HKCU\Software\Valve\Steam\Apps\24200 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\DC Universe Online|.downloadInfo.txt;.downloadStats.txt FileKey2=%UserProfile%\Documents\My Games\DC Universe Online\Logs|* Tags=ccapps ID=DC Universe Online * Author=Winapp2.ini Project [DC++ *] DetectFile=%ProgramFiles%\DC++ FileKey1=%AppData%\DC++|CrashLog.txt;FinishedTransfers.xml;Queue.xml.bak;Recents.xml FileKey2=%AppData%\DC++\FileLists|* FileKey3=%AppData%\DC++\Logs|* FileKey4=%LocalAppData%\DC++|CrashLog.txt;FinishedTransfers.xml;Queue.xml.bak;Recents.xml FileKey5=%ProgramFiles%\DC++|CrashLog.txt;FinishedTransfers.xml;Queue.xml.bak;Recents.xml Tags=ccinternet ID=DC++ * Author=Winapp2.ini Project [Dead Cells *] DetectFile=%ProgramFiles%\Steam\steamapps\common\Dead Cells FileKey1=%ProgramFiles%\Steam\steamapps\common\Dead Cells\logs|*.log Tags=ccapps ID=Dead Cells * Author=Winapp2.ini Project [Dead Island *] DetectFile=%UserProfile%\Documents\DeadIsland* FileKey1=%UserProfile%\Documents\DeadIsland*\out\logs|* Tags=ccapps ID=Dead Island * Author=Winapp2.ini Project [DeadHash *] DetectFile=%AppData%\deadhash FileKey1=%AppData%\deadhash\*Cache|*|RECURSE FileKey2=%AppData%\deadhash\blob_storage|*|RECURSE FileKey3=%AppData%\deadhash\Local Storage|*|RECURSE FileKey4=%AppData%\deadhash\Session Storage|* FileKey5=%LocalAppData%\deadhash-updater|*.exe Tags=ccutil ID=DeadHash * Author=Winapp2.ini Project [Dear Esther *] Detect=HKCU\Software\Valve\Steam\Apps\203810 FileKey1=%ProgramFiles%\Steam\Steamapps\common\dear esther\dearesther|*.tmp FileKey2=%ProgramFiles%\Steam\Steamapps\common\dear esther\dearesther\resource|*.icns Tags=ccapps ID=Dear Esther * Author=Winapp2.ini Project [Death to Spies: Moment of Truth *] Detect=HKCU\Software\Valve\Steam\Apps\34410 FileKey1=%UserProfile%\Documents\My Games\Smersh_MT\Cache|* Tags=ccapps ID=Death to Spies: Moment of Truth * Author=Winapp2.ini Project [Death Track: Resurrection *] Detect=HKCU\Software\Valve\Steam\Apps\7840 FileKey1=%UserProfile%\Documents\Skyfallen Entertaiment\DeathTrack\Logs|* Tags=ccapps ID=Death Track: Resurrection * Author=Winapp2.ini Project [Debenu *] Detect=HKCU\Software\Debenu FileKey1=%ProgramData%\Debenu\PDF Tools\Reports\App Log|* RegKey1=HKCU\Software\Debenu\Debenu PDF Maximus 2\MaximusViewerRecentDocs RegKey2=HKCU\Software\Debenu\Debenu PDF Maximus 2\MaximusViewerRecentFolders Tags=ccapps ID=Debenu * Author=Winapp2.ini Project [DECAdry Business Card *] DetectFile=%AppData%\DECAdry\BusinessCard FileKey1=%AppData%\DECAdry\BusinessCard|LWTHUMB.DAT Tags=ccapps ID=DECAdry Business Card * Author=Winapp2.ini Project [Deep Java Library *] DetectFile=%UserProfile%\.djl.ai FileKey1=%UserProfile%\.djl.ai\cache|*|REMOVESELF Tags=ccutil ID=Deep Java Library * Author=Winapp2.ini Project [DeepBurner *] Detect=HKCU\Software\Astonsoft\DeepBurner FileKey1=%AppData%\DeepBurner|DeepBurner.log Tags=ccutil ID=DeepBurner * Author=Winapp2.ini Project [Deezer Desktop *] DetectFile=%LocalAppData%\Programs\deezer.desktop FileKey1=%AppData%\Deezer*|*-journal;LOG;LOG.old|RECURSE FileKey2=%AppData%\Deezer*|log.log;Network Persistent State;Origin Bound Certs;QuotaManager FileKey3=%AppData%\Deezer*\*Cache|*|RECURSE FileKey4=%AppData%\Deezer*\*logs|*|RECURSE FileKey5=%AppData%\Deezer*\blob_storage|*|RECURSE FileKey6=%AppData%\Deezer*\Service Worker\*Cache*|*|RECURSE FileKey7=%LocalAppData%\deezer*desktop-updater|*|RECURSE Tags=ccinternet ID=Deezer Desktop * Author=Winapp2.ini Project [Default Programs Editor *] DetectFile=%LocalAppData%\factormystic.net\Default Programs Editor FileKey1=%LocalAppData%\factormystic.net\Default Programs Editor\*|crash-report.*|RECURSE Tags=ccutil ID=Default Programs Editor * Author=Winapp2.ini Project [Defense Grid: The Awakening *] Detect=HKCU\Software\Valve\Steam\Apps\18500 FileKey1=%ProgramFiles%\Steam\steamapps\common\defensegridtheawakening\Shaders\Generated|*.cache Tags=ccapps ID=Defense Grid: The Awakening * Author=Winapp2.ini Project [Defraggler *] Detect=HKCU\Software\Piriform\Defraggler FileKey1=%ProgramFiles%\Defraggler|*.dmp;*.log;*statistics*;Defraggler*.txt FileKey2=%UserProfile%|Defraggler*.txt Tags=ccutil ID=Defraggler * Author=Winapp2.ini Project [Delfix *] DetectFile=%SystemDrive%\DelFix.txt FileKey1=%SystemDrive%|DelFix.txt Tags=ccutil ID=Delfix * Author=Winapp2.ini Project [Dell *] Detect1=HKLM\Software\Dell Detect2=HKLM\Software\PC-Doctor DetectFile1=%AppData%\Creative\DELL Webcam Center DetectFile2=%LocalAppData%\Dell DetectFile3=%LocalAppData%\SupportSoft\DellSupportCenter DetectFile4=%ProgramData%\Dell DetectFile5=%ProgramFiles%\Dell* FileKey1=%AppData%\Creative\DELL Webcam Center|MO_Log.txt FileKey2=%AppData%\PCDr\*\Logs|* FileKey3=%LocalAppData%\Dell\*\Log|* FileKey4=%LocalAppData%\Dell\DellMobileConnect|*.log FileKey5=%LocalAppData%\SupportSoft\DellSupportCenter\*\state\logs|* FileKey6=%ProgramData%\Dell\*|*.log FileKey7=%ProgramData%\Dell\*\Log*|*|RECURSE FileKey8=%ProgramData%\Dell\BiosVerification|*.log FileKey9=%ProgramData%\Dell\D3\pla\*\*|*.log;*.txt|REMOVESELF FileKey10=%ProgramData%\Dell\D3\Resources\Logs\serilog|* FileKey11=%ProgramData%\Dell\Drivers\*|*.log;*.tmp|RECURSE FileKey12=%ProgramData%\Dell\orca\deviceq|* FileKey13=%ProgramData%\Dell\SupportAssist|*|RECURSE FileKey14=%ProgramData%\Dell\TrustedDevice|*.log FileKey15=%ProgramData%\Dell\Update|*.txt FileKey16=%ProgramData%\Dell\UpdateService|*.log;*.txt|RECURSE FileKey17=%ProgramData%\PCDr\*\Logs|* FileKey18=%ProgramFiles%\Dell*|*.log|RECURSE Tags=ccutil ID=Dell * Author=Winapp2.ini Project [Dell Customer Connect *] DetectFile=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2\LocalState\serilog|*.txt FileKey3=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2\Settings|*.log* FileKey4=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellCustomerConnect_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell Customer Connect * Author=Winapp2.ini Project [Dell Digital Delivery *] DetectFile=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2\LocalState\serilog|*.txt FileKey3=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2\Settings|*.log* FileKey4=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellDigitalDelivery_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell Digital Delivery * Author=Winapp2.ini Project [Dell Help & Support *] DetectFile=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2\LocalCache\Local\Dell\DHSC\Logs|*.log FileKey3=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2\Settings|*.log* FileKey4=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellHelpSupport_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell Help & Support * Author=Winapp2.ini Project [Dell Installation Files *] DetectFile=%SystemDrive%\Dell FileKey1=%SystemDrive%\Dell|*|REMOVESELF Tags=ccutil ID=Dell Installation Files * Author=Winapp2.ini Project [Dell Mobile Connect *] DetectFile=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\LocalCache\Local\Dell\DellMobileConnect|*.log FileKey3=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\*|*|RECURSE FileKey4=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\Settings|*.log* FileKey5=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\ScreenovateTechnologies.DellMobileConnect_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccinternet ID=Dell Mobile Connect * Author=Winapp2.ini Project [Dell My Dell *] DetectFile=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2\Settings|*.log* FileKey4=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\DellInc.MyDell_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell My Dell * Author=Winapp2.ini Project [Dell PC Doctor *] DetectFile=%ProgramData%\PCDr FileKey1=%ProgramData%\PCDr|*.dmp|RECURSE FileKey2=%ProgramData%\PCDr\*\Cache|*.xml FileKey3=%ProgramData%\PCDr\*\Cache\archives|*|RECURSE FileKey4=%ProgramData%\PCDr\*\Cache\BUMA|* FileKey5=%ProgramData%\PCDr\*\Cache\DriverScan|* FileKey6=%ProgramData%\PCDr\*\Snapshots\*|* Tags=ccutil ID=Dell PC Doctor * Author=Winapp2.ini Project [Dell Power Manager *] DetectFile=%LocalAppData%\Packages\DellInc.DellPowerManager_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.DellPowerManager_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellPowerManager_htrsf667h5kn2\Settings|*.log* FileKey3=%LocalAppData%\Packages\DellInc.DellPowerManager_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\DellInc.DellPowerManager_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell Power Manager * Author=Winapp2.ini Project [Dell PremierColor *] DetectFile=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c FileKey1=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c\LocalCache\Local\Microsoft\Windows\Caches|*.db FileKey3=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c\Settings|*.log* FileKey4=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\PortraitDisplays.DellPremierColor_2dgmkzkw4h30c\TempState|*|REMOVESELF Tags=ccmedia ID=Dell PremierColor * Author=Winapp2.ini Project [Dell Product Registration *] DetectFile=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2 FileKey1=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\LocalCache\Local\Dell\Product Registration\UILog|*.htm FileKey3=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\*|*|RECURSE FileKey4=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\Settings|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\DellInc.DellProductRegistration_htrsf667h5kn2\TempState|*|REMOVESELF Tags=ccutil ID=Dell Product Registration * Author=Winapp2.ini Project [Dell Stage Suite *] DetectFile1=%AppData%\Dell\*Stage DetectFile2=%LocalAppData%\Dell\*Stage FileKey1=%AppData%\Dell\Dell Stage|*.backup|RECURSE FileKey2=%AppData%\Dell\MusicStage\*\Album_Images|* FileKey3=%AppData%\Dell\MusicStage\*\Artist_Images|* FileKey4=%AppData%\Dell\MusicStage\*\Cache|* FileKey5=%AppData%\Fingertapps\AccuWeather\Cache|* FileKey6=%LocalAppData%\Dell\VideoStage\CinemaNow\*|kthumb*.db;log.* FileKey7=%LocalAppData%\Dell\VideoStage\Library\*|kthumb*.db;log.* Tags=ccmedia ID=Dell Stage Suite * Author=Winapp2.ini Project [Dell SupportAssist *] DetectFile1=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2 DetectFile2=%ProgramData%\SupportAssist FileKey1=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\LocalCache\Local\Microsoft\Windows\Caches|*|RECURSE FileKey3=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\LocalState|*.txt FileKey4=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\Settings|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\DellInc.DellSupportAssistforPCs_htrsf667h5kn2\TempState|*|REMOVESELF FileKey7=%ProgramData%\SupportAssist\Client\Agent\Downloads|*|RECURSE FileKey8=%ProgramData%\SupportAssist\Client\Agent\Logs\*|*|REMOVESELF FileKey9=%ProgramData%\SupportAssist\Client\SRE|*.log FileKey10=%ProgramData%\SupportAssist\Client\SRE\ExtendedLogs|* FileKey11=%ProgramData%\SupportAssist\Client\TechnicianToolkit\Library\Logs|*|RECURSE FileKey12=%ProgramData%\SupportAssist\Client\TechnicianToolkit\Library\RegBackup|* FileKey13=%ProgramData%\SupportAssist\Client\TechnicianToolkit\Library\Temp|*|RECURSE Tags=ccutil ID=Dell SupportAssist * Author=Winapp2.ini Project [Dell Update *] DetectFile1=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2 DetectFile2=%ProgramData%\Dell\UpdateService FileKey1=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2\LocalCache\Local\Microsoft\Windows\Caches|* FileKey3=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2\Settings|*.log* FileKey4=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\DellInc.DellUpdate_htrsf667h5kn2\TempState|*|REMOVESELF FileKey6=%ProgramData%\Dell\UpdateService\Downloads\*|*|REMOVESELF Tags=ccutil ID=Dell Update * Author=Winapp2.ini Project [Deponia *] Detect=HKCU\Software\Valve\Steam\Apps\214340 DetectFile=%LocalAppData%\Daedalic Entertainment\Deponia FileKey1=%LocalAppData%\Daedalic Entertainment\Deponia|*.log Tags=ccapps ID=Deponia * Author=Winapp2.ini Project [Desk 365 *] Detect1=HKCU\Software\V9\Desk 365 Detect2=HKLM\Software\V9\Desk 365 Plus DetectFile=%ProgramFiles%\Desk 365* FileKey1=%AppData%\Desk 365*\icons|*|RECURSE FileKey2=%AppData%\Desk 365*\sysicons|*.ico FileKey3=%ProgramFiles%\Desk 365|recent.xml FileKey4=%SystemDrive%\User Data\Default|* Tags=ccapps ID=Desk 365 * Author=Winapp2.ini Project [Desktop Central Free Windows Admin Tools *] DetectFile=%ProgramFiles%\ManageEngine\ManageEngine Free Tools\DesktopCentral Free Windows Admin Tools FileKey1=%ProgramFiles%\ManageEngine\ManageEngine Free Tools\DesktopCentral Free Windows Admin Tools\logs|* FileKey2=%SystemDrive%|free-tools.log Tags=ccutil ID=Desktop Central Free Windows Admin Tools * Author=Winapp2.ini Project [Desktop Dialing *] DetectFile=%AppData%\Desktop Dialing FileKey1=%AppData%\Desktop Dialing|log-*.sil Tags=ccinternet ID=Desktop Dialing * Author=Winapp2.ini Project [Desktop SMS *] DetectFile=%ProgramFiles%\IDM\Desktop SMS FileKey1=%ProgramFiles%\IDM\Desktop SMS|*.log Tags=ccapps ID=Desktop SMS * Author=Winapp2.ini Project [Deus Ex *] DetectFile=%SystemDrive%\DeusEx\System FileKey1=%SystemDrive%\DeusEx\System|*.log Tags=ccapps ID=Deus Ex * Author=Winapp2.ini Project [Deutsche Bank Autobahn Toolbar *] DetectFile=%UserProfile%\.autobahn FileKey1=%LocalAppData%\Deutsche Bank\Autobahn Setup\*Logs|*|RECURSE FileKey2=%LocalAppData%\Deutsche Bank\Autobahn\*Logs|*|RECURSE FileKey3=%LocalAppData%\Deutsche Bank\Autobahn\Temp|*|RECURSE FileKey4=%UserProfile%\.autobahn|autobahn-log*.* Tags=ccapps ID=Deutsche Bank Autobahn Toolbar * Author=Winapp2.ini Project [DeviceDoctor *] DetectFile=%AppData%\DeviceDoctorSoftware\DeviceDoctor FileKey1=%AppData%\DeviceDoctorSoftware\DeviceDoctor\Logs|* Tags=ccutil ID=DeviceDoctor * Author=Winapp2.ini Project [Devolo Cockpit *] Detect=HKLM\Software\devolo\dLAN FileKey1=%ProgramFiles%\devolo\dlan|dlanhistory.*txt;dlanstats.*xml;support.html;support.zip FileKey2=%ProgramFiles%\devolo\dlan\updates|*|RECURSE Tags=ccutil ID=Devolo Cockpit * Author=Winapp2.ini Project [Devolutions Remote Desktop Manager *] DetectFile=%AppData%\Devolutions\RemoteDesktopManager FileKey1=%AppData%\Devolutions\RemoteDesktopManager|*.log* FileKey2=%LocalAppData%\Devolutions\RemoteDesktopManager|*.log* Tags=ccapps ID=Devolutions Remote Desktop Manager * Author=Winapp2.ini Project [Dexpot *] DetectFile=%AppData%\Dexpot FileKey1=%AppData%\Dexpot|*.log Tags=ccutil ID=Dexpot * Author=Winapp2.ini Project [DFX *] Detect=HKCU\Software\DFX FileKey1=%LocalAppData%\DFX\*|dfx_skin.txt FileKey2=%LocalAppData%\DFX\*\Tmp|*|REMOVESELF Tags=ccapps ID=DFX * Author=Winapp2.ini Project [Diablo II/III *] Detect1=HKCU\Software\Blizzard Entertainment\D3 Detect2=HKCU\Software\Blizzard Entertainment\Diablo II FileKey1=%ProgramData%\Battle.net\Setup\diablo3_engb\Log|* FileKey2=%ProgramFiles%\Diablo II|*.log;BnetLog.txt;D*.txt FileKey3=%ProgramFiles%\Diablo III*\Logs|* FileKey4=%SystemDrive%\Diablo II|*.log;BnetLog.txt;D*.txt FileKey5=%UserProfile%\Documents\Diablo II\GameLogs|*.txt Tags=ccapps ID=Diablo II/III * Author=Winapp2.ini Project [Diagnose Windows *] DetectFile=%ProgramFiles%\Diagnose Windows FileKey1=%ProgramFiles%\Diagnose Windows|*.log Tags=ccutil ID=Diagnose Windows * Author=Winapp2.ini Project [Digi Net Mobile *] DetectFile=%ProgramData%\Digi Net Mobile FileKey1=%ProgramData%\Digi Net Mobile\log|*.log;*.txt Tags=ccapps ID=Digi Net Mobile * Author=Winapp2.ini Project [Digital Confidence Batch Purifier *] DetectFile=%AppData%\Digital Confidence\BatchPurifier FileKey1=%AppData%\Digital Confidence\BatchPurifier|OutputFolderMRU Tags=ccutil ID=Digital Confidence Batch Purifier * Author=Winapp2.ini Project [Digital Janitor *] Detect=HKCU\Software\Davide Vitelaru\Digital Janitor FileKey1=%AppData%\Digital Janitor|ToSortHistory Tags=ccutil ID=Digital Janitor * Author=Winapp2.ini Project [Dimension 4 *] DetectFile=%ProgramFiles%\D4 FileKey1=%ProgramFiles%\D4|SyncHistory*.dat Tags=ccutil ID=Dimension 4 * Author=Winapp2.ini Project [Directory Lister *] DetectFile=%ProgramFiles%\Directory Lister* FileKey1=%ProgramFiles%\Directory Lister*|*Setup.exe Tags=ccutil ID=Directory Lister * Author=Winapp2.ini Project [Directory Opus *] Detect=HKLM\Software\GPSoftware\Directory Opus FileKey1=%AppData%\GPSoftware\Directory Opus\Icon Cache Roaming|*|RECURSE FileKey2=%AppData%\GPSoftware\Directory Opus\Logs|* FileKey3=%LocalAppData%\GPSoftware\Directory Opus\Thumbnail Cache|*|RECURSE Tags=ccutil ID=Directory Opus * Author=Winapp2.ini Project [Disco Elysium *] DetectFile=%UserProfile%\AppData\LocalLow\ZAUM Studio\Disco Elysium FileKey1=%UserProfile%\AppData\LocalLow\ZAUM Studio\Disco Elysium|*log FileKey2=%UserProfile%\AppData\LocalLow\ZAUM Studio\Disco Elysium\Unity|*|REMOVESELF Tags=ccapps ID=Disco Elysium * Author=Winapp2.ini Project [Discord *] Detect1=HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Discord Detect2=HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DiscordCanary Detect3=HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DiscordPTB FileKey1=%AppData%\BetterDiscord|*.log FileKey2=%AppData%\BetterDiscord\temp|*|REMOVESELF FileKey3=%AppData%\Discord*|*-journal;*.old;*.tmp;LOG;modules.log;Network Persistent State;QuotaManager|RECURSE FileKey4=%AppData%\Discord*\*Cache|*|REMOVESELF FileKey5=%AppData%\Discord*\blob_storage|*|RECURSE FileKey6=%AppData%\Discord*\Crashpad\reports|* FileKey7=%AppData%\Discord*\Logs|* FileKey8=%AppData%\Discord*\module_data\crashlogs|* FileKey9=%AppData%\Discord*\module_data\discord_hook|*.log FileKey10=%AppData%\Discord*\VideoDecodeStats|* FileKey11=%LocalAppData%\Discord*|*.log FileKey12=%LocalAppData%\Discord*\packages|*.nupkg FileKey13=%LocalAppData%\Discord*\packages\SquirrelTemp|*|REMOVESELF Tags=ccinternet ID=Discord * Author=Winapp2.ini Project [Dishonored *] Detect=HKCU\Software\Arkane\Dishonored DetectFile=%UserProfile%\Documents\My Games\Dishonored FileKey1=%UserProfile%\Documents\My Games\Dishonored\DishonoredGame\Logs|* Tags=ccapps ID=Dishonored * Author=Winapp2.ini Project [Disk Space Fan *] Detect=HKCU\Software\Cookapp\DSF4 FileKey1=%AppData%\DiskSpaceFan|history_C.sqlite;log.txt Tags=ccutil ID=Disk Space Fan * Author=Winapp2.ini Project [DiskBoss *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\DiskBoss Ultimate FileKey1=%LocalAppData%\DiskBoss Ultimate\data\reports|*|REMOVESELF Tags=ccutil ID=DiskBoss * Author=Winapp2.ini Project [DiskMax *] DetectFile=%AppData%\KoshyJohn.com\DiskMax FileKey1=%AppData%\KoshyJohn.com\DiskMax|*Log.txt FileKey2=%AppData%\KoshyJohn.com\DiskMax\bin|*.log Tags=ccutil ID=DiskMax * Author=Winapp2.ini Project [DiskTrix Ultimate Defrag *] DetectFile=%ProgramFiles%\Disktrix\UltimateDefrag FileKey1=%ProgramFiles%\Disktrix\UltimateDefrag|*.db;*Crash.dmp Tags=ccutil ID=DiskTrix Ultimate Defrag * Author=Winapp2.ini Project [DisplayFusion *] Detect=HKCU\Software\Binary Fortress Software\DisplayFusion FileKey1=%AppData%\DisplayFusion|DebugInfo.*;DisplayFusion*.log;DisplayFusionSetup.exe FileKey2=%LocalAppData%\DisplayFusion|*.log FileKey3=%ProgramData%\Binary Fortress Software\DisplayFusion|*.log;DisplayFusionSetup.exe Tags=ccutil ID=DisplayFusion * Author=Winapp2.ini Project [DivFix++ *] Detect=HKCU\Software\Death Knight\DivFix++ RegKey1=HKCU\Software\Death Knight\DivFix++|PathLog RegKey2=HKCU\Software\Death Knight\DivFix++|PathOut Tags=ccmedia ID=DivFix++ * Author=Winapp2.ini Project [DivX *] Detect1=HKCU\Software\DivX Detect2=HKLM\Software\DivXNetworks FileKey1=%AppData%\DivX|Font Cache.*|RECURSE FileKey2=%AppData%\DivX\DivX Codec|statistics.xml FileKey3=%AppData%\DivX\DMS\logs|* FileKey4=%ProgramData%\DivX|*.log|RECURSE FileKey5=%UserProfile%\Videos\DivX Movies|*|RECURSE RegKey1=HKCU\Software\DivX\Settings\Converter|lastBrowseDir RegKey2=HKCU\Software\DivX\Settings\Converter|outputDir RegKey3=HKCU\Software\DivX\Settings\Player\PlayerState|LastOpenFileLocation RegKey4=HKCU\Software\DivX\Settings\TransferWizard|LastBrwosedDir RegKey5=HKCU\Software\DivX\Settings\WebPlayer|cacheEntry1 RegKey6=HKCU\Software\DivX\Settings\WebPlayer|cacheEntry2 RegKey7=HKCU\Software\DivX\Settings\WebPlayer|cacheEntry3 RegKey8=HKCU\Software\DivXNetworks\DivX Player|CustomOpenFileFolder RegKey9=HKCU\Software\DivXNetworks\DivX Player|file RegKey10=HKCU\Software\DivXNetworks\DivX Player|LastOpenFileFolder RegKey11=HKCU\Software\DivXNetworks\DivX4Windows|MP4 File Name RegKey12=HKCU\Software\DivXNetworks\DivX4Windows|MV File Name RegKey13=HKCU\Software\DivXNetworks\DivX4Windows|YUV Dir Name RegKey14=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry1 RegKey15=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry2 RegKey16=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry3 RegKey17=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry4 RegKey18=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry5 RegKey19=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry6 Tags=ccmedia ID=DivX * Author=Winapp2.ini Project [Dj MixStation *] DetectFile=%ProgramFiles%\ejay\Dj MixStation* FileKey1=%ProgramFiles%\ejay\Dj MixStation*\history|*.txt Tags=ccmedia ID=Dj MixStation * Author=Winapp2.ini Project [DJUCED *] DetectFile=%UserProfile%\Documents\DJUCED FileKey1=%UserProfile%\Documents\DJUCED\Cache|*|RECURSE FileKey2=%UserProfile%\Documents\DJUCED\Logs|* Tags=ccmedia ID=DJUCED * Author=Winapp2.ini Project [DjVuReader *] Detect=HKCU\Software\DjVuReader RegKey1=HKCU\Software\DjVuReader\MRUList Tags=ccapps ID=DjVuReader * Author=Winapp2.ini Project [DLExpert *] Detect=HKCU\Software\Ying3\DLExpert RegKey1=HKCU\Software\Ying3\DLExpert|ftp RegKey2=HKCU\Software\Ying3\DLExpert|http RegKey3=HKCU\Software\Ying3\DLExpert\MAIN|ALLFILE RegKey4=HKCU\Software\Ying3\DLExpert\MAIN|GOOD RegKey5=HKCU\Software\Ying3\DLExpert\MAIN|GOODURL RegKey6=HKCU\Software\Ying3\DLExpert\Recent File List Tags=ccapps ID=DLExpert * Author=Winapp2.ini Project [DNIe *] DetectFile=%UserProfile%\Documents\DNIeRemote.log FileKey1=%UserProfile%\Documents|DNIeRemote.log Tags=ccapps ID=DNIe * Author=Winapp2.ini Project [DoctorWeb *] DetectFile=%UserProfile%\DoctorWeb\Quarantine FileKey1=%UserProfile%\DoctorWeb\Quarantine|*|RECURSE Tags=ccutil ID=DoctorWeb * Author=Winapp2.ini Project [DocuCom PDF *] DetectFile1=%AppData%\Zeon\DocuCom\PDF* DetectFile2=%AppData%\Zeon\DocuCom\ZNSL FileKey1=%AppData%\Zeon\DocuCom\PDF*\Log|* FileKey2=%AppData%\Zeon\DocuCom\ZNSL|*.log;VeriHist.zli Tags=ccapps ID=DocuCom PDF * Author=Winapp2.ini Project [Document Trace Remover *] Detect=HKCU\Software\Smart PC Solutions\Document Trace Remover FileKey1=%AppData%\Smart PC Solutions\Smart Fast PC\Log|* RegKey1=HKCU\Software\Smart PC Solutions\Document Trace Remover|LastFile RegKey2=HKCU\Software\Smart PC Solutions\Document Trace Remover|LastFolder Tags=ccutil ID=Document Trace Remover * Author=Winapp2.ini Project [DocX Viewer *] DetectFile=%SystemDrive%\epingsoft\DocXV FileKey1=%SystemDrive%\epingsoft\DocXV|rec.lst Tags=ccapps ID=DocX Viewer * Author=Winapp2.ini Project [Dolby Access *] DetectFile=%LocalAppData%\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220 FileKey1=%LocalAppData%\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220\Settings|*.log* FileKey3=%LocalAppData%\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220\TempState|*|REMOVESELF FileKey5=%Package\LocalCache|*.log Tags=ccapps ID=Dolby Access * Author=Winapp2.ini Project [Dollar Dash *] Detect=HKCU\Software\Valve\Steam\Apps\214320 FileKey1=%UserProfile%\Documents\My Games\DollarDash\PKGame\Logs|* Tags=ccapps ID=Dollar Dash * Author=Winapp2.ini Project [Dolphin Emulator *] DetectFile=%UserProfile%\Documents\Dolphin Emulator FileKey1=%UserProfile%\Documents\Dolphin Emulator\Logs|*|RECURSE Tags=ccapps ID=Dolphin Emulator * Author=Winapp2.ini Project [Dome Keeper *] DetectFile=%AppData%\Godot\app_userdata\Dome Keeper FileKey1=%AppData%\Godot\app_userdata\Dome Keeper\logs|*.log Tags=ccapps ID=Dome Keeper * Author=Winapp2.ini Project [Donkey Kong Country *] DetectFile=%ProgramFiles%\Donkey Kong Country FileKey1=%ProgramFiles%\Donkey Kong Country|stderr.txt;stdout.txt Tags=ccapps ID=Donkey Kong Country * Author=Winapp2.ini Project [Don't Starve *] Detect=HKCU\Software\Valve\Steam\Apps\219740 FileKey1=%ProgramFiles%\Steam\steamapps\common\dont_starve\bin|log.txt FileKey2=%UserProfile%\Documents\Klei\DoNotStarve|log.txt Tags=ccapps ID=Don't Starve * Author=Winapp2.ini Project [Donut County *] DetectFile=%UserProfile%\AppData\LocalLow\Annapurna Interactive\Donut County FileKey1=%UserProfile%\AppData\LocalLow\Annapurna Interactive\Donut County\Crashes|* Tags=ccapps ID=Donut County * Author=Winapp2.ini Project [Dooble *] DetectFile=%SystemDrive%\Dooble FileKey1=%SystemDrive%\Dooble\*\.dooble|cookies.db;downloads.db;favicons.fb;history.db FileKey2=%SystemDrive%\Dooble\*\.dooble\Cache|*|REMOVESELF Tags=ccinternet ID=Dooble * Author=Winapp2.ini Project [DOOM 2016 *] Detect=HKCU\Software\Valve\Steam\Apps\379720 FileKey1=%LocalAppData%\id Software\DOOM\base\generated\temp|* FileKey2=%UserProfile%\Saved Games\id Software\DOOM\base\generated\temp|* Tags=ccapps ID=DOOM 2016 * Author=Winapp2.ini Project [Download Accelerator Plus *] Detect=HKCU\Software\SpeedBit\Download Accelerator DetectFile=%ProgramFiles%\DAP FileKey1=%ProgramData%\SpeedBit\DAP\Plugins\Log|* Tags=ccinternet ID=Download Accelerator Plus * Author=Winapp2.ini Project [Download Manager *] DetectFile=%AppData%\Download Manager FileKey1=%AppData%\Download Manager|DownloadManagerList.dmc Tags=ccinternet ID=Download Manager * Author=Winapp2.ini Project [DownTango *] DetectFile=%LocalAppData%\DownTango FileKey1=%LocalAppData%\DownTango|application.log FileKey2=%LocalAppData%\DownTango\Logs|log.txt Tags=ccinternet ID=DownTango * Author=Winapp2.ini Project [Doxygen *] DetectFile=%ProgramFiles%\Doxygen FileKey1=%UserProfile%\Documents|doxygen_log.txt Tags=ccapps ID=Doxygen * Author=Winapp2.ini Project [Dr. Despicable's Dastardly Deeds *] DetectFile=%AppData%\HitPoint Studios\DrD FileKey1=%AppData%\HitPoint Studios\DrD|logfile.txt Tags=ccapps ID=Dr. Despicable's Dastardly Deeds * Author=Winapp2.ini Project [Dr. Web CureIt! *] DetectFile=%UserProfile%\Doctor Web FileKey1=%UserProfile%\Doctor Web|*.log Tags=ccutil ID=Dr. Web CureIt! * Author=Winapp2.ini Project [DraftSight *] Detect1=HKCU\Software\Dassault Systemes\DraftSight Detect2=HKLM\Software\Dassualt Systemes\DraftSight FileKey1=%AppData%\DraftSight\*|history.txt;plot.log FileKey2=%LocalAppData%\Dassault Systemes\DraftSight\cache|*|RECURSE Tags=ccapps ID=DraftSight * Author=Winapp2.ini Project [Dragon Age: Origins *] Detect1=HKCU\Software\BioWare\Dragon Age Detect2=HKLM\Software\BioWare\Dragon Age FileKey1=%ProgramData%\BioWare\Dragon Age\DA Updater\Logs|* FileKey2=%UserProfile%\Documents|DAO Ultimate Addins Updater.log FileKey3=%UserProfile%\Documents\BioWare\Dragon Age\Logs|* Tags=ccapps ID=Dragon Age: Origins * Author=Winapp2.ini Project [Dragon UnPACKer 5 *] Detect=HKCU\Software\Dragon Software\Dragon UnPACKer 5 FileKey1=%ProgramFiles%\Dragon UnPACKer 5|*.diz;*.log RegKey1=HKCU\Software\Dragon Software\Dragon UnPACKer 5\HyperRipper|Source RegKey2=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|LastFilterIndex RegKey3=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|LastFilterIndex_Hash RegKey4=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_0 RegKey5=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_1 RegKey6=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_2 RegKey7=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_3 RegKey8=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_4 RegKey9=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_5 RegKey10=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_6 RegKey11=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_7 RegKey12=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_8 RegKey13=HKCU\Software\Dragon Software\Dragon UnPACKer 5\Options|Recent_9 Tags=ccutil ID=Dragon UnPACKer 5 * Author=Winapp2.ini Project [Dreadnought *] Detect=HKCU\Software\Grey Box\Dreadnought FileKey1=%LocalAppData%\DreadGame\Saved\Logs|*.log Tags=ccapps ID=Dreadnought * Author=Winapp2.ini Project [Dream Aquarium *] DetectFile=%ProgramFiles%\Dream Aquarium FileKey1=%ProgramFiles%\Dream Aquarium|stdout Tags=ccapps ID=Dream Aquarium * Author=Winapp2.ini Project [Drive SnapShot *] Detect=HKCU\Software\SnapShot RegKey1=HKCU\Software\SnapShot|RecentFile0 RegKey2=HKCU\Software\SnapShot|RecentFile1 RegKey3=HKCU\Software\SnapShot|RecentFile2 RegKey4=HKCU\Software\SnapShot|RecentFile3 RegKey5=HKCU\Software\SnapShot|RecentFile4 RegKey6=HKCU\Software\SnapShot|RecentFile5 RegKey7=HKCU\Software\SnapShot|RecentFile6 RegKey8=HKCU\Software\SnapShot|RecentFile7 RegKey9=HKCU\Software\SnapShot|RecentFile8 RegKey10=HKCU\Software\SnapShot|RecentFile9 RegKey11=HKCU\Software\SnapShot|RecentHashFile0 RegKey12=HKCU\Software\SnapShot|RecentHashFile1 RegKey13=HKCU\Software\SnapShot|RecentHashFile2 RegKey14=HKCU\Software\SnapShot|RecentHashFile3 RegKey15=HKCU\Software\SnapShot|RecentHashFile4 RegKey16=HKCU\Software\SnapShot|RecentHashFile5 RegKey17=HKCU\Software\SnapShot|RecentHashFile6 RegKey18=HKCU\Software\SnapShot|RecentHashFile7 RegKey19=HKCU\Software\SnapShot|RecentHashFile8 RegKey20=HKCU\Software\SnapShot|RecentHashFile9 RegKey21=HKCU\Software\SnapShot|RecentVirtualDrive Tags=ccutil ID=Drive SnapShot * Author=Winapp2.ini Project [DriveImage XML *] Detect=HKLM\Software\Runtime Software\DIXML FileKey1=%ProgramFiles%\Runtime Software\DriveImage XML|log.txt Tags=ccapps ID=DriveImage XML * Author=Winapp2.ini Project [Driver Cleaner.NET *] DetectFile=%ProgramFiles%\DriverCleanerDotNET FileKey1=%ProgramFiles%\DriverCleanerDotNET\Backup|*|RECURSE FileKey2=%ProgramFiles%\DriverCleanerDotNET\Log|* Tags=ccutil ID=Driver Cleaner.NET * Author=Winapp2.ini Project [Driver Fusion *] DetectFile=%ProgramFiles%\Driver Fusion\Logs FileKey1=%ProgramFiles%\Driver Fusion\Backup|*|RECURSE FileKey2=%ProgramFiles%\Driver Fusion\Logs|*|RECURSE Tags=ccutil ID=Driver Fusion * Author=Winapp2.ini Project [Driver Magician *] Detect=HKCU\Software\Driver Magician FileKey1=%AppData%\Driver Magician|HiddenUpdate.txt Tags=ccapps ID=Driver Magician * Author=Winapp2.ini Project [DriverEasy *] DetectFile=%ProgramFiles%\Easeware\DriverEasy FileKey1=%AppData%\Easeware\DriverEasy\drivers|*|RECURSE FileKey2=%UserProfile%\Documents\DriverEasy|*|RECURSE Tags=ccutil ID=DriverEasy * Author=Winapp2.ini Project [DriverGenius *] Detect=HKLM\Software\Driver-Soft\DriverGenius DetectFile=%ProgramFiles%\Driver-Soft\DriverGenius FileKey1=%LocalAppData%\DriverGenius|ScanLog.log FileKey2=%ProgramData%\DriverGenius|*.log FileKey3=%ProgramData%\DriverGenius\Downloads|* FileKey4=%ProgramData%\DriverGenius\InstalledUpdates|* FileKey5=%ProgramData%\DriverGenius\Temp|* Tags=ccutil ID=DriverGenius * Author=Winapp2.ini Project [DriverMax *] Detect=HKCU\Software\Innovative Solutions\DriverMax FileKey1=%LocalAppData%\Innovative Solutions\DriverMax\Agent|*.tmp;dmxlog.txt;lastscan*.xml;logScan.txt FileKey2=%LocalAppData%\Innovative Solutions\DriverMax\Agent\Downloded Drivers|* FileKey3=%LocalAppData%\Innovative Solutions\DriverMax\Agent\Dump|* FileKey4=%LocalAppData%\Innovative Solutions\DriverMax\Agent\Uploads|*|RECURSE FileKey5=%LocalAppData%\Innovative Solutions\DriverMax\Backup|* FileKey6=%LocalAppData%\Innovative Solutions\DriverMax\LastScan|* FileKey7=%LocalAppData%\Innovative Solutions\DriverMax\Temp*|* FileKey8=%ProgramFiles%\Innovative Solutions\DriverMax|*.log Tags=ccutil ID=DriverMax * Author=Winapp2.ini Project [DriverPack Solution *] Detect=HKCU\Software\drpsu FileKey1=%AppData%\DriverPack Notifier\temp|* FileKey2=%AppData%\DRPSu\Logs|* FileKey3=%AppData%\DRPSu\snapshots|* FileKey4=%AppData%\DRPSu\temp|* FileKey5=%UserProfile%\Documents\DRP-Log|* FileKey6=%WinDir%\Logs\DIALog|*.txt FileKey7=%WinDir%\Logs\DRPLog|*.png;*.txt FileKey8=%WinDir%\Logs\SysInfo|* Tags=ccutil ID=DriverPack Solution * Author=Winapp2.ini Project [DriverRadarPro *] Detect=HKCU\Software\NoVirusThanks\DriverRadarPro RegKey1=HKCU\Software\NoVirusThanks\DriverRadarPro|edCopyDrvTo RegKey2=HKCU\Software\NoVirusThanks\DriverRadarPro|edSaveLogsTo Tags=ccutil ID=DriverRadarPro * Author=Winapp2.ini Project [Dropbox *] Detect=HKCU\Software\Dropbox DetectFile=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96 FileKey1=%AppData%\DropBox|Filecache.db;SigStore.db FileKey2=%AppData%\Dropbox\*Cache*|*|RECURSE FileKey3=%AppData%\DropBox\Bin|*.log FileKey4=%AppData%\Dropbox\installer|*|RECURSE FileKey5=%AppData%\Dropbox\logs|*|RECURSE FileKey6=%AppData%\DropBoxOem\Log|*|RECURSE FileKey7=%LocalAppData%\Dropbox\ FileKey8=%LocalAppData%\Dropbox\CrashReports|*|RECURSE FileKey9=%LocalAppData%\Dropbox\instance*\sync|*.sqlite3-* FileKey10=%LocalAppData%\Dropbox\instance*\sync\temp|* FileKey11=%LocalAppData%\Dropbox\Logs|*|RECURSE FileKey12=%LocalAppData%\Dropbox\QuitReports|* FileKey13=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\AC|*|RECURSE FileKey14=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\avatar_cache|* FileKey15=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\Crashpad|*|RECURSE FileKey16=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\instance*\sync|*.sqlite3-* FileKey17=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\instance*\sync\temp|* FileKey18=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\Logs|*|RECURSE FileKey19=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Local\Dropbox\QuitReports|* FileKey20=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\LocalCache\Roaming\Dropbox\*Cache*|*|RECURSE FileKey21=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\Settings|*.log* FileKey22=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\SystemAppData\Helium|*.log* FileKey23=%LocalAppData%\Packages\DropboxInc.Dropbox_xbfy0k16fey96\TempState|*|REMOVESELF FileKey24=%ProgramData%\Dropbox\Update\Log|* FileKey25=%ProgramFiles%\Dropbox\Update\Download|*|REMOVESELF FileKey26=%UserProfile%\Documents\Dropbox\.dropbox.cache|*|RECURSE FileKey27=%UserProfile%\Dropbox\.dropbox.cache|*|RECURSE Tags=ccutil ID=Dropbox * Author=Winapp2.ini Project [DS4Windows *] DetectFile=%AppData%\DS4Windows FileKey1=%AppData%\DS4Windows\Logs|* Tags=ccapps ID=DS4Windows * Author=Winapp2.ini Project [DSDCS InputMapper *] DetectFile=%ProgramFiles%\DSDCS FileKey1=%ProgramFiles%\DSDCS|*.log|RECURSE Tags=ccutil ID=DSDCS InputMapper * Author=Winapp2.ini Project [DU Meter *] Detect=HKCU\Software\Hagel\DU Meter FileKey1=%ProgramData%\Hagel Technologies\DU Meter|*.csv;error.elf Tags=ccinternet ID=DU Meter * Author=Winapp2.ini Project [DuckDuckGo Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|*Web Data FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|*Web Data FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\AutoFill*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\AutoFill*|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [DuckDuckGo Autoplay Preferences *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\MEIPreload|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Autoplay Preferences * Author=Winapp2.ini Project [DuckDuckGo Bookmark Backups *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|Bookmarks.bak FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|Bookmarks.bak Tags=ccapps ID=DuckDuckGo Bookmark Backups * Author=Winapp2.ini Project [DuckDuckGo Bookmark Favicons *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|favicons* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|favicons* Tags=ccapps ID=DuckDuckGo Bookmark Favicons * Author=Winapp2.ini Project [DuckDuckGo Caches *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView|*-journal|RECURSE FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView|Module Info Cache FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey20=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView|*-journal|RECURSE FileKey21=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView|Module Info Cache FileKey22=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey23=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\*Cache*|*|REMOVESELF FileKey24=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\blob_storage|*|REMOVESELF FileKey25=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\BudgetDatabase|*|REMOVESELF FileKey26=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Download Service|*|REMOVESELF FileKey27=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\optimization*|*|REMOVESELF FileKey31=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Platform Notifications|*|REMOVESELF FileKey32=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Service Worker|*|REMOVESELF FileKey33=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Shared Dictionary\cache|*|REMOVESELF FileKey34=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey35=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*Cache*|*|REMOVESELF FileKey37=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Avatars|*|REMOVESELF FileKey38=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Optimization*|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Caches * Author=Winapp2.ini Project [DuckDuckGo Default App Handlers *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|PreferredApps FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|PreferredApps Tags=ccapps ID=DuckDuckGo Default App Handlers * Author=Winapp2.ini Project [DuckDuckGo Download History *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|DownloadMetadata FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\shared_proto_db|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|DownloadMetadata FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Download History * Author=Winapp2.ini Project [DuckDuckGo DRM Data *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\MediaFoundationCdmStore|*|REMOVESELF FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\WidevineCdm|*|REMOVESELF Tags=ccapps ID=DuckDuckGo DRM Data * Author=Winapp2.ini Project [DuckDuckGo Extension Cookies *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|Extension Cookies FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|Extension Cookies Tags=ccapps ID=DuckDuckGo Extension Cookies * Author=Winapp2.ini Project [DuckDuckGo Privacy Sandbox *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView|*first_party_sets* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView|*first_party_sets* FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey11=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Network|Trust Tokens* FileKey12=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\CookieReadinessList|*|REMOVESELF FileKey13=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey14=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey15=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey16=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Privacy Sandbox * Author=Winapp2.ini Project [DuckDuckGo Progressive Web Apps *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Web Applications|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Web Applications|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Progressive Web Apps * Author=Winapp2.ini Project [DuckDuckGo Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|Login Data* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|Login Data* Tags=ccapps ID=DuckDuckGo Saved Usernames & Passwords * Author=Winapp2.ini Project [DuckDuckGo Security & Threat Detection *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|DIPS* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey13=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|DIPS* FileKey14=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\ClientCertificates|*|REMOVESELF FileKey15=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Network|TransportSecurity* FileKey16=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Safe Browsing Network|*|REMOVESELF FileKey17=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\CertificateRevocation|*|REMOVESELF FileKey18=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Crowd Deny|*|REMOVESELF FileKey19=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\PKIMetadata|*|REMOVESELF FileKey20=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Safe Browsing|*|REMOVESELF FileKey21=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\SafetyTips|*|REMOVESELF FileKey22=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey23=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Subresource Filter|*|REMOVESELF FileKey24=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Security & Threat Detection * Author=Winapp2.ini Project [DuckDuckGo Shopping Insights *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\parcel_tracking_db|*|REMOVESELF FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\chrome_cart_db|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\commerce_subscription_db|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\coupon_db|*|REMOVESELF FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\discount*_db|*|REMOVESELF FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Shopping Insights * Author=Winapp2.ini Project [DuckDuckGo Storage Quota Manager *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|QuotaManager FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|QuotaManager Tags=ccapps ID=DuckDuckGo Storage Quota Manager * Author=Winapp2.ini Project [DuckDuckGo Sync Data *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Sync Data|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Sync Data|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Sync Data * Author=Winapp2.ini Project [DuckDuckGo Telemetry *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\Application|debug.log FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|*.log FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\Stability|*|REMOVESELF FileKey20=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\Application|debug.log FileKey21=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\Application\SetupMetrics|*|REMOVESELF FileKey22=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey23=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView|*.pma;LOG;LOG.old|RECURSE FileKey24=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|*.log FileKey25=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\DataSharing|*|REMOVESELF FileKey26=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey28=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\PersistentOriginTrials|*|REMOVESELF FileKey29=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Site Characteristics Database|*|REMOVESELF FileKey30=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\VideoDecodeStats|*|REMOVESELF FileKey31=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\WebRTC Logs|*|REMOVESELF FileKey32=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\WebrtcVideoStats|*|REMOVESELF FileKey33=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey34=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Crash Reports|*|REMOVESELF FileKey35=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Crashpad|*|REMOVESELF FileKey36=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Local Traces|*|REMOVESELF FileKey37=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\OriginTrials|*|REMOVESELF FileKey38=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\Stability|*|REMOVESELF FileKey39=%ProgramFiles%\Packages\*DuckDuckGo*Browser*\LocalState\Application|debug.log FileKey40=%ProgramFiles%\Packages\*DuckDuckGo*Browser*\LocalState\Application\SetupMetrics|*|REMOVESELF FileKey41=%ProgramFiles%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\Application|debug.log FileKey42=%ProgramFiles%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\Application\SetupMetrics|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Telemetry * Author=Winapp2.ini Project [DuckDuckGo Web Browsing Cookies *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Network|Cookies*;Device Bound Sessions* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=DuckDuckGo Web Browsing Cookies * Author=Winapp2.ini Project [DuckDuckGo Web Browsing History *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=DuckDuckGo Web Browsing History * Author=Winapp2.ini Project [DuckDuckGo Web Browsing Session *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Sessions|*|REMOVESELF FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Extension State|*|REMOVESELF FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Sessions|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Web Browsing Session * Author=Winapp2.ini Project [DuckDuckGo Web Storage *] DetectFile=%LocalAppData%\Packages\*DuckDuckGo*Browser* FileKey1=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\EBWebView\*\WebStorage|*|REMOVESELF FileKey9=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\IndexedDB|*|REMOVESELF FileKey10=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Local Storage\*\IndexedDB\https*|* FileKey11=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Local Storage\*\Session Storage|* FileKey12=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey13=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Local Storage\*\WebStorage|*|RECURSE FileKey14=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Local Storage\leveldb|*|REMOVESELF FileKey15=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\Session Storage|*|REMOVESELF FileKey16=%LocalAppData%\Packages\*DuckDuckGo*Browser*\LocalState\internalEnvironment\EBWebView\*\WebStorage|*|REMOVESELF Tags=ccapps ID=DuckDuckGo Web Storage * Author=Winapp2.ini Project [DuckieTV *] DetectFile=%AppData%\DuckieTV FileKey1=%AppData%\DuckieTV|*.log;*.txt Tags=ccmedia ID=DuckieTV * Author=Winapp2.ini Project [Duke Nukem 3D *] Detect=HKCU\Software\Valve\Steam\Apps\225140 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Duke Nukem 3D\bin|stderr.txt;stdout.txt Tags=ccapps ID=Duke Nukem 3D * Author=Winapp2.ini Project [Dungeon of the Endless *] DetectFile=%UserProfile%\Documents\Dungeon of the Endless FileKey1=%UserProfile%\Documents\Dungeon of the Endless\Temporary Files|* Tags=ccapps ID=Dungeon of the Endless * Author=Winapp2.ini Project [Dungeon Siege *] DetectFile=%UserProfile%\Documents\My Games\Dungeon Siege FileKey1=%UserProfile%\Documents\My Games\Dungeon Siege\Logs|* Tags=ccapps ID=Dungeon Siege * Author=Winapp2.ini Project [Dungeon Siege 2 *] DetectFile=%UserProfile%\Documents\My Games\Dungeon Siege 2 FileKey1=%UserProfile%\Documents\My Games\Dungeon Siege 2\Logs|* Tags=ccapps ID=Dungeon Siege 2 * Author=Winapp2.ini Project [Dungeons - The Dark Lord *] DetectFile=%AppData%\Kalypso Media\Dungeons - The Dark Lord FileKey1=%AppData%\Kalypso Media\Dungeons - The Dark Lord|log.txt Tags=ccapps ID=Dungeons - The Dark Lord * Author=Winapp2.ini Project [Dungreed *] DetectFile=%UserProfile%\AppData\LocalLow\TeamHoray\Dungreed FileKey1=%UserProfile%\AppData\LocalLow\TeamHoray\Dungreed\Unity|*|REMOVESELF Tags=ccapps ID=Dungreed * Author=Winapp2.ini Project [Dup Detector *] Detect=HKCU\Software\Prismatic Software\PhotoBatch RegKey1=HKCU\Software\Prismatic Software\PhotoBatch\Dialogs|LastBatchFile RegKey2=HKCU\Software\Prismatic Software\PhotoBatch\Dialogs|LastBatchFolder RegKey3=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastBatFile RegKey4=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastFold RegKey5=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastSecFold RegKey6=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastSingleFold RegKey7=HKCU\Software\Prismatic Software\PhotoBatch\MRU Tags=ccmedia ID=Dup Detector * Author=Winapp2.ini Project [dupeGuru *] DetectFile=%AppData%\Hardcoded Software\dupeGuru FileKey1=%AppData%\Hardcoded Software\dupeGuru|*.log Tags=ccutil ID=dupeGuru * Author=Winapp2.ini Project [DupKiller *] DetectFile=%ProgramFiles%\DupKilIer FileKey1=%ProgramFiles%\DupKilIer|DupKiller.log Tags=ccutil ID=DupKiller * Author=Winapp2.ini Project [Duplicate Cleaner *] DetectFile=%AppData%\DigitalVolcano FileKey1=%AppData%\DigitalVolcano\DuplicateCleaner|*.data FileKey2=%UserProfile%\Documents|Duplicate Cleaner log.txt Tags=ccutil ID=Duplicate Cleaner * Author=Winapp2.ini Project [Duplicate Photo Finder *] Detect=HKCU\Software\Duplicate Photo Finder RegKey1=HKCU\Software\Duplicate Photo Finder|AddFolderWiz RegKey2=HKCU\Software\Duplicate Photo Finder|last1 RegKey3=HKCU\Software\Duplicate Photo Finder|lastR1 Tags=ccutil ID=Duplicate Photo Finder * Author=Winapp2.ini Project [DUSK *] Detect=HKCU\Software\Valve\Steam\Apps\519860 FileKey1=%UserProfile%\AppData\LocalLow\David Szymanski\Dusk|output_log.txt Tags=ccapps ID=DUSK * Author=Winapp2.ini Project [DVBDream *] Detect=HKLM\Software\DVBDream FileKey1=%ProgramFiles%\dvbdream|*.bak;*.log;*levellog*|RECURSE FileKey2=%ProgramFiles%\dvbdream\Logs|* FileKey3=%SystemDrive%\dvbdream|*.bak;*.log;*levellog*|RECURSE FileKey4=%SystemDrive%\dvbdream\Logs|* Tags=ccutil ID=DVBDream * Author=Winapp2.ini Project [DVBViewer *] Detect=HKLM\Software\CM&V\DVBViewer FileKey1=%AppData%\CMUV\DVBViewer*|*.bak;*.log FileKey2=%ProgramData%\CMUV\DVBViewer*|*.bak;*.log FileKey3=%ProgramData%\CMUV\DVBViewer\backup|*|REMOVESELF FileKey4=%ProgramFiles%\DVBViewer\backup|*|REMOVESELF FileKey5=%ProgramFiles%\DVBViewer\GraphPresets|*.fgp FileKey6=%ProgramFiles%\DVBViewer\Remotes|* FileKey7=%ProgramFiles%\DVBViewer\setup|* FileKey8=%ProgramFiles%\DVBViewer\Transponders|* Tags=ccmedia ID=DVBViewer * Author=Winapp2.ini Project [DVD-Cloner *] Detect1=HKCU\Software\Dvd-cloner Detect2=HKCU\Software\DVD-Cloner Gold FileKey1=%AppData%\DVD-Cloner*|*.log FileKey2=%ProgramData%\DVD-Cloner*|*.log FileKey3=%ProgramFiles%\DVD-Cloner Platinum\*\readcache|* FileKey4=%ProgramFiles%\DVD-Cloner*|*.log|RECURSE FileKey5=%SystemDrive%|dtdlog.txt FileKey6=%UserProfile%\Documents|Smart.log;Smart_result.log FileKey7=%WinDir%\System32|dvdtest10024.dat Tags=ccmedia ID=DVD-Cloner * Author=Winapp2.ini Project [DVD-Ranger *] Detect=HKLM\Software\DVD-Ranger FileKey1=%ProgramData%\DVDRanger\DDF626ADdvdcss|* FileKey2=%ProgramData%\DVDRanger\Logs|* FileKey3=%SystemDrive%\DVDRanger|*|REMOVESELF FileKey4=%UserProfile%\Documents\DVDRanger\Screenshots|*|RECURSE FileKey5=%UserProfile%\Documents\DVDRanger\Temp|*|REMOVESELF Tags=ccapps ID=DVD-Ranger * Author=Winapp2.ini Project [DVD Flick *] DetectFile=%ProgramFiles%\DVD Flick FileKey1=%AppData%\DVD Flick|dvdflick.log;report.txt Tags=ccmedia ID=DVD Flick * Author=Winapp2.ini Project [DVD Shrink *] Detect=HKCU\Software\DVD Shrink FileKey1=%ProgramData%\DVD Shrink|* Tags=ccmedia ID=DVD Shrink * Author=Winapp2.ini Project [dvdcss *] DetectFile1=%AppData%\.dvdcss DetectFile2=%AppData%\dvdcss* DetectFile3=%UserProfile%\.dvdcss FileKey1=%AppData%\.dvdcss|*|REMOVESELF FileKey2=%AppData%\dvdcss*|*|REMOVESELF FileKey3=%UserProfile%\.dvdcss|*|REMOVESELF Tags=ccmedia ID=dvdcss * Author=Winapp2.ini Project [DVDFab *] Detect1=HKCU\Software\DVDFab Detect2=HKCU\Software\DVDFab Passkey Detect3=HKCU\Software\FabPlayer FileKey1=%AppData%\DVDFab Player*\Advertis*|*|RECURSE FileKey2=%AppData%\DVDFab\DVDFab*\regRecord|*.rec FileKey3=%AppData%\DVDFab\DVDFab*\SceneData|*|RECURSE FileKey4=%AppData%\DVDFab\DVDFabCommon|*.bin FileKey5=%AppData%\LiveUpdate|*.log FileKey6=%AppData%\Microsoft\Windows\Templates\Videos\Temp|*|RECURSE FileKey7=%LocalAppData%\DVDFab*\cache\QtWebEngine\Default\Cache|* FileKey8=%LocalAppData%\DVDFab*\QtWebEngine\Default\GPUCache|*|REMOVESELF FileKey9=%LocalAppData%\DVDFab*\QtWebEngine\Default\Service Worker\Database|LOG;LOG.old FileKey10=%UserProfile%\Documents\DVDFab*|*.log FileKey11=%UserProfile%\Documents\DVDFab*\Log|*|RECURSE FileKey12=%UserProfile%\Documents\DVDFab*\SceneData|*|RECURSE FileKey13=%UserProfile%\Documents\DVDFab*\Temp|*|RECURSE FileKey14=%UserProfile%\Documents\DVDFab\DVDFab*\Cinavia|*|RECURSE FileKey15=%UserProfile%\Documents\DVDFab\DVDFab*\Log|*|RECURSE FileKey16=%UserProfile%\Documents\DVDFab\DVDFab*\Temp|*|RECURSE FileKey17=%UserProfile%\Documents\DVDFab\updateLog|*|REMOVESELF FileKey18=%UserProfile%\Documents\LiveUpdate|*|REMOVESELF FileKey19=%UserProfile%\Documents\PcSetup|*|RECURSE RegKey1=HKCU\Software\FabPlayer|DefaultDir RegKey2=HKCU\Software\FabPlayer|DefaultFile Tags=ccmedia ID=DVDFab * Author=Winapp2.ini Project [DVDSmith *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\DVDSmith Movie Backup_is1 FileKey1=%UserProfile%\Documents\dvdsmith|*.log Tags=ccmedia ID=DVDSmith * Author=Winapp2.ini Project [DVDVideoSoft *] Detect1=HKCU\Software\AppDataLow\Software\DVDVideoSoftTB Detect2=HKCU\Software\DVDVideoSoft FileKey1=%AppData%\DVDVideoSoft\*\History|*|RECURSE FileKey2=%AppData%\DVDVideoSoft\*Logs|*|RECURSE FileKey3=%AppData%\DVDVideoSoft\Backup|*|RECURSE FileKey4=%LocalAppData%\DVDVideoSoftTB\Logs|*|RECURSE FileKey5=%UserProfile%\Documents\DVDVideoSoft|*log.txt|RECURSE Tags=ccmedia ID=DVDVideoSoft * Author=Winapp2.ini Project [DVDx *] Detect=HKCU\Software\DVDx FileKey1=%ProgramFiles%\DVDx|*.tmp RegKey1=HKCU\Software\DVDx\LastDir RegKey2=HKCU\Software\DVDx\LastOutput Tags=ccmedia ID=DVDx * Author=Winapp2.ini Project [DVIPS Shell *] Detect=HKCU\Software\Juan M. Aguirregabiria\DVIPSsh\Version 1.00 RegKey1=HKCU\Software\Juan M. Aguirregabiria\DVIPSsh\Version 1.00|Options Tags=ccapps ID=DVIPS Shell * Author=Winapp2.ini Project [DxO Photo Suite *] DetectFile1=%LocalAppData%\DxO* DetectFile2=%UserProfile%\Documents\DxO* FileKey1=%LocalAppData%\DxO*\DataCache|*|RECURSE FileKey2=%LocalAppData%\DxO*\DxO*\*Cache|*|RECURSE FileKey3=%LocalAppData%\DxO*\DxO*\CrashReports|*|RECURSE FileKey4=%LocalAppData%\DxO*\DxO*\Logs|* FileKey5=%LocalAppData%\DxO*\Logs|* FileKey6=%UserProfile%\Documents\DxO * crash*s|* FileKey7=%UserProfile%\Documents\DxO * logs|* FileKey8=%UserProfile%\Documents\DxO*\CrashReports|*|RECURSE FileKey9=%UserProfile%\Documents\DxO*\log|* Tags=ccapps ID=DxO Photo Suite * Author=Winapp2.ini Project [Dying Light *] DetectFile=%UserProfile%\Documents\DyingLight FileKey1=%UserProfile%\Documents\DyingLight\Out\Logs|* FileKey2=%UserProfile%\Documents\DyingLight\Out\Screenshots|screen_*.tga Tags=ccapps ID=Dying Light * Author=Winapp2.ini Project [Dyn Updater *] Detect=HKCU\Software\Dyn\Dyn Updater FileKey1=%ProgramData%\Dyn\Updater|*.log;*.msi Tags=ccinternet ID=Dyn Updater * Author=Winapp2.ini Project [Dynalist Obsidian *] DetectFile=%AppData%\Obsidian FileKey1=%AppData%\Obsidian|*.log;DIPS* FileKey2=%AppData%\Obsidian\*cache|*|RECURSE FileKey3=%LocalAppData%\obsidian-updater|* Tags=ccapps ID=Dynalist Obsidian * Author=Winapp2.ini Project [Dynamo *] DetectFile=%AppData%\Dynamo FileKey1=%AppData%\Dynamo\*\Logs|*Log_*.txt Tags=ccapps ID=Dynamo * Author=Winapp2.ini Project [EA App *] Detect1=HKCU\Software\EA Games\EA Core Detect2=HKLM\Software\EA Games\EA Core Detect3=HKLM\SOFTWARE\Electronic Arts\EA Desktop Detect4=HKLM\Software\Electronic Arts\EADM FileKey1=%LocalAppData%\EA Core\Cache|*|REMOVESELF FileKey2=%LocalAppData%\EADesktop\cache|*|REMOVESELF FileKey3=%LocalAppData%\EADesktop\QtWebEngine\Default|*state;quota*;visited* FileKey4=%LocalAppData%\EADesktop\QtWebEngine\Default\*cache|*|RECURSE FileKey5=%LocalAppData%\EADesktop\QtWebEngine\Default\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\EALaunchHelper\cache\qmlcache|*|RECURSE FileKey7=%LocalAppData%\Electronic Arts\EA Desktop\*Cache|*|RECURSE FileKey8=%LocalAppData%\Electronic Arts\EA Desktop\Logs|* FileKey9=%LocalAppData%\Electronic Arts\EA Desktop\OfflineTelemetry|* FileKey10=%LocalAppData%\Electronic Arts\EADMUI\Web Cache|*|RECURSE FileKey11=%ProgramData%\EA Core\Cache|*|REMOVESELF FileKey12=%ProgramData%\EA Desktop\Logs|* FileKey13=%ProgramData%\EA Logs|* FileKey14=%ProgramData%\Electronic Arts\EA Core\logs|* FileKey15=%ProgramData%\Origin\Logs|* FileKey16=%WinDir%\System32\config\systemprofile\AppData\Local\Electronic Arts\EA Desktop|*|REMOVESELF FileKey17=%WinDir%\System32\config\systemprofile\AppData\Local\Origin\Web Cache\*|*|REMOVESELF Tags=ccapps ID=EA App * Author=Winapp2.ini Project [EA App Game Installers *] Detect=HKLM\SOFTWARE\Electronic Arts\EA Desktop FileKey1=%ProgramFiles%\EA Games\*\__Installer|InstallLog.txt FileKey2=%ProgramFiles%\EA Games\*\__Installer\directx|*|REMOVESELF FileKey3=%ProgramFiles%\EA Games\*\__Installer\vc|*|REMOVESELF Tags=ccapps ID=EA App Game Installers * Author=Winapp2.ini Project [EA Games Battlefield 5 *] DetectFile=%UserProfile%\Documents\Battlefield V FileKey1=%LocalAppData%\Battlefield V\shaders|*.cache FileKey2=%UserProfile%\Documents\Battlefield V\twinkle\temp\*http*|*|RECURSE Tags=ccapps ID=EA Games Battlefield 5 * Author=Winapp2.ini Project [EA Games Battlefield 2042 *] DetectFile=%UserProfile%\Documents\Battlefield 2042 FileKey1=%UserProfile%\Documents\Battlefield 2042\Cache|*|RECURSE FileKey2=%UserProfile%\Documents\Battlefield 2042\CrashDumps|*|RECURSE Tags=ccapps ID=EA Games Battlefield 2042 * Author=Winapp2.ini Project [EA Games Battlefield 2042 Screenshots *] DetectFile=%UserProfile%\Documents\Battlefield 2042 FileKey1=%UserProfile%\Documents\Battlefield 2042\Screenshots|*|RECURSE Tags=ccapps ID=EA Games Battlefield 2042 Screenshots * Author=Winapp2.ini Project [Earth 2160 *] Detect=HKCU\Software\Valve\Steam\Apps\19000 FileKey1=%UserProfile%\Documents\Earth 2160\FontsCache|* Tags=ccapps ID=Earth 2160 * Author=Winapp2.ini Project [Earth Alerts *] Detect=HKCU\Software\South Wind Technologies\Earth Alerts FileKey1=%AppData%\Earth Alerts\Images|*|RECURSE FileKey2=%AppData%\Earth Alerts\Messages|*|RECURSE Tags=ccinternet ID=Earth Alerts * Author=Winapp2.ini Project [EaseUS Data Recovery Wizard *] DetectFile=%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard FileKey1=%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard|*.log ExcludeKey1=FILE|%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\|install.log Tags=ccutil ID=EaseUS Data Recovery Wizard * Author=Winapp2.ini Project [EaseUS KeyFinder *] DetectFile=%LocalAppData%\EaseUS\KeyFinder FileKey1=%LocalAppData%\EaseUS\KeyFinder\Cache\qmlcache|* Tags=ccutil ID=EaseUS KeyFinder * Author=Winapp2.ini Project [EaseUS MobiSaver *] Detect1=HKLM\Software\EASEUS\EASEUS IPhone Wizard Detect2=HKLM\Software\EaseUS\Mobisaver for Android FileKey1=%ProgramFiles%\EaseUS\EaseUS MobiSaver*\bin|*.log;CommDbg.txt;Eaolog;mbs FileKey2=%SystemDrive%\EaseUS MobiSaver * Temp Backup|*|RECURSE Tags=ccapps ID=EaseUS MobiSaver * Author=Winapp2.ini Project [EaseUS Partition Master *] Detect=HKCU\Software\EASEUS\EASEUS Partition Manager FileKey1=%ProgramFiles%\EASEUS\EASEUS Partition Master*\bin|*.log|RECURSE FileKey2=%WinDir%|EPMBatch.ept;OutLog.txt Tags=ccutil ID=EaseUS Partition Master * Author=Winapp2.ini Project [EaseUS ToDo Backup *] Detect=HKCU\Software\EaseUS\EaseUS Todo Backup FileKey1=%ProgramFiles%\EaseUS\Todo Backup\bin|easeus.log;TbLogsysClient.tblog Tags=ccutil ID=EaseUS ToDo Backup * Author=Winapp2.ini Project [East-Tec Eraser *] Detect=HKLM\Software\East-Tec\east-tec Eraser FileKey1=%ProgramData%\East-Tec\east-tec Eraser\Updates|*|RECURSE FileKey2=%ProgramFiles%\east-tec Eraser|except.log Tags=ccutil ID=East-Tec Eraser * Author=Winapp2.ini Project [Easy Anti-Cheat *] DetectFile=%AppData%\EasyAntiCheat FileKey1=%AppData%\EasyAntiCheat|*.log|REMOVESELF FileKey2=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat|*.log Tags=ccapps ID=Easy Anti-Cheat * Author=Winapp2.ini Project [Easy CD-DA Extractor *] Detect=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8 RegKey1=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k8c RegKey2=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k80 RegKey3=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k81 RegKey4=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k91 RegKey5=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k92 Tags=ccutil ID=Easy CD-DA Extractor * Author=Winapp2.ini Project [Easy Duplicate Finder *] Detect=HKCU\Software\Easy Duplicate Finder DetectFile=%ProgramFiles%\Easy Duplicate Finder 4 FileKey1=%AppData%\EasyDuplicateFinder\Logs|*.log Tags=ccutil ID=Easy Duplicate Finder * Author=Winapp2.ini Project [EasyGPS *] Detect=HKCU\Software\TopoGrafix\EasyGPS FileKey1=%LocalAppData%\TopoGrafix\Error Logs|*.txt RegKey1=HKCU\Software\TopoGrafix\EasyGPS\Error Log RegKey2=HKCU\Software\TopoGrafix\EasyGPS\Recent File List Tags=ccutil ID=EasyGPS * Author=Winapp2.ini Project [EC XTRA Timer *] DetectFile=%AppData%\The Toro Company FileKey1=%AppData%\The Toro Company|ECXTRAoutput.txt Tags=ccapps ID=EC XTRA Timer * Author=Winapp2.ini Project [Eclipse Project *] DetectFile=%UserProfile%\desenvolvimento\Eclipse FileKey1=%UserProfile%\desenvolvimento\Eclipse\configuration|*.log FileKey2=%UserProfile%\desenvolvimento\Eclipse\configuration\org.eclipse.update\history|*.xml FileKey3=%UserProfile%\desenvolvimento\Eclipse\p2\org.eclipse.equinox.p2.repository\Cache|* Tags=ccapps ID=Eclipse Project * Author=Winapp2.ini Project [Ecobyte Replace Text *] Detect=HKLM\Software\BK\BK ReplaceEm RegKey1=HKLM\Software\BK\BK ReplaceEm|destPath RegKey2=HKLM\Software\BK\BK ReplaceEm|sourceExcludeFilter RegKey3=HKLM\Software\BK\BK ReplaceEm|sourcePath Tags=ccutil ID=Ecobyte Replace Text * Author=Winapp2.ini Project [Ecosia Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|*Web Data FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\EcosiaBrowser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Ecosia Browser Autoplay Preferences *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Autoplay Preferences * Author=Winapp2.ini Project [Ecosia Browser Bookmark Backups *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|Bookmarks.bak Tags=ccapps ID=Ecosia Browser Bookmark Backups * Author=Winapp2.ini Project [Ecosia Browser Bookmark Favicons *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|favicons* Tags=ccapps ID=Ecosia Browser Bookmark Favicons * Author=Winapp2.ini Project [Ecosia Browser Caches *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\EcosiaBrowser\User Data|Module Info Cache FileKey3=%LocalAppData%\EcosiaBrowser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\EcosiaBrowser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\EcosiaBrowser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\EcosiaBrowser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\EcosiaBrowser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\EcosiaBrowser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\EcosiaBrowser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\EcosiaBrowser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\EcosiaBrowser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\EcosiaBrowser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\EcosiaBrowser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\EcosiaBrowser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\EcosiaBrowser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\EcosiaBrowser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\EcosiaBrowser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\EcosiaBrowser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\EcosiaBrowser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Caches * Author=Winapp2.ini Project [Ecosia Browser Default App Handlers *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|PreferredApps Tags=ccapps ID=Ecosia Browser Default App Handlers * Author=Winapp2.ini Project [Ecosia Browser Download History *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Download History * Author=Winapp2.ini Project [Ecosia Browser DRM Data *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\EcosiaBrowser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Ecosia Browser DRM Data * Author=Winapp2.ini Project [Ecosia Browser Extension Cookies *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|Extension Cookies Tags=ccapps ID=Ecosia Browser Extension Cookies * Author=Winapp2.ini Project [Ecosia Browser Pinned Tabs *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data RegKey1=HKCU\Software\EcosiaBrowser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Ecosia Browser Pinned Tabs * Author=Winapp2.ini Project [Ecosia Browser Privacy Sandbox *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data|*first_party_sets* FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\EcosiaBrowser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\EcosiaBrowser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\EcosiaBrowser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\EcosiaBrowser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\EcosiaBrowser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\EcosiaBrowser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Privacy Sandbox * Author=Winapp2.ini Project [Ecosia Browser Progressive Web Apps *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Progressive Web Apps * Author=Winapp2.ini Project [Ecosia Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|Login Data* Tags=ccapps ID=Ecosia Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Ecosia Browser Security & Threat Detection *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|DIPS* FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\EcosiaBrowser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\EcosiaBrowser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\EcosiaBrowser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\EcosiaBrowser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\EcosiaBrowser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\EcosiaBrowser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\EcosiaBrowser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\EcosiaBrowser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\EcosiaBrowser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\EcosiaBrowser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Security & Threat Detection * Author=Winapp2.ini Project [Ecosia Browser Shopping Insights *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\EcosiaBrowser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\EcosiaBrowser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\EcosiaBrowser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Shopping Insights * Author=Winapp2.ini Project [Ecosia Browser Storage Quota Manager *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|QuotaManager Tags=ccapps ID=Ecosia Browser Storage Quota Manager * Author=Winapp2.ini Project [Ecosia Browser Sync Data *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Sync Data * Author=Winapp2.ini Project [Ecosia Browser Telemetry *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\Application|debug.log FileKey2=%LocalAppData%\EcosiaBrowser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\EcosiaBrowser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\EcosiaBrowser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\EcosiaBrowser\User Data\*|*.log FileKey6=%LocalAppData%\EcosiaBrowser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\EcosiaBrowser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\EcosiaBrowser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\EcosiaBrowser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\EcosiaBrowser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\EcosiaBrowser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\EcosiaBrowser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\EcosiaBrowser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\EcosiaBrowser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\EcosiaBrowser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\EcosiaBrowser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\EcosiaBrowser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\EcosiaBrowser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\EcosiaBrowser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\EcosiaBrowser\Application|debug.log FileKey21=%ProgramFiles%\EcosiaBrowser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\EcosiaBrowser\BlBeacon|failed_count RegKey2=HKCU\Software\EcosiaBrowser\BlBeacon|state RegKey3=HKCU\Software\EcosiaBrowser\Installer|LastChecked RegKey4=HKCU\Software\EcosiaBrowser\StabilityMetrics Tags=ccapps ID=Ecosia Browser Telemetry * Author=Winapp2.ini Project [Ecosia Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Ecosia Browser Web Browsing Cookies * Author=Winapp2.ini Project [Ecosia Browser Web Browsing History *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Ecosia Browser Web Browsing History * Author=Winapp2.ini Project [Ecosia Browser Web Browsing Session *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Web Browsing Session * Author=Winapp2.ini Project [Ecosia Browser Web Storage *] DetectFile=%LocalAppData%\EcosiaBrowser\User Data FileKey1=%LocalAppData%\EcosiaBrowser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\EcosiaBrowser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\EcosiaBrowser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\EcosiaBrowser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\EcosiaBrowser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\EcosiaBrowser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\EcosiaBrowser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\EcosiaBrowser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Ecosia Browser Web Storage * Author=Winapp2.ini Project [Edna & Harvey: Harvey's New Eyes *] Detect=HKCU\Software\Valve\Steam\Apps\219910 DetectFile=%LocalAppData%\Daedalic Entertainment\Harvey FileKey1=%LocalAppData%\Daedalic Entertainment\Harvey|*.log FileKey2=%ProgramFiles%\Steam\Steamapps\common\Edna and Harvey Harvey's New Eyes|stderr.txt Tags=ccapps ID=Edna & Harvey: Harvey's New Eyes * Author=Winapp2.ini Project [Effective File Search *] Detect=HKCU\Software\SOW\EFS FileKey1=%ProgramFiles%\efs|cblist*.dat Tags=ccutil ID=Effective File Search * Author=Winapp2.ini Project [EffeTech HTTP Sniffer *] Detect=HKCU\Software\EffeTech\EffeTech HTTP Sniffer RegKey1=HKCU\Software\EffeTech\EffeTech HTTP Sniffer\Recent File List Tags=ccutil ID=EffeTech HTTP Sniffer * Author=Winapp2.ini Project [Efficient Calendar *] DetectFile=%AppData%\Efficient Calendar FileKey1=%AppData%\Efficient Calendar\MRUItems|*|RECURSE Tags=ccapps ID=Efficient Calendar * Author=Winapp2.ini Project [EFSoftware *] DetectFile=%AppData%\EFSoftware FileKey1=%AppData%\EFSoftware|*Cache Tags=ccutil ID=EFSoftware * Author=Winapp2.ini Project [EH Reminder *] Detect=HKCU\Software\Juan M. Aguirregabiria\Eh Reminder RegKey1=HKCU\Software\Juan M. Aguirregabiria\Eh Reminder\Previous Tags=ccapps ID=EH Reminder * Author=Winapp2.ini Project [Elcomsoft Advanced EFS Data Recovery *] Detect=HKCU\Software\ElcomSoft\Advanced EFS Data Recovery FileKey1=%SystemDrive%|aefsdr.log Tags=ccapps ID=Elcomsoft Advanced EFS Data Recovery * Author=Winapp2.ini Project [Elcomsoft Advanced Registry Tracer *] Detect=HKCU\Software\Elcom\ART RegKey1=HKCU\Software\Elcom\ART\Recent File List Tags=ccutil ID=Elcomsoft Advanced Registry Tracer * Author=Winapp2.ini Project [Elcomsoft Password Digger *] Detect=HKCU\Software\ElcomSoft\Elcomsoft Password Digger FileKey1=%AppData%\Elcomsoft\*Password Digger|journal.sqlite Tags=ccapps ID=Elcomsoft Password Digger * Author=Winapp2.ini Project [Elcomsoft Password Recovery *] Detect1=HKCU\Software\ElcomSoft\Advanced Archive Password Recovery Detect2=HKCU\Software\ElcomSoft\Advanced Office Password Recovery Detect3=HKCU\Software\ElcomSoft\Advanced PDF Password Recovery Detect4=HKCU\Software\ElcomSoft\Distributed Password Recovery Detect5=HKCU\Software\ElcomSoft\Elcomsoft Internet Password Breaker Detect6=HKCU\Software\ElcomSoft\Elcomsoft Phone Password Breaker Detect7=HKCU\Software\ElcomSoft\Elcomsoft Proactive Password Auditor Detect8=HKCU\Software\ElcomSoft\Elcomsoft Wireless Security Auditor FileKey1=%AppData%\Elcomsoft\Elcomsoft Phone Password Breaker|*.log FileKey2=%ProgramData%\Elcomsoft Password Recovery\Distributed Password Recovery\Logs|* FileKey3=%ProgramFiles%\Elcomsoft Password Recovery\*|*.log;*log.txt RegKey1=HKCU\Software\ElcomSoft\Advanced Archive Password Recovery\Paths RegKey2=HKCU\Software\ElcomSoft\Advanced Archive Password Recovery\Recent Files RegKey3=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 1 RegKey4=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 2 RegKey5=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 3 RegKey6=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 4 RegKey7=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 5 RegKey8=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 6 RegKey9=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 7 RegKey10=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 8 RegKey11=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 9 RegKey12=HKCU\Software\ElcomSoft\Advanced Office Password Recovery|Recent file 10 RegKey13=HKCU\Software\ElcomSoft\Advanced PDF Password Recovery\Recent Files Tags=ccapps ID=Elcomsoft Password Recovery * Author=Winapp2.ini Project [Electric Sheep *] DetectFile=%ProgramData%\ElectricSheep FileKey1=%ProgramData%\ElectricSheep\Logs|* Tags=ccapps ID=Electric Sheep * Author=Winapp2.ini Project [ElsterFormular *] DetectFile=%AppData%\elsterformular FileKey1=%AppData%\elsterformular\*\log|*.log* FileKey2=%AppData%\elsterformular\*\tmp|*|RECURSE FileKey3=%AppData%\elsterformular\pluginmanager\data|*_cpy.zip FileKey4=%LocalAppData%\.elfohilfe|*|REMOVESELF FileKey5=%LocalAppData%\elfopatch|*|REMOVESELF FileKey6=%ProgramData%\elsterformular\log|*.log Tags=ccapps ID=ElsterFormular * Author=Winapp2.ini Project [Eltima SWF Player *] DetectFile=%AppData%\Eltima Software\SWF Player FileKey1=%AppData%\Eltima Software\SWF Player|last_playlist;recent Tags=ccmedia ID=Eltima SWF Player * Author=Winapp2.ini Project [Eluktronics Bluetooth Device Firmware Update Tool *] DetectFile=%ProgramData%\BT_DFU_Tool FileKey1=%ProgramData%\BT_DFU_Tool\DFU*.exe.WebView2\EBWebView|*.pma FileKey2=%ProgramData%\BT_DFU_Tool\DFU*.exe.WebView2\EBWebView\*Cache|*|RECURSE FileKey3=%ProgramData%\BT_DFU_Tool\DFU*.exe.WebView2\EBWebView\BrowserMetrics|* FileKey4=%ProgramData%\BT_DFU_Tool\DFU*.exe.WebView2\EBWebView\Default\*Cache|*|RECURSE Tags=ccutil ID=Eluktronics Bluetooth Device Firmware Update Tool * Author=Winapp2.ini Project [Eluktronics Control Center *] DetectFile1=%LocalAppData%\Packages\ControlCenter3_wrbgcf7aesyd8 DetectFile2=%ProgramFiles%\OEM\Eluktronics Control Center FileKey1=%LocalAppData%\Packages\ControlCenter3_wrbgcf7aesyd8\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\ControlCenter3_wrbgcf7aesyd8\Settings|*.log* FileKey3=%LocalAppData%\Packages\ControlCenter3_wrbgcf7aesyd8\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\ControlCenter3_wrbgcf7aesyd8\TempState|*|REMOVESELF FileKey5=%ProgramData%\ControlCenter|*.log FileKey6=%UserProfile%\Logs|SystrayComponent.json Tags=ccutil ID=Eluktronics Control Center * Author=Winapp2.ini Project [eM Client *] Detect=HKCU\Software\eM Client FileKey1=%AppData%\eM Client\Logs|* Tags=ccinternet ID=eM Client * Author=Winapp2.ini Project [Email Address Collector *] DetectFile=%AppData%\DS Development\EAC FileKey1=%AppData%\DS Development\EAC|*.log Tags=ccinternet ID=Email Address Collector * Author=Winapp2.ini Project [EmailTray *] Detect=HKCU\Software\EmailTray FileKey1=%UserProfile%\AppData\LocalLow\EmailTray|*.log|RECURSE Tags=ccutil ID=EmailTray * Author=Winapp2.ini Project [EMCO Software *] DetectFile=%ProgramData%\EMCO FileKey1=%ProgramData%\EMCO\Setup|*|REMOVESELF Tags=ccutil ID=EMCO Software * Author=Winapp2.ini Project [EmEditor *] Detect=HKCU\Software\EmSoft\EmEditor v3 RegKey1=HKCU\Software\EmSoft\EmEditor v3\Recent File List RegKey2=HKCU\Software\EmSoft\EmEditor v3\Recent Folder List RegKey3=HKCU\Software\EmSoft\EmEditor v3\Recent Font List Tags=ccutil ID=EmEditor * Author=Winapp2.ini Project [Empire Earth *] DetectFile=%ProgramFiles%\Empire Earth FileKey1=%ProgramFiles%\Empire Earth|*Error.log Tags=ccapps ID=Empire Earth * Author=Winapp2.ini Project [Emsisoft Emergency Kit *] DetectFile=%SystemDrive%\EEK FileKey1=%SystemDrive%\EEK\Logs|* Tags=ccutil ID=Emsisoft Emergency Kit * Author=Winapp2.ini Project [Emsisoft HiJackFree *] Detect=HKLM\Software\Emsi Software GmbH\a-squared HiJackFree FileKey1=%ProgramFiles%\Emsisoft HiJackFree|*.old FileKey2=%ProgramFiles%\Emsisoft HiJackFree\Logs|* Tags=ccutil ID=Emsisoft HiJackFree * Author=Winapp2.ini Project [eMule *] Detect=HKCU\Software\eMule FileKey1=%LocalAppData%\eMule\config|*.bak;*.old FileKey2=%LocalAppData%\eMule\logs|* FileKey3=%ProgramData%\eMule\config|*.bak;*.old FileKey4=%ProgramData%\eMule\logs|* FileKey5=%ProgramFiles%\eMule\config|*.bak;*.old FileKey6=%ProgramFiles%\eMule\logs|* Tags=ccinternet ID=eMule * Author=Winapp2.ini Project [Encryption Xpert *] Detect=HKCU\Software\Enplase Research\Encryption Xpert RegKey1=HKCU\Software\Enplase Research\Encryption Xpert\Settings|LastFile Tags=ccutil ID=Encryption Xpert * Author=Winapp2.ini Project [Endless Legend *] DetectFile=%UserProfile%\Documents\Endless Legend FileKey1=%UserProfile%\Documents\Endless Legend\Temporary Files|*|RECURSE Tags=ccapps ID=Endless Legend * Author=Winapp2.ini Project [Endless Space *] DetectFile=%UserProfile%\Documents\Endless Space* FileKey1=%UserProfile%\Documents\Endless Space*\Temporary Files|*.html Tags=ccapps ID=Endless Space * Author=Winapp2.ini Project [EndNote X6 *] Detect=HKLM\Software\ISI ResearchSoft\EndNote FileKey1=%AppData%\EndNote|*.16;*.log FileKey2=%CommonProgramFiles%\Risxtd|*.LOG;*.txt FileKey3=%ProgramData%\Thomson.ResearchSoft.Installers|*|REMOVESELF FileKey4=%ProgramFiles%\EndNote X6\Product-Support\ThirdParty\Apache2|NOTICE FileKey5=%ProgramFiles%\EndNote*|*.txt FileKey6=%UserProfile%\Documents\My EndNote Library.Data\Trash|*|RECURSE Tags=ccapps ID=EndNote X6 * Author=Winapp2.ini Project [EnhanceMy XP/Vista/Se7en/8 *] DetectFile=%AppData%\SeriousBit\EnhanceMy* FileKey1=%AppData%\SeriousBit\EnhanceMy*|Logs.txt FileKey2=%AppData%\SeriousBit\EnhanceMy*\Backups|*|RECURSE Tags=ccutil ID=EnhanceMy XP/Vista/Se7en/8 * Author=Winapp2.ini Project [Enhanso *] DetectFile=%AppData%\SeriousBit\Enhanso FileKey1=%AppData%\SeriousBit\Enhanso|Logs.txt FileKey2=%AppData%\SeriousBit\Enhanso\Backups|*|RECURSE Tags=ccutil ID=Enhanso * Author=Winapp2.ini Project [Enpass *] DetectFile=%LocalAppData%\Sinew Software Systems Pvt Ltd\Enpass FileKey1=%AppData%\Sinew Software Systems Pvt Ltd\Enpass\Crashes|* FileKey2=%LocalAppData%\Sinew Software Systems Pvt Ltd\Enpass\cache|*|RECURSE Tags=ccutil ID=Enpass * Author=Winapp2.ini Project [Epic Games Launcher *] Detect=HKCU\Software\Epic Games\EpicGamesLauncher FileKey1=%LocalAppData%\CrashReportClient\Saved\Logs|*|REMOVESELF FileKey2=%LocalAppData%\Epic Games\Epic Online Services\EOSInstaller\Logs|* FileKey3=%LocalAppData%\EpicGames\eosoverlay|*.log FileKey4=%LocalAppData%\EpicGames\eosoverlay\BrowserCache|*|RECURSE FileKey5=%LocalAppData%\EpicGamesLauncher\Saved\Crashes|*|REMOVESELF FileKey6=%LocalAppData%\EpicGamesLauncher\Saved\Logs|*|REMOVESELF FileKey7=%LocalAppData%\EpicGamesLauncher\Saved\WebCache*|*|REMOVESELF FileKey8=%ProgramData%\Epic\EpicOnlineServices\EpicOnlineServicesHost\Logs|* FileKey9=%ProgramData%\Epic\EpicOnlineServices\InstallHelper\*Logs|*|RECURSE FileKey10=%ProgramData%\Epic\EpicOnlineServices\MainService\Logs|* FileKey11=%UserProfile%\AppData\LocalLow\EpicGamesLauncher\Logs|* Tags=ccapps ID=Epic Games Launcher * Author=Winapp2.ini Project [Epic Privacy Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Epic Privacy Browser Autoplay Preferences *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Autoplay Preferences * Author=Winapp2.ini Project [Epic Privacy Browser Bookmark Backups *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|Bookmarks.bak Tags=ccapps ID=Epic Privacy Browser Bookmark Backups * Author=Winapp2.ini Project [Epic Privacy Browser Bookmark Favicons *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|favicons* Tags=ccapps ID=Epic Privacy Browser Bookmark Favicons * Author=Winapp2.ini Project [Epic Privacy Browser Caches *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Epic Privacy Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Epic Privacy Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Epic Privacy Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Epic Privacy Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Epic Privacy Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Epic Privacy Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Epic Privacy Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Epic Privacy Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Epic Privacy Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Epic Privacy Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Epic Privacy Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Epic Privacy Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Epic Privacy Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Epic Privacy Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Epic Privacy Browser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Caches * Author=Winapp2.ini Project [Epic Privacy Browser Default App Handlers *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|PreferredApps Tags=ccapps ID=Epic Privacy Browser Default App Handlers * Author=Winapp2.ini Project [Epic Privacy Browser Download History *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Download History * Author=Winapp2.ini Project [Epic Privacy Browser DRM Data *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser DRM Data * Author=Winapp2.ini Project [Epic Privacy Browser Extension Cookies *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|Extension Cookies Tags=ccapps ID=Epic Privacy Browser Extension Cookies * Author=Winapp2.ini Project [Epic Privacy Browser Pinned Tabs *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data RegKey1=HKCU\Software\Epic Privacy Browser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Epic Privacy Browser Pinned Tabs * Author=Winapp2.ini Project [Epic Privacy Browser Privacy Sandbox *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Epic Privacy Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Epic Privacy Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Epic Privacy Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Epic Privacy Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Privacy Sandbox * Author=Winapp2.ini Project [Epic Privacy Browser Progressive Web Apps *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Progressive Web Apps * Author=Winapp2.ini Project [Epic Privacy Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|Login Data* Tags=ccapps ID=Epic Privacy Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Epic Privacy Browser Security & Threat Detection *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Epic Privacy Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Epic Privacy Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Epic Privacy Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Epic Privacy Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Epic Privacy Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Epic Privacy Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Epic Privacy Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Security & Threat Detection * Author=Winapp2.ini Project [Epic Privacy Browser Shopping Insights *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Epic Privacy Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Epic Privacy Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Shopping Insights * Author=Winapp2.ini Project [Epic Privacy Browser Storage Quota Manager *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|QuotaManager Tags=ccapps ID=Epic Privacy Browser Storage Quota Manager * Author=Winapp2.ini Project [Epic Privacy Browser Sync Data *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Sync Data * Author=Winapp2.ini Project [Epic Privacy Browser Telemetry *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\Application|debug.log FileKey2=%LocalAppData%\Epic Privacy Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Epic Privacy Browser\CrashReports|*|REMOVESELF FileKey4=%LocalAppData%\Epic Privacy Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey5=%LocalAppData%\Epic Privacy Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Epic Privacy Browser\User Data\*|*.log FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\*\DataSharing|*|REMOVESELF FileKey8=%LocalAppData%\Epic Privacy Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%LocalAppData%\Epic Privacy Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey11=%LocalAppData%\Epic Privacy Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey12=%LocalAppData%\Epic Privacy Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey13=%LocalAppData%\Epic Privacy Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey14=%LocalAppData%\Epic Privacy Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey15=%LocalAppData%\Epic Privacy Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey16=%LocalAppData%\Epic Privacy Browser\User Data\Crash Reports|*|REMOVESELF FileKey17=%LocalAppData%\Epic Privacy Browser\User Data\Crashpad|*|REMOVESELF FileKey18=%LocalAppData%\Epic Privacy Browser\User Data\Local Traces|*|REMOVESELF FileKey19=%LocalAppData%\Epic Privacy Browser\User Data\OriginTrials|*|REMOVESELF FileKey20=%LocalAppData%\Epic Privacy Browser\User Data\Stability|*|REMOVESELF FileKey21=%ProgramFiles%\Epic Privacy Browser\Application|debug.log FileKey22=%ProgramFiles%\Epic Privacy Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Epic Privacy Browser\BlBeacon|failed_count RegKey2=HKCU\Software\Epic Privacy Browser\BlBeacon|state RegKey3=HKCU\Software\Epic Privacy Browser\Installer|LastChecked RegKey4=HKCU\Software\Epic Privacy Browser\StabilityMetrics Tags=ccapps ID=Epic Privacy Browser Telemetry * Author=Winapp2.ini Project [Epic Privacy Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Epic Privacy Browser Web Browsing Cookies * Author=Winapp2.ini Project [Epic Privacy Browser Web Browsing History *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Epic Privacy Browser Web Browsing History * Author=Winapp2.ini Project [Epic Privacy Browser Web Browsing Session *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Web Browsing Session * Author=Winapp2.ini Project [Epic Privacy Browser Web Storage *] DetectFile=%LocalAppData%\Epic Privacy Browser\User Data FileKey1=%LocalAppData%\Epic Privacy Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Epic Privacy Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Epic Privacy Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Epic Privacy Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Epic Privacy Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Epic Privacy Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Epic Privacy Browser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Epic Privacy Browser Web Storage * Author=Winapp2.ini Project [Epson *] Detect=HKCU\Software\EPSON DetectFile=%AppData%\com.epson.printlayout FileKey1=%AppData%\com.epson.printlayout\Local Store\#SharedObjects|*|RECURSE FileKey2=%AppData%\com.epson.printlayout\Local Store\tmpImageFolder|* FileKey3=%AppData%\com.epson.printlayout\Local Store\tmpPageFolder|* FileKey4=%AppData%\EPSON\Epson_Windows_Installer\EPSON*|*.log FileKey5=%AppData%\Epson\FAX Utility\FAXLOG|* Tags=ccapps ID=Epson * Author=Winapp2.ini Project [Eraser *] Detect=HKCU\Software\Heidi Computers Ltd\Eraser\5.5 FileKey1=%ProgramFiles%\Eraser*|schedlog.txt Tags=ccutil ID=Eraser * Author=Winapp2.ini Project [ESET *] Detect=HKLM\Software\ESET\ESET Security FileKey1=%ProgramData%\ESET\ESET*\Logs|*|RECURSE FileKey2=%ProgramData%\ESET\ESET*\Oldfiles|*|RECURSE FileKey3=%ProgramData%\ESET\ESET*\Updfiles|*|REMOVESELF FileKey4=%ProgramFiles%\ESET\ESET Online Scanner|log.txt FileKey5=%ProgramFiles%\ESET\ESET Online Scanner\Modules\data\updfiles\temp|* FileKey6=%ProgramFiles%\ESET\ESET Online Scanner\Quarantine|* Tags=ccapps ID=ESET * Author=Winapp2.ini Project [eSignaDesktop *] DetectFile=%AppData%\Indenova\eSigna Desktop FileKey1=%AppData%\Indenova\eSigna Desktop\log|* Tags=ccutil ID=eSignaDesktop * Author=Winapp2.ini Project [eSobi *] DetectFile=%AppData%\eSobi FileKey1=%AppData%\eSobi\*\temp|*|RECURSE Tags=ccinternet ID=eSobi * Author=Winapp2.ini Project [Essential NetTools 3 *] Detect=HKCU\Software\ENT3 DetectFile=%ProgramFiles%\Essential NetTools FileKey1=%ProgramFiles%\Essential NetTools\LOGS|* FileKey2=%UserProfile%\Documents\EssNetTools\LOGS|*.csv RegKey1=HKCU\Software\ENT3\Recent Tags=ccinternet ID=Essential NetTools 3 * Author=Winapp2.ini Project [EssentialPIM *] Detect=HKLM\Software\clients\mail\essentialpim pro DetectFile=%AppData%\EssentialPIM FileKey1=%AppData%\EssentialPIM*\Logs|* Tags=ccapps ID=EssentialPIM * Author=Winapp2.ini Project [Esumsoft POP Peeper *] DetectFile=%AppData%\POP Peeper FileKey1=%AppData%\POP Peeper|*.bak;Search.db FileKey2=%AppData%\POP Peeper\PluginData\Profile\Cache|*.png Tags=ccinternet ID=Esumsoft POP Peeper * Author=Winapp2.ini Project [Etherscan Password Sniffer *] Detect=HKCU\Software\Win Sniffer\Etherscan Password Sniffer RegKey1=HKCU\Software\Win Sniffer\Etherscan Password Sniffer\Recent File List RegKey2=HKCU\Software\Win Sniffer\Etherscan Password Sniffer\Recent Item List Tags=ccinternet ID=Etherscan Password Sniffer * Author=Winapp2.ini Project [Etwok NetSpot *] DetectFile=%AppData%\Etwok\NetSpot FileKey1=%AppData%\Etwok\NetSpot Installer\Logs|* FileKey2=%AppData%\Etwok\NetSpot\Logs|* Tags=ccutil ID=Etwok NetSpot * Author=Winapp2.ini Project [EurekaLog *] DetectFile=%AppData%\Neos Eureka S.r.l\EurekaLog FileKey1=%AppData%\Neos Eureka S.r.l\EurekaLog|*|RECURSE RegKey1=HKCU\Software\EurekaLab\EurekaLog Tags=ccutil ID=EurekaLog * Author=Winapp2.ini Project [Euro Truck Simulator *] DetectFile1=%UserProfile%\Documents\ETS2MP DetectFile2=%UserProfile%\Documents\Euro Truck Simulator* FileKey1=%UserProfile%\Documents\ETS2MP\logs|*.log FileKey2=%UserProfile%\Documents\Euro Truck Simulator*|*.crash;*.log;*log.txt FileKey3=%UserProfile%\Documents\Euro Truck Simulator*\cache|*.navcache FileKey4=%UserProfile%\Documents\Euro Truck Simulator*\online\lscr_cache|*.jpg Tags=ccapps ID=Euro Truck Simulator * Author=Winapp2.ini Project [Euro Truck Simulator Profile Backups *] DetectFile1=%UserProfile%\Documents\ETS2MP DetectFile2=%UserProfile%\Documents\Euro Truck Simulator* FileKey1=%UserProfile%\Documents\Euro Truck Simulator*|backups.txt FileKey2=%UserProfile%\Documents\Euro Truck Simulator*\profiles*.bak|*|REMOVESELF Tags=ccapps ID=Euro Truck Simulator Profile Backups * Author=Winapp2.ini Project [EuroSYSTEMS CoCut Professional 2011 *] Detect=HKCU\Software\EuroSYSTEMS\CoCut Professional 2011 FileKey1=%AppData%\EUROSYSTEMS\CoCut Professional 2011 15|*.bak FileKey2=%ProgramFiles%\EUROSYSTEMS\CoCut Professional 2011|*.bak;*.log;*.tmp FileKey3=%ProgramFiles%\EUROSYSTEMS\CoCut Professional 2011\log|* Tags=ccapps ID=EuroSYSTEMS CoCut Professional 2011 * Author=Winapp2.ini Project [EuroSYSTEMS SmartCut Pro *] Detect=HKCU\Software\EuroSYSTEMS FileKey1=%ProgramFiles%\EUROSYSTEMS\SmartCut Pro|*.bak;*.tmp FileKey2=%ProgramFiles%\EUROSYSTEMS\SmartCut Pro\Temp|*|RECURSE Tags=ccapps ID=EuroSYSTEMS SmartCut Pro * Author=Winapp2.ini Project [Eusing Cleaner *] DetectFile=%AppData%\Eusing\Eusing Cleaner FileKey1=%AppData%\Eusing\Eusing Cleaner\Backup|*.reg Tags=ccutil ID=Eusing Cleaner * Author=Winapp2.ini Project [Eusing Free Registry Cleaner *] DetectFile=%AppData%\Eusing\Free Registry Cleaner FileKey1=%AppData%\Eusing\Free Registry Cleaner\Backup|*.reg Tags=ccutil ID=Eusing Free Registry Cleaner * Author=Winapp2.ini Project [Eusing Launcher *] DetectFile=%AppData%\Eusing\Eusing Launcher FileKey1=%AppData%\Eusing\Eusing Launcher|*.bak Tags=ccutil ID=Eusing Launcher * Author=Winapp2.ini Project [EVE Online *] Detect=HKCU\Software\CCP FileKey1=%AppData%\EVEMon|*.bak FileKey2=%LocalAppData%\CCP\EVE|history.txt FileKey3=%UserProfile%\Documents\EVE\Logs|*|RECURSE Tags=ccapps ID=EVE Online * Author=Winapp2.ini Project [Evernote *] DetectFile=%UserProfile%\AppData\LocalLow\Evernote FileKey1=%LocalAppData%\Evernote\Evernote\AutoUpdate|*.exe FileKey2=%LocalAppData%\Evernote\Evernote\Updates|* FileKey3=%UserProfile%\AppData\LocalLow\Evernote\Evernote\Logs|* Tags=ccapps ID=Evernote * Author=Winapp2.ini Project [Everyday Genius: SquareLogic *] Detect=HKCU\Software\Valve\Steam\Apps\32150 DetectFile=%AppData%\SquareLogic FileKey1=%AppData%\SquareLogic|*.log Tags=ccapps ID=Everyday Genius: SquareLogic * Author=Winapp2.ini Project [Everything *] DetectFile1=%AppData%\Everything DetectFile2=%ProgramFiles%\Everything FileKey1=%AppData%\Everything|*.csv;*.tmp;*.txt FileKey2=%LocalAppData%\EverythingToolbar|history.xml FileKey3=%ProgramFiles%\Everything|*.csv;*.tmp;*.txt ExcludeKey1=FILE|%AppData%\Everything\|Filters.csv ExcludeKey2=FILE|%ProgramFiles%\Everything\|Filters.csv Tags=ccutil ID=Everything * Author=Winapp2.ini Project [Evince Document Viewer *] DetectFile=%LocalAppData%\Apps\Evince-* FileKey1=%UserProfile%\.gnome*\evince|ev-metadata.xml Tags=ccapps ID=Evince Document Viewer * Author=Winapp2.ini Project [ExactFile *] Detect=HKCU\Software\ExactFile RegKey1=HKCU\Software\ExactFile|CDLastFolderSelected RegKey2=HKCU\Software\ExactFile\FormMain_Properties|EditCDFolderOutputFileName.Text RegKey3=HKCU\Software\ExactFile\FormMain_Properties|EditCDFolderPath.Text RegKey4=HKCU\Software\ExactFile\FormMain_Properties|LabeledEditsfcFile.Text RegKey5=HKCU\Software\ExactFile\FormMain_Properties|LabeledEditTDBaseFolder.Text RegKey6=HKCU\Software\ExactFile\FormMain_Properties|LabeledEditTestDigestFile.Text RegKey7=HKCU\Software\ExactFile\FormMain_Properties|LabeledEditTFPath.Text Tags=ccutil ID=ExactFile * Author=Winapp2.ini Project [ExamDiff Pro *] Detect=HKCU\Software\PrestoSoft\ExamDiff Pro RegKey1=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Binary Find Strings RegKey2=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Center Merged Files RegKey3=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Merged Files RegKey4=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Sessions Tags=ccutil ID=ExamDiff Pro * Author=Winapp2.ini Project [ExeIco *] Detect=HKCU\Software\XTZY\ExeIcon FileKey1=%ProgramFiles%\ExeIco|*.log Tags=ccutil ID=ExeIco * Author=Winapp2.ini Project [Exif Tag Remover *] Detect=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover RegKey1=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover|sLastAddDir RegKey2=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover|sLastDir Tags=ccutil ID=Exif Tag Remover * Author=Winapp2.ini Project [Exifer *] Detect=HKCU\Software\Exifer RegKey1=HKCU\Software\Exifer\Browse\History Tags=ccutil ID=Exifer * Author=Winapp2.ini Project [ExifPro *] Detect=HKCU\Software\MKowalski\ExifPro FileKey1=%ProgramData%\MiK\ExifPro|Cache* RegKey1=HKCU\Software\MKowalski\ExifPro\1.0\Browser\View 0|LastPath RegKey2=HKCU\Software\MKowalski\ExifPro\1.0\HTMLAlbumGen\RecentDestPaths RegKey3=HKCU\Software\MKowalski\ExifPro\1.0\RecentPaths RegKey4=HKCU\Software\MKowalski\ExifPro\1.0\ResizeDlg\RecentDestPaths Tags=ccutil ID=ExifPro * Author=Winapp2.ini Project [Exodus *] Detect=HKCU\Software\Jabber\Exodus FileKey1=%AppData%\Exodus\avatars|cache.xml Tags=ccinternet ID=Exodus * Author=Winapp2.ini Project [Exodus Chat Logs *] Detect=HKCU\Software\Jabber\Exodus FileKey1=%UserProfile%\Documents\Exodus-Logs|*|RECURSE Tags=ccinternet ID=Exodus Chat Logs * Author=Winapp2.ini Project [ExpertGHID *] Detect1=HKCU\Software\ExpertGHID Detect2=HKCU\Software\Local AppWizard-Generated Applications\ExpertGHID RegKey1=HKCU\Software\ExpertGHID\Recent File List RegKey2=HKCU\Software\Local AppWizard-Generated Applications\ExpertGHID\Recent File List Tags=ccapps ID=ExpertGHID * Author=Winapp2.ini Project [ExplorerXP *] DetectFile=%ProgramFiles%\ExplorerXP FileKey1=%ProgramFiles%\ExplorerXP|DirSizeCache.dat Tags=ccutil ID=ExplorerXP * Author=Winapp2.ini Project [Exportizer *] Detect=HKCU\Software\Vitaliy Levchenko\Exportizer 5 RegKey1=HKCU\Software\Vitaliy Levchenko\Exportizer 5\Settings|LastExt RegKey2=HKLM\Software\ODBC\Temporary (volatile) Jet DSN for process 0x5ac Thread 0x3d8 DBC 0x2bd1e84 Xbase|DefaultDir RegKey3=HKLM\Software\ODBC\Temporary (volatile) Jet DSN for process 0x858 Thread 0xfb0 DBC 0x2ca3a74 Paradox|DefaultDir Tags=ccutil ID=Exportizer * Author=Winapp2.ini Project [Express Photo Digital *] DetectFile=%ProgramFiles%\Express Digital\ExpressPhoto* FileKey1=%ProgramFiles%\Express Digital\ExpressPhoto*|*.log Tags=ccmedia ID=Express Photo Digital * Author=Winapp2.ini Project [EZ Backup Ultimate *] Detect=HKCU\Software\Perception\EZ Backup Ultimate FileKey1=%AppData%\EZ Backup Ultimate|lastlog.html Tags=ccutil ID=EZ Backup Ultimate * Author=Winapp2.ini Project [F-Secure *] DetectFile=%LocalAppData%\F-Secure FileKey1=%LocalAppData%\F-Secure\Antivirus\ScanningReports|scan_report*.html FileKey2=%LocalAppData%\F-Secure\Log|*|RECURSE FileKey3=%UserProfile%\AppData\LocalLow\F-Secure\Log|*|RECURSE Tags=ccutil ID=F-Secure * Author=Winapp2.ini Project [F-Secure Password Manager *] Detect=HKCU\Software\F-Secure FileKey1=%LocalAppData%\F-Secure\Pwmgr|*.log FileKey2=%LocalAppData%\F-Secure\Pwmgr\LocalStorage|*|RECURSE Tags=ccapps ID=F-Secure Password Manager * Author=Winapp2.ini Project [Facebook *] DetectFile=%LocalAppData%\Packages\FACEBOOK.FACEBOOK_8xx8rvfyw5nnt FileKey1=%LocalAppData%\Packages\FACEBOOK.FACEBOOK_8xx8rvfyw5nnt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\FACEBOOK.FACEBOOK_8xx8rvfyw5nnt\Settings|*.log* FileKey3=%LocalAppData%\Packages\FACEBOOK.FACEBOOK_8xx8rvfyw5nnt\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\FACEBOOK.FACEBOOK_8xx8rvfyw5nnt\TempState|*|REMOVESELF Tags=ccinternet ID=Facebook * Author=Winapp2.ini Project [Facebook Messenger *] DetectFile=%LocalAppData%\Facebook\Messenger FileKey1=%LocalAppData%\Facebook\Messenger|*.log|RECURSE FileKey2=%LocalAppData%\Facebook\Messenger\fbmessenger.cache|data_*;index Tags=ccinternet ID=Facebook Messenger * Author=Winapp2.ini Project [FACEIT Client *] DetectFile=%AppData%\FACEIT FileKey1=%AppData%\FACEIT\*Cache|* FileKey2=%AppData%\FACEIT\FACEIT Client|debug.log Tags=ccapps ID=FACEIT Client * Author=Winapp2.ini Project [Faceprov *] Detect=HKCU\Software\Lenovo FileKey1=%SystemDrive%|Faceprov.* Tags=ccmedia ID=Faceprov * Author=Winapp2.ini Project [Factorio *] Detect=HKCU\Software\Valve\Steam\Apps\427520 FileKey1=%AppData%\Factorio|*log Tags=ccapps ID=Factorio * Author=Winapp2.ini Project [Fallout Shelter *] DetectFile=%LocalAppData%\FalloutShelter FileKey1=%LocalAppData%\FalloutShelter|*.bkp;*.log Tags=ccapps ID=Fallout Shelter * Author=Winapp2.ini Project [Famatech Advanced IP Scanner *] Detect1=HKCU\Software\famatech\Advanced IP Scanner Detect2=HKCU\Software\famatech\advanced_ip_scanner DetectFile=%ProgramFiles%\Advanced IP Scanner* FileKey1=%ProgramFiles%\Advanced IP Scanner*|*.cnt;*.GID;*.msi FileKey2=%UserProfile%|advanced_ip_scanner_*.bin RegKey1=HKCU\Software\famatech\Advanced IP Scanner\LastLoadedListName RegKey2=HKCU\Software\famatech\advanced_ip_scanner\State|IpRangesMruList RegKey3=HKCU\Software\famatech\advanced_ip_scanner\State|LastRangeUsed RegKey4=HKCU\Software\famatech\advanced_ip_scanner\State|SearchMruList RegKey5=HKLM\Software\famatech\advanced_ip_scanner|locale_timestamp Tags=ccutil ID=Famatech Advanced IP Scanner * Author=Winapp2.ini Project [Famatech Advanced Port Scanner *] Detect1=HKCU\Software\famatech\Advanced Port Scanner Detect2=HKCU\Software\famatech\advanced_port_scanner FileKey1=%ProgramFiles%\Advanced Port Scanner|*.cnt;*.GID;*.msi FileKey2=%UserProfile%|advanced_port_scanner_*.bin RegKey1=HKCU\Software\famatech\Advanced Port Scanner\LastUsedIPsListPath RegKey2=HKCU\Software\famatech\Advanced Port Scanner\LastUsedPortsListPath RegKey3=HKCU\Software\famatech\advanced_port_scanner\State|details_save_path RegKey4=HKCU\Software\famatech\advanced_port_scanner\State|IpRangesMruList RegKey5=HKCU\Software\famatech\advanced_port_scanner\State|LastPortsUsed RegKey6=HKCU\Software\famatech\advanced_port_scanner\State|LastRangeUsed RegKey7=HKCU\Software\famatech\advanced_port_scanner\State|PortsMruList RegKey8=HKCU\Software\famatech\advanced_port_scanner\State|SearchMruList RegKey9=HKLM\Software\famatech\advanced_port_scanner|locale_timestamp Tags=ccutil ID=Famatech Advanced Port Scanner * Author=Winapp2.ini Project [Fantasy Wars *] Detect=HKCU\Software\Valve\Steam\Apps\63900 FileKey1=%ProgramFiles%\Steam\Steamapps\common\Fantasy Wars|gui_log.txt Tags=ccapps ID=Fantasy Wars * Author=Winapp2.ini Project [FAR Manager *] Detect1=HKCU\Software\Far Detect2=HKCU\Software\Far2 Detect3=HKCU\Software\Far18 RegKey1=HKCU\Software\Far\Editor\LastPositions RegKey2=HKCU\Software\Far\SavedDialogHistory RegKey3=HKCU\Software\Far\SavedDialogHistory\PersPath RegKey4=HKCU\Software\Far\SavedFolderHistory RegKey5=HKCU\Software\Far\SavedHistory RegKey6=HKCU\Software\Far\SavedViewHistory RegKey7=HKCU\Software\Far\Viewer\LastPositions RegKey8=HKCU\Software\Far2\Editor\LastPositions RegKey9=HKCU\Software\Far2\SavedDialogHistory RegKey10=HKCU\Software\Far2\SavedDialogHistory\PersPath RegKey11=HKCU\Software\Far2\SavedFolderHistory RegKey12=HKCU\Software\Far2\SavedHistory RegKey13=HKCU\Software\Far2\SavedViewHistory RegKey14=HKCU\Software\Far2\Viewer\LastPositions RegKey15=HKCU\Software\Far18\Editor\LastPositions RegKey16=HKCU\Software\Far18\SavedDialogHistory RegKey17=HKCU\Software\Far18\SavedDialogHistory\PersPath RegKey18=HKCU\Software\Far18\SavedFolderHistory RegKey19=HKCU\Software\Far18\SavedHistory RegKey20=HKCU\Software\Far18\SavedViewHistory RegKey21=HKCU\Software\Far18\Viewer\LastPositions Tags=ccapps ID=FAR Manager * Author=Winapp2.ini Project [Farming Simulator *] Detect=HKLM\Software\SCS Software FileKey1=%UserProfile%\Documents\My Games\FarmingSimulator*|*.txt FileKey2=%UserProfile%\Documents\My Games\FarmingSimulator*\pdlc*|*.dlc|REMOVESELF FileKey3=%UserProfile%\Documents\My Games\FarmingSimulator*\shader_cache|*.shc;*.xml|REMOVESELF Tags=ccapps ID=Farming Simulator * Author=Winapp2.ini Project [Farming Simulator Old AutoSaves *] Detect=HKLM\Software\SCS Software FileKey1=%UserProfile%\Documents\My Games\FarmingSimulator*\savegame*|*|REMOVESELF ExcludeKey1=PATH|%UserProfile%\Documents\My Games\FarmingSimulator*\savegame1\|* ExcludeKey2=PATH|%UserProfile%\Documents\My Games\FarmingSimulator*\savegameBackup\|* Tags=ccapps ID=Farming Simulator Old AutoSaves * Author=Winapp2.ini Project [Fast Clean Pro *] DetectFile=%LocalAppData%\Fastcleanpro FileKey1=%LocalAppData%\Fastcleanpro\logs|* Tags=ccutil ID=Fast Clean Pro * Author=Winapp2.ini Project [FastCopy *] DetectFile=%AppData%\FastCopy FileKey1=%AppData%\FastCopy|*.log Tags=ccutil ID=FastCopy * Author=Winapp2.ini Project [FastStone Capture *] Detect=HKCU\Software\FastStone Capture DetectFile=%AppData%\FastStone\FSC FileKey1=%AppData%\FastStone\FSC|*.bak;fsc.db FileKey2=%LocalAppData%\FastStone\FSC|fsc.db FileKey3=%LocalAppData%\FastStone\FSC\EditWith|* FileKey4=%LocalAppData%\FastStone\FSC\Email|* FileKey5=%LocalAppData%\FastStone\FSC\FTP|* RegKey1=HKCU\Software\FastStone|_GrbId RegKey2=HKCU\Software\FastStone|_LastClipPlayed RegKey3=HKCU\Software\FastStone|_LastRecordingFileName RegKey4=HKCU\Software\FastStone\APP.FSRecorder\Global|_GrbId RegKey5=HKCU\Software\FastStone\APP.FSRecorder\Global|_LastClipPlayed RegKey6=HKCU\Software\FastStone\APP.FSRecorder\Global|_LastRecordingFileName Tags=ccutil ID=FastStone Capture * Author=Winapp2.ini Project [FastStone Image Viewer *] Detect=HKLM\Software\FastStone Image Viewer FileKey1=%AppData%\FastStone\FSIV|FSViewer.db Tags=ccmedia ID=FastStone Image Viewer * Author=Winapp2.ini Project [FatBatt *] Detect=HKCU\Software\MiserWare, Inc.\FatBatt FileKey1=%ProgramData%\MiserWare\FatBatt\logs|*.log Tags=ccutil ID=FatBatt * Author=Winapp2.ini Project [FBReader *] Detect=HKCU\Software\FBReader DetectFile=%ProgramFiles%\FBReader FileKey1=%UserProfile%\.FBReader|books.db;network.db;state.db Tags=ccapps ID=FBReader * Author=Winapp2.ini Project [FCleaner *] Detect=HKCU\Software\FTweak\FCleaner RegKey1=HKCU\Software\FTweak\FCleaner|programfile Tags=ccutil ID=FCleaner * Author=Winapp2.ini Project [FEZ *] Detect=HKCU\Software\Valve\Steam\Apps\224760 FileKey1=%AppData%\FEZ|Debug Log.txt Tags=ccapps ID=FEZ * Author=Winapp2.ini Project [FFsplit *] DetectFile=%ProgramFiles%\FFsplit FileKey1=%AppData%\FFsplit|FFsourceLog.txt FileKey2=%AppData%\FFsplit\logs|* Tags=ccmedia ID=FFsplit * Author=Winapp2.ini Project [FIGHTERStools *] Detect=HKCU\Software\Fighters FileKey1=%AppData%\Fighters\*\Logs|*.log;*log.txt FileKey2=%ProgramData%\Common Toolkit Suite\Tools\Logs|*.log FileKey3=%ProgramData%\Fighters\*\Logs|*.log Tags=ccutil ID=FIGHTERStools * Author=Winapp2.ini Project [File Renamer Basic *] DetectFile=%LocalAppData%\File Renamer Basic FileKey1=%LocalAppData%\File Renamer Basic|*log*.txt Tags=ccutil ID=File Renamer Basic * Author=Winapp2.ini Project [File Shredder *] Detect=HKCU\Software\Shredder RegKey1=HKCU\Software\Shredder\{FF14D9EE-48EB-4873-80AC-8E224BEE5823} Tags=ccutil ID=File Shredder * Author=Winapp2.ini Project [File Type Doctor *] Detect=HKCU\Software\Creative Element\File Type Doctor RegKey1=HKCU\Software\Creative Element\File Type Doctor|LastSelected Tags=ccutil ID=File Type Doctor * Author=Winapp2.ini Project [FileCleaner *] Detect=HKCU\Software\WebMinds, Inc\FileCleaner FileKey1=%AppData%\FileCleaner|log.txt Tags=ccutil ID=FileCleaner * Author=Winapp2.ini Project [FileLocator Pro *] Detect=HKCU\Software\Mythicsoft\FileLocatorPro RegKey1=HKCU\Software\Mythicsoft\FileLocatorPro\RecentContains RegKey2=HKCU\Software\Mythicsoft\FileLocatorPro\RecentFileName RegKey3=HKCU\Software\Mythicsoft\FileLocatorPro\RecentFolders Tags=ccutil ID=FileLocator Pro * Author=Winapp2.ini Project [FileMind QuickFix *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{92789900-80D0-4B61-B742-7897964A69AB}_is1 FileKey1=%ProgramFiles%\Metability Software\FileMindQuickFix|*.log|RECURSE Tags=ccutil ID=FileMind QuickFix * Author=Winapp2.ini Project [FileSearchEX *] Detect=HKCU\Software\GOFF Concepts\FileSearchEX RegKey1=HKCU\Software\GOFF Concepts\FileSearchEX|Sys_ContainingTextHistory RegKey2=HKCU\Software\GOFF Concepts\FileSearchEX|Sys_LookinHistory RegKey3=HKCU\Software\GOFF Concepts\FileSearchEX|Sys_SearchHistory Tags=ccutil ID=FileSearchEX * Author=Winapp2.ini Project [FileZilla *] Detect=HKLM\Software\FileZilla Client FileKey1=%ProgramFiles%\FileZilla FTP Client|*.tmp Tags=ccinternet ID=FileZilla * Author=Winapp2.ini Project [Final Factory *] DetectFile=%UserProfile%\AppData\LocalLow\Never Games\FinalFactory FileKey1=%UserProfile%\AppData\LocalLow\Never Games\FinalFactory|*.log FileKey2=%UserProfile%\AppData\LocalLow\Never Games\FinalFactory\backtrace|*|RECURSE FileKey3=%UserProfile%\AppData\LocalLow\Never Games\FinalFactory\Unity|*|REMOVESELF Tags=ccapps ID=Final Factory * Author=Winapp2.ini Project [FINAM Forex Terminal *] DetectFile=%ProgramFiles%\FINAM Forex Terminal FileKey1=%ProgramFiles%\FINAM Forex Terminal\logs|* FileKey2=%ProgramFiles%\FINAM Forex Terminal\MQL*\Logs|* FileKey3=%ProgramFiles%\FINAM Forex Terminal\tester\logs|* Tags=ccapps ID=FINAM Forex Terminal * Author=Winapp2.ini Project [Find Junk Files *] DetectFile=%ProgramFiles%\Find Junk Files FileKey1=%ProgramFiles%\Find Junk Files\System\logs|*|RECURSE Tags=ccutil ID=Find Junk Files * Author=Winapp2.ini Project [Finders Keepers *] Detect=HKCU\Software\Yadu Digital\Finders Keepers RegKey1=HKCU\Software\Yadu Digital\Finders Keepers\Options\General|Last file Tags=ccapps ID=Finders Keepers * Author=Winapp2.ini Project [Finetuneapps AI Text Scanner *] DetectFile=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c FileKey1=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c\LocalState\OcrScannerApp\RecentDocuments|*|RECURSE FileKey3=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c\Settings|*.log* FileKey4=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\7549finetuneapps.DocumentScannerOCRPDFImagetoText_6a8h0qfxmjx9c\TempState|*|REMOVESELF Tags=ccapps ID=Finetuneapps AI Text Scanner * Author=Winapp2.ini Project [Firebird Project *] Detect=HKLM\Software\Firebird Project FileKey1=%ProgramFiles%\Firebird\Firebird_2_1|*.log Tags=ccmedia ID=Firebird Project * Author=Winapp2.ini Project [Fishdom H2O *] DetectFile=%AppData%\Playrix Entertainment\Fishdom H2O Final FileKey1=%AppData%\Playrix Entertainment\Fishdom H2O Final|log.html Tags=ccapps ID=Fishdom H2O * Author=Winapp2.ini Project [FixCleaner *] DetectFile=%AppData%\FixCleaner FileKey1=%AppData%\FixCleaner\Logs|* Tags=ccutil ID=FixCleaner * Author=Winapp2.ini Project [FL Studio *] DetectFile=%ProgramFiles%\Image-Line\FL Studio* FileKey1=%ProgramFiles%\Image-Line\Downloader|*.log Tags=ccmedia ID=FL Studio * Author=Winapp2.ini Project [Flame Keeper *] DetectFile=%UserProfile%\AppData\LocalLow\Untold Tales\Flame Keeper FileKey1=%UserProfile%\AppData\LocalLow\Untold Tales\Flame Keeper|*.log Tags=ccapps ID=Flame Keeper * Author=Winapp2.ini Project [FlashFXP *] Detect=HKLM\Software\FlashFXP FileKey1=%ProgramFiles%\FlashFXP|quick.dat Tags=ccinternet ID=FlashFXP * Author=Winapp2.ini Project [FlashIntegro *] DetectFile=%ProgramFiles%\FlashIntegro FileKey1=%AppData%\FlashIntegro\filecache|*.cache FileKey2=%AppData%\ScreenRecorder|*.log FileKey3=%AppData%\VideoCapture|*.log FileKey4=%AppData%\VideoEditor|*.log Tags=ccmedia ID=FlashIntegro * Author=Winapp2.ini Project [FlashPeak SlimJet Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|*Web Data FileKey2=%LocalAppData%\Slimjet\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Slimjet\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [FlashPeak SlimJet Autoplay Preferences *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Autoplay Preferences * Author=Winapp2.ini Project [FlashPeak SlimJet Bookmark Backups *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|Bookmarks.bak Tags=ccapps ID=FlashPeak SlimJet Bookmark Backups * Author=Winapp2.ini Project [FlashPeak SlimJet Bookmark Favicons *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|favicons* Tags=ccapps ID=FlashPeak SlimJet Bookmark Favicons * Author=Winapp2.ini Project [FlashPeak SlimJet Caches *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Slimjet\User Data|Module Info Cache FileKey3=%LocalAppData%\Slimjet\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Slimjet\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Slimjet\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Slimjet\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Slimjet\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Slimjet\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Slimjet\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Slimjet\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Slimjet\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Slimjet\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Slimjet\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Slimjet\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Slimjet\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Slimjet\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Slimjet\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Slimjet\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Slimjet\User Data\Default\newtab\thumbnails|*|REMOVESELF FileKey20=%LocalAppData%\Slimjet\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Caches * Author=Winapp2.ini Project [FlashPeak SlimJet Default App Handlers *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|PreferredApps Tags=ccapps ID=FlashPeak SlimJet Default App Handlers * Author=Winapp2.ini Project [FlashPeak SlimJet Download History *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Slimjet\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Download History * Author=Winapp2.ini Project [FlashPeak SlimJet DRM Data *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Slimjet\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet DRM Data * Author=Winapp2.ini Project [FlashPeak SlimJet Extension Cookies *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|Extension Cookies Tags=ccapps ID=FlashPeak SlimJet Extension Cookies * Author=Winapp2.ini Project [FlashPeak SlimJet Pinned Tabs *] DetectFile=%LocalAppData%\Slimjet\User Data RegKey1=HKCU\Software\Slimjet\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=FlashPeak SlimJet Pinned Tabs * Author=Winapp2.ini Project [FlashPeak SlimJet Privacy Sandbox *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data|*first_party_sets* FileKey2=%LocalAppData%\Slimjet\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Slimjet\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Slimjet\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Slimjet\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Slimjet\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Slimjet\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Slimjet\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Privacy Sandbox * Author=Winapp2.ini Project [FlashPeak SlimJet Progressive Web Apps *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Progressive Web Apps * Author=Winapp2.ini Project [FlashPeak SlimJet Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|Login Data* Tags=ccapps ID=FlashPeak SlimJet Saved Usernames & Passwords * Author=Winapp2.ini Project [FlashPeak SlimJet Security & Threat Detection *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|DIPS* FileKey2=%LocalAppData%\Slimjet\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Slimjet\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Slimjet\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Slimjet\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Slimjet\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Slimjet\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Slimjet\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Slimjet\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Slimjet\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Slimjet\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Slimjet\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Security & Threat Detection * Author=Winapp2.ini Project [FlashPeak SlimJet Shopping Insights *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Slimjet\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Slimjet\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Slimjet\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Slimjet\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Shopping Insights * Author=Winapp2.ini Project [FlashPeak SlimJet Storage Quota Manager *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|QuotaManager Tags=ccapps ID=FlashPeak SlimJet Storage Quota Manager * Author=Winapp2.ini Project [FlashPeak SlimJet Sync Data *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Sync Data * Author=Winapp2.ini Project [FlashPeak SlimJet Telemetry *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\Application|debug.log FileKey2=%LocalAppData%\Slimjet\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Slimjet\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Slimjet\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Slimjet\User Data\*|*.log FileKey6=%LocalAppData%\Slimjet\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Slimjet\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Slimjet\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Slimjet\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Slimjet\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Slimjet\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Slimjet\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Slimjet\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Slimjet\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Slimjet\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Slimjet\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Slimjet\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Slimjet\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Slimjet\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Slimjet\Application|debug.log FileKey21=%ProgramFiles%\Slimjet\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Slimjet\BlBeacon|failed_count RegKey2=HKCU\Software\Slimjet\BlBeacon|state RegKey3=HKCU\Software\Slimjet\Installer|LastChecked RegKey4=HKCU\Software\Slimjet\StabilityMetrics Tags=ccapps ID=FlashPeak SlimJet Telemetry * Author=Winapp2.ini Project [FlashPeak SlimJet Web Browsing Cookies *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=FlashPeak SlimJet Web Browsing Cookies * Author=Winapp2.ini Project [FlashPeak SlimJet Web Browsing History *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=FlashPeak SlimJet Web Browsing History * Author=Winapp2.ini Project [FlashPeak SlimJet Web Browsing Session *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Slimjet\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Web Browsing Session * Author=Winapp2.ini Project [FlashPeak SlimJet Web Storage *] DetectFile=%LocalAppData%\Slimjet\User Data FileKey1=%LocalAppData%\Slimjet\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Slimjet\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Slimjet\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Slimjet\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Slimjet\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Slimjet\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Slimjet\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Slimjet\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=FlashPeak SlimJet Web Storage * Author=Winapp2.ini Project [Flashpoint Launcher *] DetectFile=%AppData%\Flashpoint-Launcher FileKey1=%AppData%\Flashpoint-Launcher|*.old;LOG;Network Persistent State|RECURSE FileKey2=%AppData%\Flashpoint-Launcher\*Cache|*|RECURSE FileKey3=%AppData%\Flashpoint-Launcher\blob_storage|*|RECURSE Tags=ccapps ID=Flashpoint Launcher * Author=Winapp2.ini Project [Flexibits Fantastical *] DetectFile=%LocalAppData%\Packages\FlexibitsInc.Fantastical_xhwyj10g4qjsr FileKey1=%LocalAppData%\Fantastical\Cache\WebView\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey2=%LocalAppData%\Fantastical\Cache\WebView\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey3=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey4=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\AutoFill*|*|REMOVESELF FileKey6=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Avatars|*|REMOVESELF FileKey7=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\CertificateRevocation|*|REMOVESELF FileKey8=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\CookieReadinessList|*|REMOVESELF FileKey9=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Crash Reports|*|REMOVESELF FileKey10=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Crashpad|*|REMOVESELF FileKey11=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Crowd Deny|*|REMOVESELF FileKey12=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey13=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\*Cache*|*|REMOVESELF FileKey14=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey15=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\blob_storage|*|REMOVESELF FileKey16=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey17=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey18=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey19=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey20=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\coupon_db|*|REMOVESELF FileKey21=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\DataSharing|*|REMOVESELF FileKey22=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\discount*_db|*|REMOVESELF FileKey23=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Download Service|*|REMOVESELF FileKey24=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Extension State|*|REMOVESELF FileKey25=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey26=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\File System|*|REMOVESELF FileKey27=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\GCM Store|*|REMOVESELF FileKey28=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey29=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey30=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey31=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\optimization*|*|REMOVESELF FileKey32=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey33=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey34=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey35=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey36=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Service Worker|*|REMOVESELF FileKey37=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Sessions|*|REMOVESELF FileKey38=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey39=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey40=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey41=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey42=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey43=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Sync Data|*|REMOVESELF FileKey44=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey45=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\Web Applications|*|REMOVESELF FileKey46=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey47=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey48=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey49=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Local Traces|*|REMOVESELF FileKey50=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\MEIPreload|*|REMOVESELF FileKey51=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Optimization*|*|REMOVESELF FileKey52=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\OriginTrials|*|REMOVESELF FileKey53=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\PKIMetadata|*|REMOVESELF FileKey54=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey55=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey56=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Safe Browsing|*|REMOVESELF FileKey57=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\SafetyTips|*|REMOVESELF FileKey58=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\SmartScreen|*|REMOVESELF FileKey59=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey60=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Stability|*|REMOVESELF FileKey61=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\Subresource Filter|*|REMOVESELF FileKey62=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey63=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\WidevineCdm|*|REMOVESELF FileKey64=%LocalAppData%\Fantastical\Cache\WebView\EBWebView\ZxcvbnData|*|REMOVESELF FileKey65=%LocalAppData%\Fantastical\Logs|* FileKey66=%LocalAppData%\Packages\FlexibitsInc.Fantastical_xhwyj10g4qjsr\AC|*|RECURSE FileKey67=%LocalAppData%\Packages\FlexibitsInc.Fantastical_xhwyj10g4qjsr\Settings|*.log* FileKey68=%LocalAppData%\Packages\FlexibitsInc.Fantastical_xhwyj10g4qjsr\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\FlexibitsInc.Fantastical_xhwyj10g4qjsr\TempState|*|REMOVESELF Tags=ccapps ID=Flexibits Fantastical * Author=Winapp2.ini Project [FLEXnet *] Detect1=HKCU\Software\FlexNet Detect2=HKLM\System\CurrentControlSet\services\FLEXnet Licensing Service FileKey1=%ProgramData%\FLEXnet|*.data_backup.*;*.log Tags=ccapps ID=FLEXnet * Author=Winapp2.ini Project [FlipBooks *] Detect=HKCU\Software\EBooksys\FlipBook CD 1 RegKey1=HKCU\Software\EBooksys\FlipBook CD 1\Typed URLs Tags=ccapps ID=FlipBooks * Author=Winapp2.ini Project [Floorp Autocomplete History *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|formhistory* Tags=ccapps ID=Floorp Autocomplete History * Author=Winapp2.ini Project [Floorp Autofill Data *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|autofill-profiles.json Tags=ccapps ID=Floorp Autofill Data * Author=Winapp2.ini Project [Floorp Bookmark Backups *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Floorp Bookmark Backups * Author=Winapp2.ini Project [Floorp Bookmark Favicons *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|favicons* Tags=ccapps ID=Floorp Bookmark Favicons * Author=Winapp2.ini Project [Floorp Caches *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Floorp\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Floorp\Profiles\*\notificationstore|* FileKey4=%AppData%\Floorp\Profiles\*\security_state|* FileKey5=%AppData%\Floorp\Profiles\*\shader-cache|* FileKey6=%AppData%\Floorp\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Floorp\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Floorp\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Floorp\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Floorp Caches * Author=Winapp2.ini Project [Floorp Privacy Sandbox *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Floorp Privacy Sandbox * Author=Winapp2.ini Project [Floorp Saved Usernames & Passwords *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|key4.db;logins.json Tags=ccapps ID=Floorp Saved Usernames & Passwords * Author=Winapp2.ini Project [Floorp Synced Tabs *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|synced-tabs.db* Tags=ccapps ID=Floorp Synced Tabs * Author=Winapp2.ini Project [Floorp Telemetry *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp|*.log|RECURSE FileKey2=%AppData%\Floorp\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Floorp\Profiles\*\crashes|* FileKey4=%AppData%\Floorp\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Floorp\Profiles\*\minidumps|* FileKey6=%AppData%\Floorp\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Floorp\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Floorp\Profiles\*\weave\logs|* Tags=ccapps ID=Floorp Telemetry * Author=Winapp2.ini Project [Floorp Web Browsing Cookies *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|cookies* Tags=ccapps ID=Floorp Web Browsing Cookies * Author=Winapp2.ini Project [Floorp Web Browsing Session *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|session*.json* Tags=ccapps ID=Floorp Web Browsing Session * Author=Winapp2.ini Project [Floorp Web Browsing Session Backups *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Floorp Web Browsing Session Backups * Author=Winapp2.ini Project [Floorp Web Storage *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Floorp Web Storage * Author=Winapp2.ini Project [Floorp Website Permissions *] DetectFile=%AppData%\Floorp\Profiles FileKey1=%AppData%\Floorp\Profiles\*|permissions.sqlite Tags=ccapps ID=Floorp Website Permissions * Author=Winapp2.ini Project [FocusOn Image Viewer *] Detect=HKLM\Software\Pintosoft\FocusOn Image Viewer FileKey1=%LocalAppData%\Pintosoft\FocusOn Image Viewer|Images.fds FileKey2=%ProgramFiles%\Pintosoft\FocusOn Image Viewer|ImageMagick_*.txt Tags=ccmedia ID=FocusOn Image Viewer * Author=Winapp2.ini Project [FocusOn Renamer *] Detect=HKCU\Software\Pintosoft\FocusOn Renamer RegKey1=HKCU\Software\Pintosoft\FocusOn Renamer|BRMRN1 RegKey2=HKCU\Software\Pintosoft\FocusOn Renamer|BRReplaceFrom RegKey3=HKCU\Software\Pintosoft\FocusOn Renamer|BRReplaceWith Tags=ccutil ID=FocusOn Renamer * Author=Winapp2.ini Project [FolderSecurityViewer *] DetectFile=%UserProfile%\Documents\FolderSecurityViewer FileKey1=%UserProfile%\Documents\FolderSecurityViewer\Logs|* Tags=ccutil ID=FolderSecurityViewer * Author=Winapp2.ini Project [FonePaw Data Recovery *] DetectFile=%LocalAppData%\FonePaw\FonePaw*Data Recovery FileKey1=%LocalAppData%\FonePaw\FonePaw*Data Recovery|*.log FileKey2=%LocalAppData%\FonePaw\FonePaw*Data Recovery\Log|* Tags=ccutil ID=FonePaw Data Recovery * Author=Winapp2.ini Project [FontBase *] DetectFile=%AppData%\FontBase FileKey1=%AppData%\FontBase|*-journal;*.old;LOG;Network Persistent State;QuotaManager|RECURSE FileKey2=%AppData%\FontBase\*Cache|*|RECURSE FileKey3=%AppData%\FontBase\blob_storage|*|RECURSE Tags=ccapps ID=FontBase * Author=Winapp2.ini Project [Foobar2000 *] Detect=HKLM\Software\foobar2000 DetectFile=%ProgramFiles%\foobar2000 FileKey1=%AppData%\foobar2000|*.log;failure.txt;history.flg;library-error-log.txt;PlayCount.sdf;wavecache.db FileKey2=%AppData%\foobar2000\autobackup|autobackup*.zip FileKey3=%AppData%\foobar2000\component-updates|*.zip FileKey4=%AppData%\foobar2000\crash reports|failure*.dmp;failure*.txt FileKey5=%AppData%\foobar2000\foo_youtube\cache|*|RECURSE FileKey6=%AppData%\foobar2000\index-data|*|RECURSE FileKey7=%ProgramFiles%\foobar2000|*.log;failure.txt;history.flg;library-error-log.txt;PlayCount.sdf;wavecache.db FileKey8=%ProgramFiles%\foobar2000\crash reports|failure*.dmp;failure*.txt FileKey9=%ProgramFiles%\foobar2000\index-data|*|RECURSE Tags=ccmedia ID=Foobar2000 * Author=Winapp2.ini Project [fopnu *] DetectFile=%AppData%\fopnu FileKey1=%AppData%\fopnu|*.lastloadok.dat;chat.dat;downloads.dat FileKey2=%UserProfile%\Desktop|Fopnu_*_log_*.txt Tags=ccinternet ID=fopnu * Author=Winapp2.ini Project [Ford Sync My iTunes *] DetectFile=%AppData%\Ford Motor Company FileKey1=%AppData%\Ford Motor Company\logs|* Tags=ccmedia ID=Ford Sync My iTunes * Author=Winapp2.ini Project [ForgetBox *] Detect=HKCU\Software\ForgetBox SAS FileKey1=%AppData%\ForgetBox\cache|*|RECURSE Tags=ccinternet ID=ForgetBox * Author=Winapp2.ini Project [Form Pilot Office *] Detect=HKCU\Software\Two Pilots\Form Pilot FileKey1=%AppData%\Two Pilots\PDF Library|Log.txt FileKey2=%UserProfile%\Documents\Form Pilot|error.log RegKey1=HKCU\Software\Two Pilots\Form Pilot\Settings|GraphicInitialDir RegKey2=HKCU\Software\Two Pilots\Form Pilot\Settings|InitialDir Tags=ccapps ID=Form Pilot Office * Author=Winapp2.ini Project [Format Factory *] DetectFile=%ProgramFiles%\FormatFactory FileKey1=%ProgramFiles%\FormatFactory|*log.txt Tags=ccmedia ID=Format Factory * Author=Winapp2.ini Project [Fort Firewall *] DetectFile=%LocalAppData%\Fort Firewall FileKey1=%LocalAppData%\Fort Firewall\Logs|* Tags=ccinternet ID=Fort Firewall * Author=Winapp2.ini Project [Forte Agent *] Detect=HKLM\Software\Forte FileKey1=%AppData%\Forte\Agent|*.log;errorlog.xml|RECURSE FileKey2=%SystemDrive%\My Data\ForteAgent|*.bak;*.log Tags=ccinternet ID=Forte Agent * Author=Winapp2.ini Project [Fortnite *] DetectFile=%LocalAppData%\FortniteGame* FileKey1=%LocalAppData%\FortniteGame*\Saved\Crashes|*|REMOVESELF FileKey2=%LocalAppData%\FortniteGame*\Saved\Demos|UnsavedReplay*.replay|REMOVESELF FileKey3=%LocalAppData%\FortniteGame*\Saved\Logs|*|REMOVESELF FileKey4=%LocalAppData%\FortniteGame*\Saved\WebCache*|*|REMOVESELF Tags=ccapps ID=Fortnite * Author=Winapp2.ini Project [Forward Observer *] DetectFile=%ProgramFiles%\AAForwardObserver FileKey1=%ProgramFiles%\AAForwardObserver|FO.log Tags=ccapps ID=Forward Observer * Author=Winapp2.ini Project [Fotoboeken *] DetectFile=%LocalAppData%\Albelli.be Fotoboeken FileKey1=%LocalAppData%\Albelli.be Fotoboeken\Config|List.mru Tags=ccmedia ID=Fotoboeken * Author=Winapp2.ini Project [Fotoworks XL *] DetectFile=%ProgramFiles%\FotoWorksXL* FileKey1=%ProgramFiles%\FotoWorksXL*|*.log Tags=ccmedia ID=Fotoworks XL * Author=Winapp2.ini Project [Found: Free to Play *] DetectFile=%AppData%\Elephant Games\Found - Free to Play FileKey1=%AppData%\Elephant Games\Found - Free to Play|logfile.txt Tags=ccapps ID=Found: Free to Play * Author=Winapp2.ini Project [Fox Digital Copy *] DetectFile=%AppData%\Fox Digital Copy FileKey1=%AppData%\Fox Digital Copy|data_*;f_*;index Tags=ccmedia ID=Fox Digital Copy * Author=Winapp2.ini Project [Foxit PDF Editor *] DetectFile=%AppData%\Foxit Software\Foxit PDF Editor* FileKey1=%AppData%\Foxit Software\Addon\Foxit PDF Editor\Install|*|RECURSE FileKey2=%AppData%\Foxit Software\Foxit PDF Editor\Cache|*|RECURSE FileKey3=%AppData%\Foxit Software\Foxit PDF Editor\cacheData|*.dat FileKey4=%AppData%\Foxit Software\Foxit PDF Editor\FormFiller|AutoComplete.ds FileKey5=%AppData%\Foxit Software\Foxit PDF Editor\StartPage\*\Start\en-US|index.html FileKey6=%AppData%\Foxit Software\RMS|FXRMS_Log.txt FileKey7=%ProgramData%\Foxit Software\Foxit PDF Editor\Foxit*\Log|*|RECURSE FileKey8=%UserProfile%\AppData\LocalLow\Foxit\Search|*|RECURSE RegKey1=HKCU\Software\Foxit Software\Foxit PDF Editor 11.0\CommentPanel\Filter RegKey2=HKCU\Software\Foxit Software\Foxit PDF Editor 11.0\MRU\File MRU RegKey3=HKCU\Software\Foxit Software\Foxit PDF Editor 11.0\MRU\Place MRU RegKey4=HKCU\Software\Foxit Software\Foxit PDF Editor 11.0\plugins\JSPlugins RegKey5=HKCU\Software\Foxit Software\Foxit PDF Editor 11.0\Preferences\History Tags=ccapps ID=Foxit PDF Editor * Author=Winapp2.ini Project [Foxit PhantomPDF *] Detect1=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0 Detect2=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0 Detect3=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0 Detect4=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0 FileKey1=%AppData%\Foxit Software\Foxit PDF Creator|*_foxittemp.xml|RECURSE FileKey2=%AppData%\Foxit Software\Foxit PDF Creator\Creator-Log|*|RECURSE FileKey3=%AppData%\Foxit Software\Foxit PhantomPDF\FormFiller|AutoComplete.ds FileKey4=%AppData%\Foxit Software\Foxit PhantomPDF\StartPage\*\Start\en-US|index.html FileKey5=%AppData%\Foxit Software\RMS|FXRMS_Log.txt FileKey6=%LocalAppData%\Foxit PhantomPDF|*.log FileKey7=%LocalAppData%\Foxit PhantomPDF\msilog|*.log FileKey8=%ProgramFiles%\Foxit Software\Foxit PhantomPDF\Foxit PDF IFilter\log|* FileKey9=%ProgramFiles%\Foxit Software\Foxit PhantomPDF\plugins\OCR\FX_Abbyy_OCR\Resource\CMap|*.lst FileKey10=%WinDir%\System32\config\systemprofile\AppData\Roaming\Foxit Software\Foxit PDF Creator|*_foxittemp.xml|RECURSE RegKey1=HKCU\Software\Foxit Software Company\Foxit PDF Editor|Recent File List RegKey2=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Preferences\History RegKey3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Preferences\Others|csFileSavePLGEXT RegKey4=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Preferences\Others|csInitialOpenDir RegKey5=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\RecentFiles RegKey6=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0\MRU\File MRU RegKey7=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0\MRU\Place MRU RegKey8=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0\plugins\JSPlugins RegKey9=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0\Preferences\History RegKey10=HKCU\Software\Foxit Software\Foxit PhantomPDF 7.0\Recent File List RegKey11=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\CommentPanel\Filter RegKey12=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\Foxit PhantomPDF Advanced Editor\Recent File List RegKey13=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\MRU\File MRU RegKey14=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\MRU\Place MRU RegKey15=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\plugins\JSPlugins RegKey16=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\Preferences\History RegKey17=HKCU\Software\Foxit Software\Foxit PhantomPDF 8.0\Recent File List RegKey18=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\CommentPanel\Filter RegKey19=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\Foxit PhantomPDF Advanced Editor\Recent File List RegKey20=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\MRU\File MRU RegKey21=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\MRU\Place MRU RegKey22=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\plugins\JSPlugins RegKey23=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\Preferences\History RegKey24=HKCU\Software\Foxit Software\Foxit PhantomPDF 9.0\Recent File List Tags=ccapps ID=Foxit PhantomPDF * Author=Winapp2.ini Project [Foxit Reader *] Detect1=HKCU\Software\Foxit Software\Foxit Reader 6.0 Detect2=HKCU\Software\Foxit Software\Foxit Reader 7.0 DetectFile=%AppData%\Foxit Software\Foxit Reader FileKey1=%AppData%\Foxit Software\Foxit PDF Creator\Foxit Reader PDF Printer|*_foxittemp.xml FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|*.cache FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.fcd FileKey5=%AppData%\Foxit Software\Foxit Reader\StartPage*\Advertisement|*|REMOVESELF FileKey6=%AppData%\Foxit Software\Foxit Reader\StartPage*\Start|history.txt FileKey7=%LocalAppData%\Foxit Reader|*.reg;*.TXT;*.zip;*_old.DMP FileKey8=%ProgramData%\Foxit Software|*.log|RECURSE FileKey9=%ProgramData%\Foxit Software\Foxit PDF Reader\FoxitSensor\Log|* FileKey10=%ProgramData%\Foxit Software\Foxit*Reader\Foxit Service\Log|* FileKey11=%ProgramFiles%\Foxit Software\Foxit Reader\Release Note|*|REMOVESELF FileKey12=%SystemDrive%\Documents and Settings\NetworkService*\Application Data\Foxit Software\Foxit Cloud|*log.txt RegKey1=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\Options RegKey2=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\Others|csFileSavePLGEXT RegKey3=HKCU\Software\Foxit Software\Foxit Reader 7.0\MRU RegKey4=HKCU\Software\Foxit Software\Foxit Reader 8.0\MRU\File MRU RegKey5=HKCU\Software\Foxit Software\Foxit Reader 8.0\MRU\Place MRU RegKey6=HKCU\Software\Foxit Software\Foxit Reader 8.0\Preferences\History\LastOpen RegKey7=HKCU\Software\Foxit Software\Foxit Reader 8.0\Preferences\History\LastSession RegKey8=HKCU\Software\Foxit Software\Foxit Reader 8.0\Preferences\Others|csInitialOpenDir Tags=ccapps ID=Foxit Reader * Author=Winapp2.ini Project [Fractal: Make Blooms Not War *] Detect=HKCU\Software\Valve\Steam\Apps\61310 FileKey1=%ProgramFiles%\Steam\Steamapps\common\Fractal\fractal_data|output_log.txt Tags=ccapps ID=Fractal: Make Blooms Not War * Author=Winapp2.ini Project [Franzis CutOut *] Detect=HKCU\Software\Stepok\Light Developer RegKey1=HKCU\Software\Stepok\Light Developer\Last Path Tags=ccmedia ID=Franzis CutOut * Author=Winapp2.ini Project [Fre:ac *] DetectFile=%AppData%\freac FileKey1=%AppData%\Freac\cddb|*|REMOVESELF Tags=ccutil ID=Fre:ac * Author=Winapp2.ini Project [Free Blu-ray Ripper *] DetectFile=%LocalAppData%\Blu-ray Master\Free Blu-ray Ripper FileKey1=%LocalAppData%\Blu-ray Master\Free Blu-ray Ripper|*.log;*log.txt Tags=ccmedia ID=Free Blu-ray Ripper * Author=Winapp2.ini Project [Free Download Manager *] Detect=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager FileKey1=%AppData%\Free Download Manager|downloads.del.sav Tags=ccinternet ID=Free Download Manager * Author=Winapp2.ini Project [Free Editor *] DetectFile=%ProgramFiles%\Free Editor FileKey1=%ProgramFiles%\Free Editor|mostRecentFiles.ini FileKey2=%ProgramFiles%\Free Editor\NGEN\x64|ngen.log FileKey3=%ProgramFiles%\Free Editor\NGEN\x86|ngen.log Tags=ccapps ID=Free Editor * Author=Winapp2.ini Project [Free Hex Editor *] Detect=HKCU\Software\Frhed RegKey1=HKCU\Software\Frhed\Settings\0|MRU_File1 RegKey2=HKCU\Software\Frhed\Settings\0|MRU_File2 RegKey3=HKCU\Software\Frhed\Settings\0|MRU_File3 RegKey4=HKCU\Software\Frhed\Settings\0|MRU_File4 RegKey5=HKCU\Software\Frhed\Settings\0|MRU_File5 RegKey6=HKCU\Software\Frhed\Settings\0|MRU_File6 RegKey7=HKCU\Software\Frhed\Settings\0|MRU_File7 RegKey8=HKCU\Software\Frhed\Settings\0|MRU_File8 RegKey9=HKCU\Software\Frhed\Settings\0|MRU_File9 Tags=ccutil ID=Free Hex Editor * Author=Winapp2.ini Project [Free Image Editor *] Detect=HKCU\Software\RasterVect Software\Free Image Editor RegKey1=HKCU\Software\RasterVect Software\Free Image Editor\Options|CurrDir RegKey2=HKCU\Software\RasterVect Software\Free Image Editor\Recent File List Tags=ccmedia ID=Free Image Editor * Author=Winapp2.ini Project [Free Opener *] DetectFile=%ProgramFiles%\Free Opener FileKey1=%ProgramFiles%\Free Opener|mostRecentFiles.ini FileKey2=%ProgramFiles%\Free Opener\NGEN\x64|ngen.log FileKey3=%ProgramFiles%\Free Opener\NGEN\x86|ngen.log Tags=ccapps ID=Free Opener * Author=Winapp2.ini Project [Free PDF XP *] Detect=HKCU\Software\shbox\FreePdfXP FileKey1=%SystemDrive%|IfpRedmon.log Tags=ccutil ID=Free PDF XP * Author=Winapp2.ini Project [Free Snipping Tool *] DetectFile=%AppData%\Free Snipping Tool FileKey1=%AppData%\Free Snipping Tool\Free Snipping Tool\updates\updates|*.msi Tags=ccmedia ID=Free Snipping Tool * Author=Winapp2.ini Project [Free Viewer *] DetectFile=%ProgramFiles%\Free Viewer FileKey1=%ProgramFiles%\Free Viewer|mostRecentFiles.ini FileKey2=%ProgramFiles%\Free Viewer\NGEN\x64|ngen.log FileKey3=%ProgramFiles%\Free Viewer\NGEN\x86|ngen.log Tags=ccapps ID=Free Viewer * Author=Winapp2.ini Project [FreeCommander XE *] DetectFile=%LocalAppData%\FreeCommanderXE FileKey1=%LocalAppData%\FreeCommanderXE\Settings\Bkp_Settings_*|*|REMOVESELF FileKey2=%ProgramFiles%\FreeCommander XE\backup|*|REMOVESELF Tags=ccapps ID=FreeCommander XE * Author=Winapp2.ini Project [FreeFileSync *] DetectFile=%AppData%\FreeFileSync FileKey1=%AppData%\FreeFileSync\Logs|* FileKey2=%ProgramFiles%\FreeFileSync|*log.txt Tags=ccutil ID=FreeFileSync * Author=Winapp2.ini Project [FreeFixer *] DetectFile=%LocalAppData%\FreeFixer FileKey1=%LocalAppData%\FreeFixer|itemtracking.txt FileKey2=%LocalAppData%\FreeFixer\icons|*.ico|RECURSE FileKey3=%LocalAppData%\FreeFixer\Logs|*|RECURSE Tags=ccutil ID=FreeFixer * Author=Winapp2.ini Project [Freemake Video Converter *] DetectFile=%ProgramData%\Freemake\FreemakeVideoConverter FileKey1=%ProgramData%\Freemake\FreemakeUtilsService\ErrorReports\Logs|* FileKey2=%ProgramData%\Freemake\FreemakeUtilsService\Statistics\Targets|FVC_Statistics.ini FileKey3=%ProgramFiles%\Freemake|DotNet*.exe Tags=ccmedia ID=Freemake Video Converter * Author=Winapp2.ini Project [Freemake Video Downloader *] Detect=HKCU\Software\Freemake\FreemakeVideoDownloader FileKey1=%ProgramFiles%\Freemake|*.txt FileKey2=%UserProfile%\Documents\Freemake\FreemakeVideoDownloader|fvd.bin Tags=ccinternet ID=Freemake Video Downloader * Author=Winapp2.ini Project [Freenet *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freenet DetectFile=%LocalAppData%\Freenet FileKey1=%LocalAppData%\Freenet|*.bak FileKey2=%LocalAppData%\Freenet\logs|*.gz;*.log FileKey3=%LocalAppData%\Freenet\persistent-temp|*.tmp FileKey4=%LocalAppData%\Freenet\temp|* FileKey5=%LocalAppData%\Freenet\wrapper|*.log Tags=ccinternet ID=Freenet * Author=Winapp2.ini Project [Freeplane *] DetectFile=%AppData%\Freeplane FileKey1=%AppData%\Freeplane\*\logs|* Tags=ccapps ID=Freeplane * Author=Winapp2.ini Project [Frigate3 *] DetectFile=%AppData%\Frigate3 FileKey1=%AppData%\Frigate3|History.XML Tags=ccutil ID=Frigate3 * Author=Winapp2.ini Project [FrostWire *] Detect=HKLM\Software\FrostWire FileKey1=%AppData%\FrostWire\.AppSpecialShare|*|RECURSE FileKey2=%AppData%\FrostWire\azureus|*|RECURSE FileKey3=%UserProfile%\Documents\FrostWire\Incomplete|*|RECURSE Tags=ccinternet ID=FrostWire * Author=Winapp2.ini Project [Frozen Synapse *] Detect=HKCU\Software\Valve\Steam\Apps\98200 FileKey1=%ProgramFiles%\Steam\Steamapps\common\Frozen Synapse|*.log Tags=ccapps ID=Frozen Synapse * Author=Winapp2.ini Project [FRSFileMgr *] Detect=HKCU\Software\FourthRaySoftware\FRSFileMgr FileKey1=%SystemDrive%\FRS\FRSFileMgr|FRSFileMgr.ffm Tags=ccutil ID=FRSFileMgr * Author=Winapp2.ini Project [FTL: Faster Than Light *] Detect=HKCU\Software\Valve\Steam\Apps\212680 DetectFile=%UserProfile%\Documents\My Games\FasterThanLight FileKey1=%ProgramFiles%\Steam\steamapps\common\FTL Faster Than Light\crashlogs|* Tags=ccapps ID=FTL: Faster Than Light * Author=Winapp2.ini Project [Full Bore *] Detect=HKCU\Software\Valve\Steam\Apps\264060 FileKey1=%UserProfile%\Documents\Full Bore|log.txt Tags=ccapps ID=Full Bore * Author=Winapp2.ini Project [G-Data *] Detect=HKCU\Software\G Data FileKey1=%CommonProgramFiles%\G Data\AVKScanP\G Data|*.log;*old FileKey2=%ProgramData%\G Data\AVK\Log|*|RECURSE FileKey3=%ProgramFiles%\G Data\AntiVirus\AVK\UpdatePGM|*.log Tags=ccmedia ID=G-Data * Author=Winapp2.ini Project [Gadu-Gadu *] Detect=HKCU\Software\Gadu-Gadu FileKey1=%WinDir%|TEMP*.htm* Tags=ccinternet ID=Gadu-Gadu * Author=Winapp2.ini Project [Gainedge Better Explorer *] DetectFile1=%AppData%\BExplorer DetectFile2=%ProgramFiles%\Better Explorer FileKey1=%AppData%\BExplorer|log.txt FileKey2=%ProgramFiles%\Better Explorer|log.txt Tags=ccutil ID=Gainedge Better Explorer * Author=Winapp2.ini Project [Gainedge Better Explorer Open Tabs *] DetectFile=%AppData%\BExplorer RegKey1=HKCU\Software\BExplorer\OpenedTabs Tags=ccutil ID=Gainedge Better Explorer Open Tabs * Author=Winapp2.ini Project [Gainedge Better Explorer Saved Tabs *] DetectFile=%AppData%\BExplorer FileKey1=%LocalAppData%\BExplorer_SavedTabs|* Tags=ccutil ID=Gainedge Better Explorer Saved Tabs * Author=Winapp2.ini Project [Gajim *] DetectFile=%AppData%\Gajim FileKey1=%AppData%\Gajim|cache.db;gajim.log;Logs.db FileKey2=%AppData%\Gajim\Avatars|* Tags=ccinternet ID=Gajim * Author=Winapp2.ini Project [Game-Cloner *] DetectFile=%AppData%\Game-Cloner FileKey1=%AppData%\Game-Cloner|*.log Tags=ccapps ID=Game-Cloner * Author=Winapp2.ini Project [Game Maker *] Detect1=HKCU\Software\Game Maker 4 Detect2=HKCU\Software\Game Maker\Version 5 Detect3=HKCU\Software\Game Maker\Version 6 Detect4=HKCU\Software\Game Maker\Version 7 Detect5=HKCU\Software\Game Maker\Version 8 RegKey1=HKCU\Software\Game Maker 4\Preferences|GameDir RegKey2=HKCU\Software\Game Maker 4\Preferences|Recent0 RegKey3=HKCU\Software\Game Maker 4\Preferences|Recent1 RegKey4=HKCU\Software\Game Maker 4\Preferences|Recent2 RegKey5=HKCU\Software\Game Maker 4\Preferences|Recent3 RegKey6=HKCU\Software\Game Maker\Version 5\Preferences|GameDir RegKey7=HKCU\Software\Game Maker\Version 5\Preferences|Recent0 RegKey8=HKCU\Software\Game Maker\Version 5\Preferences|Recent1 RegKey9=HKCU\Software\Game Maker\Version 5\Preferences|Recent2 RegKey10=HKCU\Software\Game Maker\Version 5\Preferences|Recent3 RegKey11=HKCU\Software\Game Maker\Version 5\Preferences|Recent4 RegKey12=HKCU\Software\Game Maker\Version 5\Preferences|Recent5 RegKey13=HKCU\Software\Game Maker\Version 5\Preferences|Recent6 RegKey14=HKCU\Software\Game Maker\Version 5\Preferences|Recent7 RegKey15=HKCU\Software\Game Maker\Version 6\Preferences|GameDir RegKey16=HKCU\Software\Game Maker\Version 6\Preferences|Recent0 RegKey17=HKCU\Software\Game Maker\Version 6\Preferences|Recent1 RegKey18=HKCU\Software\Game Maker\Version 6\Preferences|Recent2 RegKey19=HKCU\Software\Game Maker\Version 6\Preferences|Recent3 RegKey20=HKCU\Software\Game Maker\Version 6\Preferences|Recent4 RegKey21=HKCU\Software\Game Maker\Version 6\Preferences|Recent5 RegKey22=HKCU\Software\Game Maker\Version 6\Preferences|Recent6 RegKey23=HKCU\Software\Game Maker\Version 6\Preferences|Recent7 RegKey24=HKCU\Software\Game Maker\Version 7\Preferences|GameDir RegKey25=HKCU\Software\Game Maker\Version 7\Preferences|Recent0 RegKey26=HKCU\Software\Game Maker\Version 7\Preferences|Recent1 RegKey27=HKCU\Software\Game Maker\Version 7\Preferences|Recent2 RegKey28=HKCU\Software\Game Maker\Version 7\Preferences|Recent3 RegKey29=HKCU\Software\Game Maker\Version 7\Preferences|Recent4 RegKey30=HKCU\Software\Game Maker\Version 7\Preferences|Recent5 RegKey31=HKCU\Software\Game Maker\Version 7\Preferences|Recent6 RegKey32=HKCU\Software\Game Maker\Version 7\Preferences|Recent7 RegKey33=HKCU\Software\Game Maker\Version 8\Preferences|GameDir RegKey34=HKCU\Software\Game Maker\Version 8\Preferences|Recent0 RegKey35=HKCU\Software\Game Maker\Version 8\Preferences|Recent1 RegKey36=HKCU\Software\Game Maker\Version 8\Preferences|Recent2 RegKey37=HKCU\Software\Game Maker\Version 8\Preferences|Recent3 RegKey38=HKCU\Software\Game Maker\Version 8\Preferences|Recent4 RegKey39=HKCU\Software\Game Maker\Version 8\Preferences|Recent5 RegKey40=HKCU\Software\Game Maker\Version 8\Preferences|Recent6 RegKey41=HKCU\Software\Game Maker\Version 8\Preferences|Recent7 Tags=ccapps ID=Game Maker * Author=Winapp2.ini Project [GameAnalyics *] DetectFile=%LocalAppData%\GameAnalyics FileKey1=%LocalAppData%\GameAnalyics|ga_log.txt Tags=ccapps ID=GameAnalyics * Author=Winapp2.ini Project [GameRanger *] DetectFile=%AppData%\GameRanger\GameRanger FileKey1=%AppData%\GameRanger\GameRanger Prefs|Icon Cache;Image Cache FileKey2=%AppData%\GameRanger\GameRanger Prefs\WCache|*-journal;*.old;ChromeDWriteFontCache;data_*;f_*;index;LOG;Visited Links|RECURSE FileKey3=%AppData%\GameRanger\GameRanger Prefs\WCache\*Cache|* FileKey4=%AppData%\GameRanger\GameRanger Prefs\WCache\blob_storage|*|RECURSE Tags=ccapps ID=GameRanger * Author=Winapp2.ini Project [GameSave Manager *] Detect1=HKCR\GSM_gsba Detect2=HKCR\GSM_gsdu Detect3=HKCR\GSM_gsms FileKey1=%AppData%\GameSave Manager*\*Cache*|* FileKey2=%AppData%\GameSave Manager*\TaskLogs|* FileKey3=%ProgramFiles%\GameSave Manager*\settings|*.log;ScanResults.txt|RECURSE Tags=ccapps ID=GameSave Manager * Author=Winapp2.ini Project [Gardens Inc. 2: The Road to Fame *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BBB8E5A9-EE43-491D-9A2D-84172C3C9384}_is1 FileKey1=%ProgramFiles%\*\Gardens Inc. 2*|*.html;*.ico;*.nfo;*.txt;*.url;*msi|RECURSE Tags=ccapps ID=Gardens Inc. 2: The Road to Fame * Author=Winapp2.ini Project [Gardenscapes *] DetectFile=%AppData%\Playrix Entertainment\Gardenscapes FileKey1=%AppData%\Playrix Entertainment\Gardenscapes|log.html Tags=ccapps ID=Gardenscapes * Author=Winapp2.ini Project [Garena *] DetectFile=%ProgramData%\Garena FileKey1=%ProgramData%\Garena\gxx\cache|*|RECURSE FileKey2=%ProgramData%\Garena\gxx\dmp|* FileKey3=%ProgramData%\Garena\gxx\log|* Tags=ccapps ID=Garena * Author=Winapp2.ini Project [Garmin Express *] Detect=HKCU\Software\Garmin\Express FileKey1=%ProgramData%\Garmin\Logs|*.log;*.txt|RECURSE FileKey2=%UserProfile%\Documents\Garmin\Backups\*|*|RECURSE Tags=ccutil ID=Garmin Express * Author=Winapp2.ini Project [Garmin MapSource *] Detect=HKCU\Software\Garmin\MapSource FileKey1=%AppData%\GARMIN\MapSource\TileCache|*|REMOVESELF Tags=ccutil ID=Garmin MapSource * Author=Winapp2.ini Project [GarrysMod *] DetectFile=%ProgramFiles%\Steam\steamapps\common\GarrysMod FileKey1=%ProgramFiles%\Steam\steamapps\common\GarrysMod|*.cache|RECURSE Tags=ccapps ID=GarrysMod * Author=Winapp2.ini Project [Gatewatch *] DetectFile=%UserProfile%\Documents\Gatewatch_Logs FileKey1=%UserProfile%\Documents\Gatewatch_Logs\DownloadLog|*.log Tags=ccapps ID=Gatewatch * Author=Winapp2.ini Project [gBurner *] Detect=HKCU\Software\gBurner RegKey1=HKCU\Software\gBurner|Reopen0 RegKey2=HKCU\Software\gBurner|Reopen1 RegKey3=HKCU\Software\gBurner|Reopen2 RegKey4=HKCU\Software\gBurner|Reopen3 Tags=ccapps ID=gBurner * Author=Winapp2.ini Project [GEAR DIFx *] Detect1=HKCR\Installer\Products\CACFC38969C58104B8CE6D8561446C45 Detect2=HKLM\Software\GEAR Software\DIFx Detect3=HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EC13FCAF38E85F44B0F1137C7FB5037 FileKey1=%AppData%\34BE82C4-E596-4e99-A191-52C6199EBF69|*|REMOVESELF FileKey2=%AppData%\188F1432-103A-4ffb-80F1-36B633C5C9E1|*|REMOVESELF FileKey3=%AppData%\9223B3E6-70DD-4e2f-965B-DD8E02D2E20B|*|REMOVESELF FileKey4=%AppData%\Downloaded Installations|*|REMOVESELF FileKey5=%LocalAppData%\Downloaded Installations|*|REMOVESELF FileKey6=%ProgramData%\{755AC846-7372-4AC8-8550-C52491DAA8BD}|*|REMOVESELF FileKey7=%ProgramData%\34BE82C4-E596-4e99-A191-52C6199EBF69|*|REMOVESELF FileKey8=%ProgramData%\188F1432-103A-4ffb-80F1-36B633C5C9E1|*|REMOVESELF FileKey9=%ProgramData%\9223B3E6-70DD-4e2f-965B-DD8E02D2E20B|*|REMOVESELF FileKey10=%ProgramData%\9727E41D-AD6A-47cd-B9BC-CF630B6013FD|*|REMOVESELF FileKey11=%ProgramData%\A73B37F8-7A4D-41f4-98A8-7F608CE8B98F|*|REMOVESELF FileKey12=%ProgramData%\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB|*.log|RECURSE FileKey13=%ProgramData%\E1864A66-75E3-486a-BD95-D1B7D99A84A7|*|REMOVESELF FileKey14=%ProgramFiles%\34BE82C4-E596-4e99-A191-52C6199EBF69|*|REMOVESELF FileKey15=%ProgramFiles%\38FDB89C-1EBD-4366-84B2-336D12CC3209|*|REMOVESELF FileKey16=%ProgramFiles%\93E26451-CD9A-43A5-A2FA-C42392EA4001|*|REMOVESELF FileKey17=%ProgramFiles%\188F1432-103A-4ffb-80F1-36B633C5C9E1|*|REMOVESELF FileKey18=%ProgramFiles%\9223B3E6-70DD-4e2f-965B-DD8E02D2E20B|*|REMOVESELF FileKey19=%ProgramFiles%\9727E41D-AD6A-47cd-B9BC-CF630B6013FD|*|REMOVESELF Tags=ccutil ID=GEAR DIFx * Author=Winapp2.ini Project [Geek Uninstaller *] Detect=HKCU\Software\Geek Uninstaller FileKey1=%AppData%\Geek Uninstaller|*.log;*cache.dat Tags=ccutil ID=Geek Uninstaller * Author=Winapp2.ini Project [GeekSquad *] DetectFile=%ProgramData%\Geek Squad FileKey1=%ProgramData%\Geek Squad\MRI|EventLog.gsl|RECURSE FileKey2=%ProgramData%\Geek Squad\MRI\Automation Reports|*|REMOVESELF FileKey3=%ProgramData%\Geek Squad\MRI\Downloads|*|REMOVESELF Tags=ccutil ID=GeekSquad * Author=Winapp2.ini Project [Genie-Soft *] Detect=HKCU\Software\Genie-Soft FileKey1=%AppData%\Genie-soft\*\logs|* Tags=ccutil ID=Genie-Soft * Author=Winapp2.ini Project [Genspark Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Genspark Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Genspark Browser Autoplay Preferences *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Genspark Browser Autoplay Preferences * Author=Winapp2.ini Project [Genspark Browser Bookmark Backups *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|Bookmarks.bak Tags=ccapps ID=Genspark Browser Bookmark Backups * Author=Winapp2.ini Project [Genspark Browser Bookmark Favicons *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|favicons* Tags=ccapps ID=Genspark Browser Bookmark Favicons * Author=Winapp2.ini Project [Genspark Browser Caches *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Genspark Browser Caches * Author=Winapp2.ini Project [Genspark Browser Default App Handlers *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|PreferredApps Tags=ccapps ID=Genspark Browser Default App Handlers * Author=Winapp2.ini Project [Genspark Browser Download History *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Genspark Browser Download History * Author=Winapp2.ini Project [Genspark Browser DRM Data *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Genspark Browser DRM Data * Author=Winapp2.ini Project [Genspark Browser Extension Cookies *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|Extension Cookies Tags=ccapps ID=Genspark Browser Extension Cookies * Author=Winapp2.ini Project [Genspark Browser Pinned Tabs *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data RegKey1=HKCU\Software\GensparkSoftware\Genspark-Browser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Genspark Browser Pinned Tabs * Author=Winapp2.ini Project [Genspark Browser Privacy Sandbox *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Genspark Browser Privacy Sandbox * Author=Winapp2.ini Project [Genspark Browser Progressive Web Apps *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Genspark Browser Progressive Web Apps * Author=Winapp2.ini Project [Genspark Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|Login Data* Tags=ccapps ID=Genspark Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Genspark Browser Security & Threat Detection *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Genspark Browser Security & Threat Detection * Author=Winapp2.ini Project [Genspark Browser Shopping Insights *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Genspark Browser Shopping Insights * Author=Winapp2.ini Project [Genspark Browser Storage Quota Manager *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|QuotaManager Tags=ccapps ID=Genspark Browser Storage Quota Manager * Author=Winapp2.ini Project [Genspark Browser Sync Data *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Genspark Browser Sync Data * Author=Winapp2.ini Project [Genspark Browser Telemetry *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\Application|debug.log FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|*.log FileKey6=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\GensparkSoftware\Genspark-Browser\Application|debug.log FileKey21=%ProgramFiles%\GensparkSoftware\Genspark-Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\GensparkSoftware\Genspark-Browser\BlBeacon|failed_count RegKey2=HKCU\Software\GensparkSoftware\Genspark-Browser\BlBeacon|state RegKey3=HKCU\Software\GensparkSoftware\Genspark-Browser\Installer|LastChecked RegKey4=HKCU\Software\GensparkSoftware\Genspark-Browser\StabilityMetrics Tags=ccapps ID=Genspark Browser Telemetry * Author=Winapp2.ini Project [Genspark Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Genspark Browser Web Browsing Cookies * Author=Winapp2.ini Project [Genspark Browser Web Browsing History *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Genspark Browser Web Browsing History * Author=Winapp2.ini Project [Genspark Browser Web Browsing Session *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Genspark Browser Web Browsing Session * Author=Winapp2.ini Project [Genspark Browser Web Storage *] DetectFile=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data FileKey1=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\GensparkSoftware\Genspark-Browser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Genspark Browser Web Storage * Author=Winapp2.ini Project [Genymobile *] Detect=HKCU\Software\Genymobile FileKey1=%LocalAppData%\Genymobile|*.log FileKey2=%UserProfile%\VirtualBox VMs\*|genymotion-player*.log;logcat*.txt Tags=ccutil ID=Genymobile * Author=Winapp2.ini Project [GeoVid Video Avatar *] DetectFile1=%AppData%\GeoVid\Video To Avatar DetectFile2=%ProgramFiles%\GeoVid\Video Avatar FileKey1=%AppData%\GeoVid\Video To Avatar|log.txt FileKey2=%ProgramFiles%\GeoVid\Video Avatar|vcredist_*.exe Tags=ccmedia ID=GeoVid Video Avatar * Author=Winapp2.ini Project [GetDiz *] Detect=HKCU\Software\Outertech\GetDiz RegKey1=HKCU\Software\Outertech\GetDiz|Recent Files_1 RegKey2=HKCU\Software\Outertech\GetDiz|Recent Files_2 RegKey3=HKCU\Software\Outertech\GetDiz|Recent Files_3 RegKey4=HKCU\Software\Outertech\GetDiz|Recent Files_4 RegKey5=HKCU\Software\Outertech\GetDiz|Recent Files_5 RegKey6=HKCU\Software\Outertech\GetDiz|Recent Files_6 RegKey7=HKCU\Software\Outertech\GetDiz|Recent Files_7 RegKey8=HKCU\Software\Outertech\GetDiz|Recent Files_8 RegKey9=HKCU\Software\Outertech\GetDiz|Recent Files_9 RegKey10=HKCU\Software\Outertech\GetDiz|Recent Files_10 Tags=ccapps ID=GetDiz * Author=Winapp2.ini Project [GetFLV *] Detect=HKCU\Software\GetFLV DetectFile=%ProgramFiles%\GetFLV FileKey1=%ProgramFiles%\GetFLV|history.xml;setting.ini;URLHistory.dat FileKey2=%ProgramFiles%\GetFLV\cache|Visited Links FileKey3=%ProgramFiles%\GetFLV\cache\*Cache|* FileKey4=%ProgramFiles%\GetFLV\libav\cache\*Cache|* FileKey5=%ProgramFiles%\GetFLV\site_files|*.tmp FileKey6=%ProgramFiles%\GetFLV\temp|* FileKey7=%ProgramFiles%\GetFLV\thumb|* FileKey8=%ProgramFiles%\GetFLV\tmp|* FileKey9=%ProgramFiles%\GetFLV\Youtube Zilla\libav\cache\*Cache|* RegKey1=HKCU\Software\GetFLV|AutoCaptureURL RegKey2=HKCU\Software\GetFLV|DownloadDir RegKey3=HKCU\Software\GetFLV|FLVTitle RegKey4=HKCU\Software\GetFLV|FLVURL Tags=ccmedia ID=GetFLV * Author=Winapp2.ini Project [GetMyIP *] Detect=HKCU\Software\CubicDesign\GetMyIP RegKey1=HKCU\Software\CubicDesign\GetMyIP Tags=ccutil ID=GetMyIP * Author=Winapp2.ini Project [GetRight *] Detect=HKCU\Software\Headlight\GetRight FileKey1=%AppData%\GetRight*|*.data;GetRight.lst|RECURSE RegKey1=HKCU\Software\Headlight\GetRight\FileQueue RegKey2=HKCU\Software\Headlight\GetRight\ResumeServers RegKey3=HKCU\Software\Headlight\GetRight\Stats RegKey4=HKCU\Software\Headlight\GetRight\UserAgent Tags=ccinternet ID=GetRight * Author=Winapp2.ini Project [Getting Over It with Bennett Foddy *] DetectFile=%UserProfile%\AppData\LocalLow\Bennett Foddy\Getting Over It FileKey1=%UserProfile%\AppData\LocalLow\Bennett Foddy\Getting Over It|output_log.txt FileKey2=%UserProfile%\AppData\LocalLow\Bennett Foddy\Getting Over It\Crashes|* Tags=ccapps ID=Getting Over It with Bennett Foddy * Author=Winapp2.ini Project [GFI LanGuard *] DetectFile1=%ProgramData%\GFI Software\LanGuard* DetectFile2=%ProgramFiles%\GFI\LANguard* FileKey1=%ProgramData%\GFI Software\LanGuard*|newfileslog.* FileKey2=%ProgramData%\GFI Software\LanGuard*\*Logs|*|RECURSE FileKey3=%ProgramData%\GFI Software\LanGuard*\Cache|*|REMOVESELF FileKey4=%ProgramFiles%\GFI\LANguard*\DebugLogs|* FileKey5=%WinDir%\Patches|*.log;*.log.txt Tags=ccinternet ID=GFI LanGuard * Author=Winapp2.ini Project [GG *] DetectFile=%AppData%\GG FileKey1=%AppData%\GG\*\*cache*|*|RECURSE FileKey2=%AppData%\GG\*\crashes|*|RECURSE FileKey3=%AppData%\GG\*\minidumps|*|RECURSE FileKey4=%AppData%\GG\Crash Reports|*|RECURSE FileKey5=%AppData%\GG\logs|* Tags=ccinternet ID=GG * Author=Winapp2.ini Project [Ghost Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|*Web Data FileKey2=%LocalAppData%\GhostBrowser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\GhostBrowser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Ghost Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Ghost Browser Autoplay Preferences *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Ghost Browser Autoplay Preferences * Author=Winapp2.ini Project [Ghost Browser Bookmark Backups *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|Bookmarks.bak Tags=ccapps ID=Ghost Browser Bookmark Backups * Author=Winapp2.ini Project [Ghost Browser Bookmark Favicons *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|favicons* Tags=ccapps ID=Ghost Browser Bookmark Favicons * Author=Winapp2.ini Project [Ghost Browser Caches *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\GhostBrowser\User Data|Module Info Cache FileKey3=%LocalAppData%\GhostBrowser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\GhostBrowser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\GhostBrowser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\GhostBrowser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\GhostBrowser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\GhostBrowser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\GhostBrowser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\GhostBrowser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\GhostBrowser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\GhostBrowser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\GhostBrowser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\GhostBrowser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\GhostBrowser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\GhostBrowser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\GhostBrowser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\GhostBrowser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\GhostBrowser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Ghost Browser Caches * Author=Winapp2.ini Project [Ghost Browser Default App Handlers *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|PreferredApps Tags=ccapps ID=Ghost Browser Default App Handlers * Author=Winapp2.ini Project [Ghost Browser Download History *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\GhostBrowser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Ghost Browser Download History * Author=Winapp2.ini Project [Ghost Browser DRM Data *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\GhostBrowser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Ghost Browser DRM Data * Author=Winapp2.ini Project [Ghost Browser Extension Cookies *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|Extension Cookies Tags=ccapps ID=Ghost Browser Extension Cookies * Author=Winapp2.ini Project [Ghost Browser Pinned Tabs *] DetectFile=%LocalAppData%\GhostBrowser\User Data RegKey1=HKCU\Software\GhostBrowser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Ghost Browser Pinned Tabs * Author=Winapp2.ini Project [Ghost Browser Privacy Sandbox *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data|*first_party_sets* FileKey2=%LocalAppData%\GhostBrowser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\GhostBrowser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\GhostBrowser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\GhostBrowser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\GhostBrowser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\GhostBrowser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\GhostBrowser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Ghost Browser Privacy Sandbox * Author=Winapp2.ini Project [Ghost Browser Progressive Web Apps *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Ghost Browser Progressive Web Apps * Author=Winapp2.ini Project [Ghost Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|Login Data* Tags=ccapps ID=Ghost Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Ghost Browser Security & Threat Detection *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|DIPS* FileKey2=%LocalAppData%\GhostBrowser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\GhostBrowser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\GhostBrowser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\GhostBrowser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\GhostBrowser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\GhostBrowser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\GhostBrowser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\GhostBrowser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\GhostBrowser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\GhostBrowser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\GhostBrowser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Ghost Browser Security & Threat Detection * Author=Winapp2.ini Project [Ghost Browser Shopping Insights *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\GhostBrowser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\GhostBrowser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\GhostBrowser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\GhostBrowser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Ghost Browser Shopping Insights * Author=Winapp2.ini Project [Ghost Browser Storage Quota Manager *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|QuotaManager Tags=ccapps ID=Ghost Browser Storage Quota Manager * Author=Winapp2.ini Project [Ghost Browser Sync Data *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Ghost Browser Sync Data * Author=Winapp2.ini Project [Ghost Browser Telemetry *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\Application|debug.log FileKey2=%LocalAppData%\GhostBrowser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\GhostBrowser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\GhostBrowser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\GhostBrowser\User Data\*|*.log FileKey6=%LocalAppData%\GhostBrowser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\GhostBrowser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\GhostBrowser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\GhostBrowser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\GhostBrowser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\GhostBrowser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\GhostBrowser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\GhostBrowser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\GhostBrowser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\GhostBrowser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\GhostBrowser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\GhostBrowser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\GhostBrowser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\GhostBrowser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\GhostBrowser\Application|debug.log FileKey21=%ProgramFiles%\GhostBrowser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\GhostBrowser\BlBeacon|failed_count RegKey2=HKCU\Software\GhostBrowser\BlBeacon|state RegKey3=HKCU\Software\GhostBrowser\Installer|LastChecked RegKey4=HKCU\Software\GhostBrowser\StabilityMetrics Tags=ccapps ID=Ghost Browser Telemetry * Author=Winapp2.ini Project [Ghost Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Ghost Browser Web Browsing Cookies * Author=Winapp2.ini Project [Ghost Browser Web Browsing History *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Ghost Browser Web Browsing History * Author=Winapp2.ini Project [Ghost Browser Web Browsing Session *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\GhostBrowser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Ghost Browser Web Browsing Session * Author=Winapp2.ini Project [Ghost Browser Web Storage *] DetectFile=%LocalAppData%\GhostBrowser\User Data FileKey1=%LocalAppData%\GhostBrowser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\GhostBrowser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\GhostBrowser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\GhostBrowser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\GhostBrowser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\GhostBrowser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\GhostBrowser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\GhostBrowser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Ghost Browser Web Storage * Author=Winapp2.ini Project [Ghostbuster *] DetectFile=%AppData%\Ghostbuster FileKey1=%AppData%\Ghostbuster|*|REMOVESELF Tags=ccapps ID=Ghostbuster * Author=Winapp2.ini Project [GhostMouse *] DetectFile=%ProgramFiles%\GhostMouse FileKey1=%UserProfile%\Documents\AutomaticSolution Software\GhostMouse\conf\temp|*.tmp Tags=ccutil ID=GhostMouse * Author=Winapp2.ini Project [GIGABYTE *] DetectFile1=%ProgramFiles%\GIGABYTE\EasyTuneEngineService DetectFile2=%ProgramFiles%\GIGABYTE\RGBFusion FileKey1=%ProgramFiles%\GIGABYTE\EasyTuneEngineService|logFile.txt FileKey2=%ProgramFiles%\GIGABYTE\RGBFusion\AtiTool|*.log Tags=ccutil ID=GIGABYTE * Author=Winapp2.ini Project [GIGABYTE ControlCenter *] DetectFile1=%ProgramFiles%\ControlCenter DetectFile2=%ProgramFiles%\GIGABYTE\Control Center FileKey1=%AppData%\GCC\EBWebView|*.pma FileKey2=%AppData%\GCC\EBWebView\*Cache*|*|REMOVESELF FileKey3=%AppData%\GCC\EBWebView\BrowserMetrics|*|REMOVESELF FileKey4=%AppData%\GCC\EBWebView\Crashpad\reports|* FileKey5=%AppData%\GCC\EBWebView\Default*|*|REMOVESELF FileKey6=%AppData%\GCC\EBWebView\SmartScreen|*|RECURSE FileKey7=%ProgramFiles%\ControlCenter|erLog.txt FileKey8=%ProgramFiles%\GIGABYTE\Control Center|*Eventlog*.txt FileKey9=%ProgramFiles%\GIGABYTE\Control Center\logs|* Tags=ccutil ID=GIGABYTE ControlCenter * Author=Winapp2.ini Project [GIGABYTE EasyTune6 *] DetectFile=%ProgramFiles%\A58-Easytune6 FileKey1=%ProgramFiles%\A58-Easytune6|*.log Tags=ccutil ID=GIGABYTE EasyTune6 * Author=Winapp2.ini Project [Gigantic *] DetectFile=%UserProfile%\Documents\My Games\Gigantic FileKey1=%UserProfile%\Documents\My Games\Gigantic\RxGame\Logs|*.dmg;*.log|RECURSE Tags=ccapps ID=Gigantic * Author=Winapp2.ini Project [GigaTribe *] Detect=HKCU\Software\ShalSoft\GigaTribe FileKey1=%LocalAppData%\Shalsoft\Gigatribe\*\re*sources|*|RECURSE Tags=ccinternet ID=GigaTribe * Author=Winapp2.ini Project [GIMP *] DetectFile1=%LocalAppData%\GIMP DetectFile2=%UserProfile%\.gimp-* FileKey1=%LocalAppData%|recently-used.xbel FileKey2=%LocalAppData%\GIMP\*\CrashLog|*|RECURSE FileKey3=%LocalAppData%\GIMP\*\tmp|*|RECURSE FileKey4=%LocalAppData%\webkit|*|REMOVESELF FileKey5=%UserProfile%\.gegl-*|documents FileKey6=%UserProfile%\.gimp-*|documents FileKey7=%UserProfile%\.gimp-*\tmp|*|RECURSE FileKey8=%UserProfile%\.thumbnails\normal|*|RECURSE Tags=ccapps ID=GIMP * Author=Winapp2.ini Project [Ginger *] DetectFile=%ProgramFiles%\Ginger FileKey1=%ProgramFiles%\Ginger|*.log;*.tmp|RECURSE FileKey2=%SystemDrive%|GingerSetup.log Tags=ccapps ID=Ginger * Author=Winapp2.ini Project [GitHub Desktop *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\GitHubDesktop DetectFile=%LocalAppData%\GitHub FileKey1=%AppData%\GitHub*Desktop\*Cache|*|REMOVESELF FileKey2=%AppData%\GitHub*Desktop\logs|*|REMOVESELF FileKey3=%LocalAppData%\GitHub|*.log;*log.txt|RECURSE FileKey4=%LocalAppData%\GitHubDesktop|*.log FileKey5=%LocalAppData%\GitHubDesktop\packages\SquirrelTemp|*|REMOVESELF Tags=ccinternet ID=GitHub Desktop * Author=Winapp2.ini Project [Gizmo *] DetectFile=%AppData%\Gizmo FileKey1=%AppData%\Gizmo|mru.xml Tags=ccapps ID=Gizmo * Author=Winapp2.ini Project [Glary Utilities *] Detect=HKCU\Software\GlarySoft\Glary Utilities 5 FileKey1=%AppData%\GlarySoft\Glary Utilities\Backups|* FileKey2=%CommonProgramFiles%\Glarysoft\StartupManager\1.0\Log|* RegKey1=HKCU\Software\GlarySoft\Glary Utilities 5\RegistryRepair|History Tags=ccutil ID=Glary Utilities * Author=Winapp2.ini Project [Global Delight Technologies Boom 3D *] DetectFile=%LocalAppData%\Packages\GlobalDelightTechnologies.Boom3D_b7pwcagxvespy FileKey1=%LocalAppData%\Packages\GlobalDelightTechnologies.Boom3D_b7pwcagxvespy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\GlobalDelightTechnologies.Boom3D_b7pwcagxvespy\Settings|*.log* FileKey3=%LocalAppData%\Packages\GlobalDelightTechnologies.Boom3D_b7pwcagxvespy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\GlobalDelightTechnologies.Boom3D_b7pwcagxvespy\TempState|*|REMOVESELF FileKey5=%ProgramData%\BoomLogs|* Tags=ccmedia ID=Global Delight Technologies Boom 3D * Author=Winapp2.ini Project [Globus Privacy *] DetectFile=%ProgramData%\Globus Privacy FileKey1=%ProgramData%\Globus Privacy\install_log|*.log Tags=ccinternet ID=Globus Privacy * Author=Winapp2.ini Project [GMote *] DetectFile=%AppData%\Gmote FileKey1=%AppData%\Gmote|*.log Tags=ccutil ID=GMote * Author=Winapp2.ini Project [GNU *] Detect=HKCU\Software\GNU FileKey1=%LocalAppData%\GNU\Cache\*|*|RECURSE FileKey2=%WinDir%\System32\config\systemprofile\AppData\Local\Gnu\Cache|*|RECURSE FileKey3=%WinDir%\System32\config\systemprofile\local settings\application data\gnu\cache|*|RECURSE FileKey4=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\GNU\Cache|*|RECURSE Tags=ccapps ID=GNU * Author=Winapp2.ini Project [GnuCash *] Detect=HKCU\Software\GSettings\org\gnucash FileKey1=%UserProfile%\*|*.gnucash.*.gnucash;*.gnucash.*.log;translog.*.log|RECURSE RegKey1=HKCU\Software\GSettings\org\gnucash\history Tags=ccapps ID=GnuCash * Author=Winapp2.ini Project [Goalscape *] DetectFile=%ProgramFiles%\GoalScape FileKey1=%AppData%\com.goalscape.app.*\Logging|*|RECURSE Tags=ccapps ID=Goalscape * Author=Winapp2.ini Project [Goat Simulator *] Detect=HKCU\Software\Valve\Steam\Apps\265930 FileKey1=%UserProfile%\Documents\my games\GoatSim\GoatGame\Logs|* Tags=ccapps ID=Goat Simulator * Author=Winapp2.ini Project [GOG Galaxy *] Detect=HKCU\Software\GOG.com\Galaxy FileKey1=%ProgramData%\GOG.com\Galaxy\crashdumps|*|REMOVESELF FileKey2=%ProgramData%\GOG.com\Galaxy\jump-list-cache|*|REMOVESELF FileKey3=%ProgramData%\GOG.com\Galaxy\logs|* FileKey4=%ProgramData%\GOG.com\Galaxy\temp\desktop-galaxy-updater|*|REMOVESELF FileKey5=%ProgramData%\GOG.com\Galaxy\webcache\*\epic|*|RECURSE FileKey6=%ProgramData%\GOG.com\Galaxy\webcache\*\gog|*|RECURSE FileKey7=%ProgramData%\GOG.com\Galaxy\webcache\*\steam|*|RECURSE FileKey8=%ProgramData%\GOG.com\Galaxy\webcache\*\user|*|REMOVESELF FileKey9=%ProgramData%\GOG.com\Galaxy\webcache\*\xboxone|*|RECURSE FileKey10=%ProgramData%\GOG.com\Galaxy\webcache\common|Cookies*QuotaManager;Visited Links FileKey11=%ProgramData%\GOG.com\Galaxy\webcache\common\*cache*|REMOVESELF FileKey12=%ProgramData%\GOG.com\Galaxy\webcache\common\Service Worker|REMOVESELF Tags=ccapps ID=GOG Galaxy * Author=Winapp2.ini Project [Going Under *] Detect=HKCU\Software\Valve\Steam\Apps\1154810 FileKey1=%UserProfile%\AppData\LocalLow\Aggro Crab\Going Under|output_log.txt FileKey2=%UserProfile%\AppData\LocalLow\Aggro Crab\Going Under\Unity|*|REMOVESELF Tags=ccapps ID=Going Under * Author=Winapp2.ini Project [GoldenCheetah *] DetectFile=%LocalAppData%\GoldenCheetah FileKey1=%LocalAppData%\GoldenCheetah\*\Logs|* Tags=ccapps ID=GoldenCheetah * Author=Winapp2.ini Project [GoldKey Acellus *] DetectFile=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry FileKey1=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey66=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\Settings|*.log* FileKey67=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\SystemAppData\Helium|*.log* FileKey68=%LocalAppData%\Packages\GoldKeyCorporation.Acellus_v2rn50m687qry\TempState|*|REMOVESELF Tags=ccapps ID=GoldKey Acellus * Author=Winapp2.ini Project [Gom Player *] Detect=HKCU\Software\GRETECH\GomPlayer FileKey1=%AppData%\GRETECH\GomPlayer|*.bmk FileKey2=%SystemDrive%|nsispromotion_log.txt RegKey1=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentPLFolder Tags=ccmedia ID=Gom Player * Author=Winapp2.ini Project [Goodix Fingerprint Driver *] DetectFile=%ProgramData%\Goodix FileKey1=%ProgramData%\Goodix|*.bak;*.log Tags=ccutil ID=Goodix Fingerprint Driver * Author=Winapp2.ini Project [GoodSync *] Detect=HKCU\Software\Siber Systems\GoodSync FileKey1=%AppData%\GoodSync|*.log|RECURSE FileKey2=%UserProfile%\Documents\_gsdata_|*.log|RECURSE Tags=ccutil ID=GoodSync * Author=Winapp2.ini Project [Google App *] DetectFile=%LocalAppData%\Google\Google FileKey1=%LocalAppData%\Google\Google\Crashpad|*|RECURSE FileKey2=%LocalAppData%\Google\Google\WebView2|*|REMOVESELF Tags=ccinternet ID=Google App * Author=Winapp2.ini Project [Google Apps Sync *] DetectFile=%LocalAppData%\Google\Google Apps* FileKey1=%AppData%\Google\Google Apps*|*.log|RECURSE FileKey2=%AppData%\Google\Identity|*.txt FileKey3=%LocalAppData%\Google\Google Apps*|*.log|RECURSE Tags=ccinternet ID=Google Apps Sync * Author=Winapp2.ini Project [Google Chrome Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|*Web Data FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Google\Chrome*\User Data\AutoFill*|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Google Chrome Autoplay Preferences *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\MEIPreload|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Autoplay Preferences * Author=Winapp2.ini Project [Google Chrome Bookmark Backups *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|Bookmarks.bak Tags=Google,Chrome,Browser ID=Google Chrome Bookmark Backups * Author=Winapp2.ini Project [Google Chrome Bookmark Favicons *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|favicons* Tags=Google,Chrome,Browser ID=Google Chrome Bookmark Favicons * Author=Winapp2.ini Project [Google Chrome Caches *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Google\Chrome*\User Data|Module Info Cache FileKey3=%LocalAppData%\Google\Chrome*\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Google\Chrome*\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Google\Chrome*\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Google\Chrome*\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Google\Chrome*\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Google\Chrome*\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Google\Chrome*\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Google\Chrome*\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Google\Chrome*\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Google\Chrome*\User Data\*\Search Logos|*|REMOVESELF FileKey14=%LocalAppData%\Google\Chrome*\User Data\*\Service Worker|*|REMOVESELF FileKey15=%LocalAppData%\Google\Chrome*\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%LocalAppData%\Google\Chrome*\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\Google\Chrome*\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\Google\Chrome*\User Data\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\Google\Chrome*\User Data\Avatars|*|REMOVESELF FileKey20=%LocalAppData%\Google\Chrome*\User Data\Optimization*|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Caches * Author=Winapp2.ini Project [Google Chrome Default App Handlers *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|PreferredApps Tags=Google,Chrome,Browser ID=Google Chrome Default App Handlers * Author=Winapp2.ini Project [Google Chrome Download History *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\shared_proto_db|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Download History * Author=Winapp2.ini Project [Google Chrome DRM Data *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Google\Chrome*\User Data\WidevineCdm|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome DRM Data * Author=Winapp2.ini Project [Google Chrome Extension Cookies *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|Extension Cookies Tags=Google,Chrome,Browser ID=Google Chrome Extension Cookies * Author=Winapp2.ini Project [Google Chrome Pinned Tabs *] DetectFile=%LocalAppData%\Google\Chrome* RegKey1=HKCU\Software\Google\Chrome Beta\PreferenceMACs\Default|pinned_tabs RegKey2=HKCU\Software\Google\Chrome Dev\PreferenceMACs\Default|pinned_tabs RegKey3=HKCU\Software\Google\Chrome SxS\PreferenceMACs\Default|pinned_tabs RegKey4=HKCU\Software\Google\Chrome\PreferenceMACs\Default|pinned_tabs Tags=Google,Chrome,Browser ID=Google Chrome Pinned Tabs * Author=Winapp2.ini Project [Google Chrome Privacy Sandbox *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data|*first_party_sets* FileKey2=%LocalAppData%\Google\Chrome*\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Google\Chrome*\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Google\Chrome*\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Google\Chrome*\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Google\Chrome*\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Google\Chrome*\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Google\Chrome*\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Privacy Sandbox * Author=Winapp2.ini Project [Google Chrome Progressive Web Apps *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\Web Applications|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Progressive Web Apps * Author=Winapp2.ini Project [Google Chrome Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|Login Data* Tags=Google,Chrome,Browser ID=Google Chrome Saved Usernames & Passwords * Author=Winapp2.ini Project [Google Chrome Security & Threat Detection *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|DIPS* FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Google\Chrome*\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Google\Chrome*\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Google\Chrome*\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Google\Chrome*\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Google\Chrome*\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Google\Chrome*\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Google\Chrome*\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Google\Chrome*\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Google\Chrome*\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Google\Chrome*\User Data\ZxcvbnData|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Security & Threat Detection * Author=Winapp2.ini Project [Google Chrome Shopping Insights *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Google\Chrome*\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Google\Chrome*\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Google\Chrome*\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Shopping Insights * Author=Winapp2.ini Project [Google Chrome Storage Quota Manager *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|QuotaManager Tags=Google,Chrome,Browser ID=Google Chrome Storage Quota Manager * Author=Winapp2.ini Project [Google Chrome Sync Data *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\Sync Data|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Sync Data * Author=Winapp2.ini Project [Google Chrome Telemetry *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\Application|debug.log FileKey2=%LocalAppData%\Google\Chrome*\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Google\Chrome*\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Google\Chrome*\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Google\Chrome*\User Data\*|*.log FileKey6=%LocalAppData%\Google\Chrome*\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Google\Chrome*\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Google\Chrome*\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Google\Chrome*\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Google\Chrome*\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Google\Chrome*\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Google\Chrome*\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Google\Chrome*\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Google\Chrome*\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Google\Chrome*\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Google\Chrome*\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Google\Chrome*\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Google\Chrome*\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Google\Chrome*\Application|debug.log FileKey21=%ProgramFiles%\Google\Chrome*\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Google\Chrome Beta\BlBeacon|failed_count RegKey2=HKCU\Software\Google\Chrome Beta\BlBeacon|state RegKey3=HKCU\Software\Google\Chrome Beta\Installer|LastChecked RegKey4=HKCU\Software\Google\Chrome Beta\StabilityMetrics RegKey5=HKCU\Software\Google\Chrome Dev\BlBeacon|failed_count RegKey6=HKCU\Software\Google\Chrome Dev\BlBeacon|state RegKey7=HKCU\Software\Google\Chrome Dev\Installer|LastChecked RegKey8=HKCU\Software\Google\Chrome Dev\StabilityMetrics RegKey9=HKCU\Software\Google\Chrome SxS\BlBeacon|failed_count RegKey10=HKCU\Software\Google\Chrome SxS\BlBeacon|state RegKey11=HKCU\Software\Google\Chrome SxS\Installer|LastChecked RegKey12=HKCU\Software\Google\Chrome SxS\StabilityMetrics RegKey13=HKCU\Software\Google\Chrome\BlBeacon|failed_count RegKey14=HKCU\Software\Google\Chrome\BlBeacon|state RegKey15=HKCU\Software\Google\Chrome\Installer|LastChecked RegKey16=HKCU\Software\Google\Chrome\StabilityMetrics Tags=Google,Chrome,Browser ID=Google Chrome Telemetry * Author=Winapp2.ini Project [Google Chrome Web Browsing Cookies *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Google,Chrome,Browser ID=Google Chrome Web Browsing Cookies * Author=Winapp2.ini Project [Google Chrome Web Browsing History *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Google,Chrome,Browser ID=Google Chrome Web Browsing History * Author=Winapp2.ini Project [Google Chrome Web Browsing Session *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\Sessions|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Web Browsing Session * Author=Winapp2.ini Project [Google Chrome Web Storage *] DetectFile=%LocalAppData%\Google\Chrome* FileKey1=%LocalAppData%\Google\Chrome*\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Google\Chrome*\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Google\Chrome*\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Google\Chrome*\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Google\Chrome*\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Google\Chrome*\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Google\Chrome*\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Google\Chrome*\User Data\*\WebStorage|*|REMOVESELF Tags=Google,Chrome,Browser ID=Google Chrome Web Storage * Author=Winapp2.ini Project [Google Drive *] Detect=HKCU\Software\Google\Drive DetectFile=%ProgramFiles%\Google\Drive FileKey1=%LocalAppData%\Google\Drive|*.log FileKey2=%LocalAppData%\Google\Drive Plugin for Office|*.log FileKey3=%LocalAppData%\Google\Drive Plugin for Office\Logs|*.log* FileKey4=%LocalAppData%\Google\Drive\CrashReports|*|RECURSE FileKey5=%LocalAppData%\Google\Drive\User_Default|*.log FileKey6=%LocalAppData%\Google\Drive\User_Default\TempData|*|RECURSE FileKey7=%LocalAppData%\Google\Drive\User_Default\UsageStatistics|* FileKey8=%LocalAppData%\Google\drivefs\*\Content_Cache|*|RECURSE FileKey9=%LocalAppData%\Google\drivefs\*\Thumbnails_Cache|*|RECURSE FileKey10=%LocalAppData%\Google\drivefs\Cef_Cache|*.old;LOG|RECURSE FileKey11=%LocalAppData%\Google\drivefs\Cef_Cache\*cache|*|RECURSE FileKey12=%LocalAppData%\Google\drivefs\Crashpad\Reports|*.dmp FileKey13=%LocalAppData%\Google\drivefs\Logs|* FileKey14=%LocalAppData%\Google\Identity|ClientMigration*.txt FileKey15=%ProgramFiles%\Google\Drive|*.log Tags=ccutil ID=Google Drive * Author=Winapp2.ini Project [Google Earth *] DetectFile=%UserProfile%\AppData\LocalLow\Google\GoogleEarth FileKey1=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*|REMOVESELF FileKey2=%ProgramFiles%\Google\GoogleEarth\client|*.log FileKey3=%UserProfile%\AppData\LocalLow\Google\GoogleEarth|*.log;*.tmp|RECURSE FileKey4=%UserProfile%\AppData\LocalLow\Google\GoogleEarth\Cache|*|RECURSE Tags=ccapps ID=Google Earth * Author=Winapp2.ini Project [Google Quick Share *] DetectFile1=%LocalAppData%\Nearby DetectFile2=%LocalAppData%\Packages\NearbyShare_21hpf16v5xp10 FileKey1=%LocalAppData%\Nearby\Sharing\*log*|*|REMOVESELF FileKey2=%LocalAppData%\Nearby\Sharing\CrashDumps|*|REMOVESELF FileKey3=%LocalAppData%\Packages\NearbyShare_21hpf16v5xp10\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\NearbyShare_21hpf16v5xp10\Settings|*.log* FileKey5=%LocalAppData%\Packages\NearbyShare_21hpf16v5xp10\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\NearbyShare_21hpf16v5xp10\TempState|*|REMOVESELF FileKey7=%ProgramData%\Google\Nearby\Sharing\CrashDumps|* FileKey8=%SystemDrive%\Users\Default\AppData\Local\Google\Nearby\Sharing\Logs|*.log FileKey9=%WinDir%\System32\config\systemprofile\AppData\Local\Google\Nearby\Sharing\Logs|* Tags=ccinternet ID=Google Quick Share * Author=Winapp2.ini Project [Google Updater *] DetectFile1=%LocalAppData%\Google\GoogleUpdater DetectFile2=%ProgramFiles%\Google\GoogleUpdater FileKey1=%LocalAppData%\Google\GoogleUpdater|*.log* FileKey2=%ProgramFiles%\Google\GoogleUpdater|updater.log* FileKey3=%ProgramFiles%\Google\GoogleUpdater\*\Crashpad|*|RECURSE FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Google\GoogleUpdater|*.log FileKey5=%WinDir%\System32\config\systemprofile\AppData\Local\Google\GoogleUpdater\*\Crashpad|*|RECURSE FileKey6=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Google\GoogleUpdater|updater.log FileKey7=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Google\GoogleUpdater\*\Crashpad|*|RECURSE Tags=ccinternet ID=Google Updater * Author=Winapp2.ini Project [GoPlayer *] DetectFile=%ProgramFiles%\GoPlayer FileKey1=%ProgramFiles%\GoPlayer|*.log Tags=ccmedia ID=GoPlayer * Author=Winapp2.ini Project [Gothic 3 *] Detect=HKCU\Software\JoWooD Productions Software AG\Gothic III FileKey1=%ProgramFiles%\Gothic III|setup*.txt Tags=ccapps ID=Gothic 3 * Author=Winapp2.ini Project [GradeKeeper *] Detect=HKCU\Software\Gradekeeper FileKey1=%AppData%\Gradekeeper|* Tags=ccapps ID=GradeKeeper * Author=Winapp2.ini Project [Grammarly *] DetectFile=%AppData%\Grammarly FileKey1=%AppData%\Grammarly\DesktopIntegrations\WebViewUserDataFolder\EBWebView|*.pma FileKey2=%AppData%\Grammarly\DesktopIntegrations\WebViewUserDataFolder\EBWebView\*Cache|*|RECURSE FileKey3=%AppData%\Grammarly\DesktopIntegrations\WebViewUserDataFolder\EBWebView\Default|*.log FileKey4=%AppData%\Grammarly\DesktopIntegrations\WebViewUserDataFolder\EBWebView\Default\*Cache|*|RECURSE Tags=ccutil ID=Grammarly * Author=Winapp2.ini Project [Grand Theft Auto *] DetectFile=%ProgramFiles%\GTA* FileKey1=%ProgramFiles%\GTA*\Test|*.log Tags=ccapps ID=Grand Theft Auto * Author=Winapp2.ini Project [Graphisoft BIMx *] DetectFile1=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt DetectFile2=%UserProfile%\Documents\BIMx FileKey1=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\LocalCache\Local\GRAPHISOFT\BIMx Desktop Viewer|open_recent.list FileKey3=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\LocalCache\Roaming\BIMx\*Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\Settings|*.log* FileKey5=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\GraphisoftSE.21795B871412D_ry7td4y6vfzjt\TempState|*|REMOVESELF FileKey7=%UserProfile%\Documents\BIMx|*_Log.txt Tags=ccapps ID=Graphisoft BIMx * Author=Winapp2.ini Project [Gratuitous Space Battles *] Detect=HKCU\Software\Valve\Steam\Apps\41800 FileKey1=%ProgramFiles%\Steam\Steamapps\common\gratuitous space battles\data\temp|*|RECURSE FileKey2=%UserProfile%\Documents\My Games\GratuitousSpaceBattles\debug|* Tags=ccapps ID=Gratuitous Space Battles * Author=Winapp2.ini Project [Green Ranch *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Green RanchFINAL FileKey1=%AppData%\Palaplay\GreenRanch_Survey|*.txt Tags=ccapps ID=Green Ranch * Author=Winapp2.ini Project [Greenfish Icon Editor Pro *] DetectFile=%LocalAppData%\gfie FileKey1=%LocalAppData%\gfie|recent.txt Tags=ccapps ID=Greenfish Icon Editor Pro * Author=Winapp2.ini Project [Greenshot *] DetectFile=%LocalAppData%\Greenshot FileKey1=%LocalAppData%\Greenshot|*.log* Tags=ccutil ID=Greenshot * Author=Winapp2.ini Project [grepWin *] Detect=HKCU\Software\grepWin RegKey1=HKCU\Software\grepWin|searchpath RegKey2=HKCU\Software\grepWin\History Tags=ccutil ID=grepWin * Author=Winapp2.ini Project [GridinSoft Notepad *] Detect=HKCU\Software\GridinSoft\Notepad3 RegKey1=HKCU\Software\GridinSoft\Notepad3\Files RegKey2=HKCU\Software\GridinSoft\Notepad3\Search|ReplaceTextHistory RegKey3=HKCU\Software\GridinSoft\Notepad3\Search|TextHistory Tags=ccapps ID=GridinSoft Notepad * Author=Winapp2.ini Project [Grim Tales: The Wishes CE *] DetectFile=%AppData%\Elephant Games\Grim Tales The Wishes CE FileKey1=%AppData%\Elephant Games\Grim Tales The Wishes CE|logfile.txt Tags=ccapps ID=Grim Tales: The Wishes CE * Author=Winapp2.ini Project [GroupWise Messenger *] Detect=HKCU\Software\Novell\Messenger FileKey1=%LocalAppData%\Novell\GroupWise Messenger\history\%UserName%|* Tags=ccapps ID=GroupWise Messenger * Author=Winapp2.ini Project [Growl *] Detect=HKCU\Software\Growl FileKey1=%LocalAppData%\Growl\*\History|*|RECURSE FileKey2=%LocalAppData%\Growl\*\ImageCache|*|RECURSE FileKey3=%LocalAppData%\Growl\*\Log|*|RECURSE Tags=ccutil ID=Growl * Author=Winapp2.ini Project [GS RichCopy 360 *] DetectFile=%ProgramFiles%\GuruSquad\GS RichCopy 360 FileKey1=%ProgramData%|Microsoft.SqlServer.Compact.400.*.bc FileKey2=%ProgramFiles%\GuruSquad\GS RichCopy 360\Log|* FileKey3=%SystemDrive%\GSRichCopy360Log|*|RECURSE Tags=ccutil ID=GS RichCopy 360 * Author=Winapp2.ini Project [GSpot *] Detect=HKCU\Software\GSpot Appliance Corp RegKey1=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportFile RegKey2=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportNameOfFileForFormat RegKey3=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportPath RegKey4=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|LastMediaFile Tags=ccutil ID=GSpot * Author=Winapp2.ini Project [gSyncit *] DetectFile=%AppData%\gSyncit FileKey1=%AppData%\gSyncit|gsyncit*.* Tags=ccinternet ID=gSyncit * Author=Winapp2.ini Project [GT Interactive Driver *] DetectFile=%ProgramFiles%\GT Interactive\Driver FileKey1=%ProgramFiles%\GT Interactive\Driver|debug.log Tags=ccapps ID=GT Interactive Driver * Author=Winapp2.ini Project [Guild Wars *] DetectFile=%ProgramFiles%\Guild Wars* FileKey1=%AppData%\Guild Wars*\Coherent Dumps|* FileKey2=%ProgramFiles%\Guild Wars*|*.tmp Tags=ccapps ID=Guild Wars * Author=Winapp2.ini Project [Gwent - The Witcher Card Game *] Detect=HKCU\Software\CDProjektRED\Gwent DetectFile=%UserProfile%\AppData\LocalLow\CDProjektRED\Gwent FileKey1=%ProgramData%\CDProjekt RED\Gwent\Logs|*.log FileKey2=%UserProfile%\AppData\LocalLow\CDProjektRED\Gwent|*_log.txt Tags=ccapps ID=Gwent - The Witcher Card Game * Author=Winapp2.ini Project [Hacknet *] Detect=HKCU\Software\Valve\Steam\Apps\365450 FileKey1=%UserProfile%\Documents\My Games\Hacknet\Reports|*.txt Tags=ccapps ID=Hacknet * Author=Winapp2.ini Project [Halite *] DetectFile=%LocalAppData%\Halite FileKey1=%LocalAppData%\Halite|Halite.xml.*;HaliteLog.txt|RECURSE Tags=ccapps ID=Halite * Author=Winapp2.ini Project [Halls of Torment *] Detect=HKCU\Software\Valve\Steam\Apps\2218750 FileKey1=%AppData%\HallsOfTorment\crashes|* FileKey2=%AppData%\HallsOfTorment\logs|* Tags=ccapps ID=Halls of Torment * Author=Winapp2.ini Project [Halo: Spartan Assault *] DetectFile=%LocalAppData%\Packages\Microsoft.HaloSpartanAssault_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.HaloSpartanAssault_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.HaloSpartanAssault_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.HaloSpartanAssault_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.HaloSpartanAssault_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Halo: Spartan Assault * Author=Winapp2.ini Project [Hancom Office *] DetectFile=%AppData%\HNC\Office FileKey1=%AppData%\HNC\Office\Recent|*.lnk Tags=ccapps ID=Hancom Office * Author=Winapp2.ini Project [HandBrake *] DetectFile=%ProgramFiles%\HandBrake FileKey1=%AppData%\HandBrake\HandBrake\*|*.tmp FileKey2=%AppData%\HandBrake\logs|*|REMOVESELF FileKey3=%ProgramFiles%\HandBrake|*.stackdump Tags=ccapps ID=HandBrake * Author=Winapp2.ini Project [Handle Regshot *] DetectFile=%SystemDrive%\Hive FileKey1=%SystemDrive%\Hive|*.css;*.hive;*.html;*.reg Tags=ccutil ID=Handle Regshot * Author=Winapp2.ini Project [Handy Backup *] Detect=HKCU\Software\Novosoft\Handy Backup FileKey1=%AppData%\Novosoft\Handy Backup\logs|* Tags=ccutil ID=Handy Backup * Author=Winapp2.ini Project [Happy Cloud *] Detect=HKCU\Software\HappyCloud FileKey1=%ProgramData%\HappyCloud|*.log FileKey2=%ProgramData%\HappyCloud\cache|* Tags=ccapps ID=Happy Cloud * Author=Winapp2.ini Project [Hard Disk Sentinel *] DetectFile=%ProgramFiles%\Hard Disk Sentinel FileKey1=%ProgramFiles%\Hard Disk Sentinel|*.bak;*Log.txt Tags=ccutil ID=Hard Disk Sentinel * Author=Winapp2.ini Project [Hard Drive Inspector *] DetectFile=%ProgramData%\AltrixSoft\Hard Drive Inspector FileKey1=%ProgramData%\AltrixSoft\Hard Drive Inspector|log.err Tags=ccutil ID=Hard Drive Inspector * Author=Winapp2.ini Project [Hauppauge WinTV *] Detect=HKLM\Software\Hauppauge FileKey1=%Public%\WinTV|Settings-old.xml FileKey2=%Public%\WinTV\Channel Database|hcwChanDB_5-lastgood.mdb FileKey3=%Public%\WinTV\Installation Log|*|RECURSE FileKey4=%Public%\WinTV\Logs|*.log;*.txt FileKey5=%Public%\WinTV\Logs\minidump|*|RECURSE FileKey6=%SystemDrive%|hcwDriverInstall.txt Tags=ccutil ID=Hauppauge WinTV * Author=Winapp2.ini Project [HDCleaner *] DetectFile=%ProgramFiles%\HDCleaner FileKey1=%ProgramFiles%\HDCleaner\Settings\Stats|*.ini Tags=ccutil ID=HDCleaner * Author=Winapp2.ini Project [HDD Health *] Detect=HKLM\System\CurrentControlSet\services\HDDHealth FileKey1=%ProgramFiles%\HDD Health|*.tmp Tags=ccinternet ID=HDD Health * Author=Winapp2.ini Project [HDD Regenerator *] DetectFile=%ProgramFiles%\HDD Regenerator FileKey1=%ProgramFiles%\HDD Regenerator|*.log|RECURSE Tags=ccutil ID=HDD Regenerator * Author=Winapp2.ini Project [HDD Thermometer *] Detect=HKCU\Software\RSD Software, Inc.\HDD Thermometer FileKey1=%ProgramData%\HDD Thermometer|*.log|RECURSE Tags=ccutil ID=HDD Thermometer * Author=Winapp2.ini Project [Hearthstone *] Detect=HKCU\Software\Blizzard Entertainment\Hearthstone FileKey1=%LocalAppData%\Blizzard\Hearthstone\Cache|*|RECURSE FileKey2=%LocalAppData%\Blizzard\Hearthstone\Logs|* FileKey3=%ProgramFiles%\Hearthstone|*.dmp;*.log;*log.txt|RECURSE Tags=ccapps ID=Hearthstone * Author=Winapp2.ini Project [Hearts of Iron IV *] DetectFile=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV FileKey1=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\_backup_*|*|REMOVESELF FileKey2=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\Cache|* FileKey3=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\Crashes|*|REMOVESELF FileKey4=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\Dumps|* FileKey5=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\History_Dumps|* FileKey6=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\Logs|* FileKey7=%UserProfile%\Documents\Paradox Interactive\Hearts of Iron IV\ShaderCache|*|RECURSE Tags=ccapps ID=Hearts of Iron IV * Author=Winapp2.ini Project [Heatsoft Handy File Tool *] DetectFile=%UserProfile%\Documents\HFT FileKey1=%UserProfile%\Documents\HFT\Logs|* Tags=ccutil ID=Heatsoft Handy File Tool * Author=Winapp2.ini Project [Hedgewars *] Detect=HKLM\Software\Hedgewars FileKey1=%UserProfile%\Documents\Hedgewars\Logs|* FileKey2=%UserProfile%\Documents\Hedgewars\VideoTemp|* Tags=ccapps ID=Hedgewars * Author=Winapp2.ini Project [Helium Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|*Web Data FileKey2=%LocalAppData%\imput\Helium\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\imput\Helium\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Helium Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Helium Autoplay Preferences *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Helium Autoplay Preferences * Author=Winapp2.ini Project [Helium Bookmark Backups *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|Bookmarks.bak Tags=ccapps ID=Helium Bookmark Backups * Author=Winapp2.ini Project [Helium Bookmark Favicons *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|favicons* Tags=ccapps ID=Helium Bookmark Favicons * Author=Winapp2.ini Project [Helium Caches *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\imput\Helium\User Data|Module Info Cache FileKey3=%LocalAppData%\imput\Helium\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\imput\Helium\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\imput\Helium\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\imput\Helium\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\imput\Helium\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\imput\Helium\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\imput\Helium\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\imput\Helium\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\imput\Helium\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\imput\Helium\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\imput\Helium\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\imput\Helium\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\imput\Helium\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\imput\Helium\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\imput\Helium\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\imput\Helium\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\imput\Helium\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Helium Caches * Author=Winapp2.ini Project [Helium Default App Handlers *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|PreferredApps Tags=ccapps ID=Helium Default App Handlers * Author=Winapp2.ini Project [Helium Download History *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\imput\Helium\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Helium Download History * Author=Winapp2.ini Project [Helium DRM Data *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\imput\Helium\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Helium DRM Data * Author=Winapp2.ini Project [Helium Extension Cookies *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|Extension Cookies Tags=ccapps ID=Helium Extension Cookies * Author=Winapp2.ini Project [Helium Music Manager *] DetectFile=%AppData%\Intermedia Software\Helium * FileKey1=%AppData%\Intermedia Software\Helium *\Logs|* Tags=ccmedia ID=Helium Music Manager * Author=Winapp2.ini Project [Helium Privacy Sandbox *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data|*first_party_sets* FileKey2=%LocalAppData%\imput\Helium\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\imput\Helium\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\imput\Helium\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\imput\Helium\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\imput\Helium\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\imput\Helium\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\imput\Helium\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Helium Privacy Sandbox * Author=Winapp2.ini Project [Helium Progressive Web Apps *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Helium Progressive Web Apps * Author=Winapp2.ini Project [Helium Saved Usernames & Passwords *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|Login Data* Tags=ccapps ID=Helium Saved Usernames & Passwords * Author=Winapp2.ini Project [Helium Security & Threat Detection *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|DIPS* FileKey2=%LocalAppData%\imput\Helium\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\imput\Helium\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\imput\Helium\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\imput\Helium\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\imput\Helium\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\imput\Helium\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\imput\Helium\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\imput\Helium\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\imput\Helium\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\imput\Helium\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\imput\Helium\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Helium Security & Threat Detection * Author=Winapp2.ini Project [Helium Shopping Insights *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\imput\Helium\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\imput\Helium\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\imput\Helium\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\imput\Helium\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Helium Shopping Insights * Author=Winapp2.ini Project [Helium Storage Quota Manager *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|QuotaManager Tags=ccapps ID=Helium Storage Quota Manager * Author=Winapp2.ini Project [Helium Sync Data *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Helium Sync Data * Author=Winapp2.ini Project [Helium Telemetry *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\Application|debug.log FileKey2=%LocalAppData%\imput\Helium\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\imput\Helium\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\imput\Helium\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\imput\Helium\User Data\*|*.log FileKey6=%LocalAppData%\imput\Helium\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\imput\Helium\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\imput\Helium\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\imput\Helium\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\imput\Helium\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\imput\Helium\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\imput\Helium\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\imput\Helium\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\imput\Helium\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\imput\Helium\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\imput\Helium\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\imput\Helium\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\imput\Helium\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\imput\Helium\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\imput\Helium\Application|debug.log FileKey21=%ProgramFiles%\imput\Helium\Application\SetupMetrics|*|REMOVESELF Tags=ccapps ID=Helium Telemetry * Author=Winapp2.ini Project [Helium Web Browsing Cookies *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Helium Web Browsing Cookies * Author=Winapp2.ini Project [Helium Web Browsing History *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Helium Web Browsing History * Author=Winapp2.ini Project [Helium Web Browsing Session *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\imput\Helium\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Helium Web Browsing Session * Author=Winapp2.ini Project [Helium Web Storage *] DetectFile=%LocalAppData%\imput\Helium\User Data FileKey1=%LocalAppData%\imput\Helium\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\imput\Helium\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\imput\Helium\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\imput\Helium\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\imput\Helium\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\imput\Helium\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\imput\Helium\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\imput\Helium\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Helium Web Storage * Author=Winapp2.ini Project [herdProtect Anti-Malware Scanner *] Detect=HKCU\Software\Reason\herdProtect DetectFile=%ProgramFiles%\Reason\herdProtect\Scanner FileKey1=%ProgramFiles%\Reason\herdProtect\Scanner*|Errors.dat FileKey2=%ProgramFiles%\Reason\herdProtect\Scanner*\Cache|*|RECURSE FileKey3=%ProgramFiles%\Reason\herdProtect\Scanner*\Logs|* Tags=ccutil ID=herdProtect Anti-Malware Scanner * Author=Winapp2.ini Project [Heroes of a Broken Land *] Detect=HKCU\Software\Valve\Steam\Apps\314470 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Heroes of a Broken Land\hobl_data|output_log.txt Tags=ccapps ID=Heroes of a Broken Land * Author=Winapp2.ini Project [Heroes of Hammerwatch *] Detect=HKCU\Software\Valve\Steam\Apps\677120 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Heroes of Hammerwatch|*.log|RECURSE Tags=ccapps ID=Heroes of Hammerwatch * Author=Winapp2.ini Project [Heroes of the Storm *] Detect=HKLM\Software\Blizzard Entertainment\Heroes of the Storm FileKey1=%LocalAppData%\Blizzard Entertainment\Heroes of the Storm\BrowserCookies|*|RECURSE FileKey2=%UserProfile%\Documents\Heroes of the Storm\GameLogs|* Tags=ccapps ID=Heroes of the Storm * Author=Winapp2.ini Project [Heroic Games Launcher *] DetectFile=%AppData%\Heroic FileKey1=%AppData%\Heroic\*Cache*|REMOVESELF FileKey2=%AppData%\Heroic\icons|* FileKey3=%AppData%\Heroic\logs|* FileKey4=%AppData%\Heroic\Network|* FileKey5=%LocalAppData%\heroic-updater|*|RECURSE Tags=ccapps ID=Heroic Games Launcher * Author=Winapp2.ini Project [Hex Editor Neo *] Detect=HKCU\Software\HHD Software\Hex Editor 6.sm RegKey1=HKCU\Software\HHD Software\Hex Editor 6.sm\MRU RegKey2=HKCU\Software\HHD Software\Hex Editor 6.sm\Structure Editor|Recent RegKey3=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Diff|DiffFirstSelectedDoc RegKey4=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Diff|DiffSecondSelectedDoc RegKey5=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Disasm\Disasm|SelectedFiles RegKey6=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Disasm\Find|History RegKey7=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Disasm\Find|Patterns RegKey8=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\ExtEditor\Find|Recent RegKey9=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\ExtEditor\Replace|Recent RegKey10=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\ExtEditor\Replace|Recent2 RegKey11=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Find|History RegKey12=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Find|Patterns RegKey13=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Replace|History RegKey14=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Replace|Patterns RegKey15=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Settings|RecentMasks RegKey16=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\FindInFiles\Settings|RecentPaths RegKey17=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Arith|Recent RegKey18=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Bitwise|History RegKey19=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Bitwise|Patterns RegKey20=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Fill|History RegKey21=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Fill|Patterns RegKey22=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Find|History RegKey23=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Find|Patterns RegKey24=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Goto|Recent RegKey25=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Insert|History RegKey26=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Insert|Patterns RegKey27=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\Insert|Recent RegKey28=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\ReplaceFind|History RegKey29=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\ReplaceFind|Patterns RegKey30=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\ReplaceReplace|History RegKey31=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\ReplaceReplace|Patterns RegKey32=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\HexView\SetSize|Recent RegKey33=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\OpenDevice|Recent RegKey34=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\PSH\Pattern|History RegKey35=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\PSH\Pattern|Patterns RegKey36=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\PSH\RuleEdit|History RegKey37=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\PSH\RuleEdit|Patterns RegKey38=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Streams\Locate|Exclude RegKey39=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Streams\Locate|Masks RegKey40=HKCU\Software\HHD Software\Hex Editor 6.sm\Windows\Streams\Locate|Paths Tags=ccutil ID=Hex Editor Neo * Author=Winapp2.ini Project [Hex Workshop Hex Editor *] Detect1=HKCU\Software\BreakPoint\Hex Workshop 3.1 Detect2=HKCU\Software\BreakPoint\Hex Workshop v5 Detect3=HKCU\Software\BreakPoint\Hex Workshop v6.7 Detect4=HKCU\Software\BreakPoint\Hex Workshop v6.8 RegKey1=HKCU\Software\BreakPoint\Hex Workshop 3.1\Recent File List RegKey2=HKCU\Software\BreakPoint\Hex Workshop v5\FileGoto|lastStr RegKey3=HKCU\Software\BreakPoint\Hex Workshop v5\Paths RegKey4=HKCU\Software\BreakPoint\Hex Workshop v5\SectorGoto|lastStr RegKey5=HKCU\Software\BreakPoint\Hex Workshop v5\SelectBlock|last RegKey6=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0sourceFile RegKey7=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0sourceLength RegKey8=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0sourceOffset RegKey9=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0targetFile RegKey10=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0targetLength RegKey11=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_0targetOffset RegKey12=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|recent_MRU_count RegKey13=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|Source File RegKey14=HKCU\Software\BreakPoint\Hex Workshop v6.7\Compare|Target File RegKey15=HKCU\Software\BreakPoint\Hex Workshop v6.7\Expression Calc|LastExpression RegKey16=HKCU\Software\BreakPoint\Hex Workshop v6.7\FileGoto|goto_MRU_0 RegKey17=HKCU\Software\BreakPoint\Hex Workshop v6.7\FileGoto|goto_MRU_count RegKey18=HKCU\Software\BreakPoint\Hex Workshop v6.7\FileGoto|lastStr RegKey19=HKCU\Software\BreakPoint\Hex Workshop v6.7\Find|Value0 RegKey20=HKCU\Software\BreakPoint\Hex Workshop v6.7\Find|Value1 RegKey21=HKCU\Software\BreakPoint\Hex Workshop v6.7\LastPaths RegKey22=HKCU\Software\BreakPoint\Hex Workshop v6.7\Replace|FindString RegKey23=HKCU\Software\BreakPoint\Hex Workshop v6.7\Replace|ReplaceString RegKey24=HKCU\Software\BreakPoint\Hex Workshop v6.7\SectorGoto|goto_MRU_count RegKey25=HKCU\Software\BreakPoint\Hex Workshop v6.7\SectorGoto|lastStr RegKey26=HKCU\Software\BreakPoint\Hex Workshop v6.7\SelectBlock|last RegKey27=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0sourceFile RegKey28=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0sourceLength RegKey29=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0sourceOffset RegKey30=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0targetFile RegKey31=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0targetLength RegKey32=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_0targetOffset RegKey33=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|recent_MRU_count RegKey34=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|Source File RegKey35=HKCU\Software\BreakPoint\Hex Workshop v6.8\Compare|Target File RegKey36=HKCU\Software\BreakPoint\Hex Workshop v6.8\Expression Calc|LastExpression RegKey37=HKCU\Software\BreakPoint\Hex Workshop v6.8\FileGoto|goto_MRU_0 RegKey38=HKCU\Software\BreakPoint\Hex Workshop v6.8\FileGoto|goto_MRU_count RegKey39=HKCU\Software\BreakPoint\Hex Workshop v6.8\FileGoto|lastStr RegKey40=HKCU\Software\BreakPoint\Hex Workshop v6.8\Find|Value0 RegKey41=HKCU\Software\BreakPoint\Hex Workshop v6.8\Find|Value1 RegKey42=HKCU\Software\BreakPoint\Hex Workshop v6.8\LastPaths RegKey43=HKCU\Software\BreakPoint\Hex Workshop v6.8\Replace|FindString RegKey44=HKCU\Software\BreakPoint\Hex Workshop v6.8\Replace|ReplaceString RegKey45=HKCU\Software\BreakPoint\Hex Workshop v6.8\SectorGoto|goto_MRU_count RegKey46=HKCU\Software\BreakPoint\Hex Workshop v6.8\SectorGoto|lastStr RegKey47=HKCU\Software\BreakPoint\Hex Workshop v6.8\SelectBlock|last Tags=ccutil ID=Hex Workshop Hex Editor * Author=Winapp2.ini Project [HexChat *] DetectFile=%AppData%\HexChat FileKey1=%AppData%\HexChat\logs|*|REMOVESELF FileKey2=%AppData%\HexChat\scrollback|*|REMOVESELF Tags=ccinternet ID=HexChat * Author=Winapp2.ini Project [Hi-Rez Studios *] Detect=HKLM\Software\Hi-Rez Studios FileKey1=%ProgramData%\Hi-Rez Studios\BrowserCacheTribes\Default|*|RECURSE FileKey2=%ProgramData%\Hi-Rez Studios\HiPatchService\log|* FileKey3=%ProgramFiles%\Hi-Rez Studios\hireztemp|* FileKey4=%SystemDrive%|HiRezUpdateInstallLog.txt Tags=ccapps ID=Hi-Rez Studios * Author=Winapp2.ini Project [HiBit Uninstaller *] DetectFile=%AppData%\HiBitSoftware\HiBit Uninstaller FileKey1=%AppData%\HiBitSoftware\HiBit Uninstaller|ListCach.dbu;ListN.dbu Tags=ccutil ID=HiBit Uninstaller * Author=Winapp2.ini Project [Hide.me VPN *] DetectFile=%AppData%\Hide.me FileKey1=%AppData%\Hide.me\Logs|* Tags=ccinternet ID=Hide.me VPN * Author=Winapp2.ini Project [HistoryKill *] DetectFile=%LocalAppData%\HistoryKill FileKey1=%LocalAppData%\HistoryKill|hk.dat;reseller.txt Tags=ccutil ID=HistoryKill * Author=Winapp2.ini Project [HitmanPro *] Detect1=HKCU\Software\HitMan Pro Detect2=HKCU\Software\HitMan Pro 2 Detect3=HKCU\Software\HitMan Pro 3 Detect4=HKLM\Software\HitmanPro FileKey1=%ProgramData%\HitmanPro\Logs|* FileKey2=%ProgramFiles%\Hitman Pro*\downloads|* FileKey3=%ProgramFiles%\Hitman Pro*\logs|*.htm FileKey4=%ProgramFiles%\Hitman Pro*\updates|* FileKey5=%WinDir%\System32|HitmanPro*.log FileKey6=%WinDir%\SysWOW64|HitmanPro*.log Tags=ccutil ID=HitmanPro * Author=Winapp2.ini Project [HM NIS Edit *] Detect=HKCU\Software\HM Software\Nis Edit RegKey1=HKCU\Software\HM Software\Nis Edit\Recent Tags=ccapps ID=HM NIS Edit * Author=Winapp2.ini Project [Hob *] Detect=HKCU\Software\Valve\Steam\Apps\404680 FileKey1=%Documents%\My Games\runic games\hob|microcodecache*;ogre.log Tags=ccapps ID=Hob * Author=Winapp2.ini Project [Holiday Express *] Detect1=HKLM\Software\GameHouse\Holiday Express Detect2=HKLM\Software\HipSoft\Holiday Express FileKey1=%ProgramFiles%\GameHouse Games Collection\Holiday Express|*.txt FileKey2=%ProgramFiles%\Holiday Express|*.txt;*html Tags=ccapps ID=Holiday Express * Author=Winapp2.ini Project [Homeworld Remastered Collection *] Detect=HKCU\Software\Valve\Steam\Apps\244160 FileKey1=%ProgramFiles%\Steam\steamapps\common\Homeworld\Homeworld*\Bin\CACHE|*|RECURSE FileKey2=%ProgramFiles%\Steam\steamapps\common\Homeworld\Homeworld*\Bin\LOGFILES|* FileKey3=%ProgramFiles%\Steam\steamapps\common\Homeworld\Homeworld*\Bin\Release|*.dmp;*.log;*.mdmp;*ErrorLog.txt Tags=ccapps ID=Homeworld Remastered Collection * Author=Winapp2.ini Project [Homeworld: Deserts of Kharak Backups *] Detect=HKCU\Software\Valve\Steam\Apps\281610 FileKey1=%ProgramFiles%\Steam\steamapps\common\Deserts of Kharak\out\backup|*|RECURSE Tags=ccapps ID=Homeworld: Deserts of Kharak Backups * Author=Winapp2.ini Project [Honeyview *] Detect=HKCU\Software\Honeyview RegKey1=HKCU\Software\Honeyview|sExtProg0 RegKey2=HKCU\Software\Honeyview|sLastCheckDay RegKey3=HKCU\Software\Honeyview|transf.sFileNameHeader RegKey4=HKCU\Software\Honeyview\BMPath0 RegKey5=HKCU\Software\Honeyview\BMPath1 RegKey6=HKCU\Software\Honeyview\BMPath2 RegKey7=HKCU\Software\Honeyview\BMPath3 RegKey8=HKCU\Software\Honeyview\BMPath4 RegKey9=HKCU\Software\Honeyview\BMPath5 RegKey10=HKCU\Software\Honeyview\BMPath6 RegKey11=HKCU\Software\Honeyview\BMPath7 RegKey12=HKCU\Software\Honeyview\BMPath8 RegKey13=HKCU\Software\Honeyview\BMPath9 RegKey14=HKCU\Software\Honeyview\BMPath10 RegKey15=HKCU\Software\Honeyview\BMPath11 RegKey16=HKCU\Software\Honeyview\BMPath12 RegKey17=HKCU\Software\Honeyview\BMPath13 RegKey18=HKCU\Software\Honeyview\BMPath14 RegKey19=HKCU\Software\Honeyview\BMPath15 RegKey20=HKCU\Software\Honeyview\BMPath16 RegKey21=HKCU\Software\Honeyview\BMPath17 RegKey22=HKCU\Software\Honeyview\BMPath18 RegKey23=HKCU\Software\Honeyview\BMPath19 RegKey24=HKCU\Software\Honeyview\BMPath20 RegKey25=HKCU\Software\Honeyview\BMPath21 RegKey26=HKCU\Software\Honeyview\BMPath22 RegKey27=HKCU\Software\Honeyview\BMPath23 RegKey28=HKCU\Software\Honeyview\BMPath24 RegKey29=HKCU\Software\Honeyview\BMPath25 RegKey30=HKCU\Software\Honeyview\BMPath26 RegKey31=HKCU\Software\Honeyview\BMPath27 RegKey32=HKCU\Software\Honeyview\BMPath28 RegKey33=HKCU\Software\Honeyview\BMPath29 RegKey34=HKCU\Software\Honeyview\RecentFolder0 RegKey35=HKCU\Software\Honeyview\RecentFolder1 RegKey36=HKCU\Software\Honeyview\RecentFolder2 RegKey37=HKCU\Software\Honeyview\RecentFolder3 RegKey38=HKCU\Software\Honeyview\RecentFolder4 RegKey39=HKCU\Software\Honeyview\RecentFolder5 RegKey40=HKCU\Software\Honeyview\RecentFolder6 RegKey41=HKCU\Software\Honeyview\RecentFolder7 RegKey42=HKCU\Software\Honeyview\RecentFolder8 RegKey43=HKCU\Software\Honeyview\RecentFolder9 RegKey44=HKCU\Software\Honeyview\sRecentFolder RegKey45=HKCU\Software\Honeyview\transf.sTargetFolder Tags=ccmedia ID=Honeyview * Author=Winapp2.ini Project [Hostile Makeover *] DetectFile=%AppData%\Merscom\Hostile Makeover FileKey1=%AppData%\Merscom\Hostile Makeover|logfile.txt Tags=ccapps ID=Hostile Makeover * Author=Winapp2.ini Project [HostsMan Backups *] DetectFile=%ProgramData%\abelhadigital.com\HostsMan FileKey1=%Public%\Documents\HostsMan Backups|*|REMOVESELF FileKey2=%WinDir%\System32\drivers\etc|HOSTS.bak;HOSTS.tmp Tags=ccutil ID=HostsMan Backups * Author=Winapp2.ini Project [HostsMan HostsServer *] Detect=HKLM\Software\abelhadigital.com\HostsServer DetectFile=%ProgramFiles%\HostsMan\hostssrv.exe FileKey1=%AppData%\abelhadigital.com\HostsServer|*.log|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\abelhadigital.com\HostsServer\Logs|*.log Tags=ccutil ID=HostsMan HostsServer * Author=Winapp2.ini Project [Hotline Miami *] Detect=HKCU\Software\Valve\Steam\Apps\219150 FileKey1=%UserProfile%\Documents\My Games\HotlineMiami|debug.log Tags=ccapps ID=Hotline Miami * Author=Winapp2.ini Project [Hotspot Shield *] DetectFile1=%ProgramData%\Hotspot Shield DetectFile2=%ProgramFiles%\Hotspot Shield FileKey1=%ProgramData%\Hotspot Shield\system\logs|*|RECURSE FileKey2=%ProgramData%\Hotspot Shield\system\Update|* FileKey3=%ProgramData%\Hotspot Shield\user\logs|*|RECURSE FileKey4=%ProgramFiles%\Hotspot Shield\log|*.log FileKey5=%UserProfile%\AppData\LocalLow\Hotspot_Shield\Logs|*|RECURSE Tags=ccapps ID=Hotspot Shield * Author=Winapp2.ini Project [Hover Desk *] DetectFile=%ProgramFiles%\HoverDesk FileKey1=%ProgramFiles%\HoverDesk\User|hdcmdrec.txt Tags=ccutil ID=Hover Desk * Author=Winapp2.ini Project [HP *] Detect=HKCU\Software\HP DetectFile1=%AppData%\hpqlog DetectFile2=%LocalAppData%\Hewlett-Packard DetectFile3=%LocalAppData%\TouchSmartData DetectFile4=%ProgramData%\Hewlett-Packard DetectFile5=%ProgramData%\HP DetectFile6=%ProgramFiles%\HPQ\Shared\Sierra Wireless DetectFile7=%UserProfile%\HPRemote\RGReceiver FileKey1=%AppData%\hp active health\app analytics\*logs|*|RECURSE FileKey2=%AppData%\HP\*Logs|*Log.txt FileKey3=%AppData%\hpqlog|*.log FileKey4=%LocalAppData%\Hewlett-Packard\HP Support Framework\Profile\Upload|*.log FileKey5=%LocalAppData%\HP\AtInstall|*.log;*log.txt|REMOVESELF FileKey6=%LocalAppData%\TouchSmartData\Log|* FileKey7=%ProgramData%|hpzinstall.log FileKey8=%ProgramData%\Hewlett-Packard|*.log*.*;*Log.txt|RECURSE FileKey9=%ProgramData%\Hewlett-Packard\HP*\Log*|*|RECURSE FileKey10=%ProgramData%\HP Audio Switch|*.log* FileKey11=%ProgramData%\HP\HP Audio Switch|*.log FileKey12=%ProgramData%\HP\HP Touchpoint Analytics Client\Logs|* FileKey13=%ProgramData%\HP\HP Touchpoint Analytics Client\Monitor-History|* FileKey14=%ProgramData%\HP\HP Touchpoint Analytics Client\MRU|* FileKey15=%ProgramData%\HP\logs|*|RECURSE FileKey16=%ProgramData%\HP\StreamLog|*|RECURSE FileKey17=%ProgramFiles%\HPQ\Shared\Sierra Wireless|*.log|RECURSE FileKey18=%SystemDrive%|dism.log FileKey19=%SystemDrive%\hp\bin\logs|*.log FileKey20=%SystemDrive%\HP\Diagnostics\PSDR|logFile.txt FileKey21=%SystemDrive%\system.sav\logs|*|RECURSE FileKey22=%UserProfile%\HPRemote\RGReceiver|*.log FileKey23=%WinDir%\HP|Installer.log Tags=ccapps ID=HP * Author=Winapp2.ini Project [HP Display Center *] DetectFile=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6 FileKey1=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6\Settings|*.log* FileKey4=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\AD2F1837.HPDisplayCenter_v10z8vjag6ke6\TempState|*|REMOVESELF Tags=ccutil ID=HP Display Center * Author=Winapp2.ini Project [HP Drive Key Boot Utility *] Detect=HKLM\Software\microsoft\windows\currentversion\uninstall\HP Drive Key Boot Utility FileKey1=%SystemDrive%\CPQSYSTEM|*|REMOVESELF Tags=ccutil ID=HP Drive Key Boot Utility * Author=Winapp2.ini Project [HP Guide *] DetectFile=%LocalAppData%\HP Guide FileKey1=%LocalAppData%\HP Guide|log1.* FileKey2=%LocalAppData%\HP Guide\mp_cache|* Tags=ccutil ID=HP Guide * Author=Winapp2.ini Project [HP HyperX NGENUITY *] DetectFile=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt FileKey1=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt\Settings|*.log* FileKey4=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\33C30B79.HyperXNGenuity_0a78dr3hq0pvt\TempState|*|REMOVESELF Tags=ccutil ID=HP HyperX NGENUITY * Author=Winapp2.ini Project [HP Installation Files *] Detect=HKCU\Software\HP DetectFile1=%ProgramData%\HP DetectFile2=%SystemDrive%\HP Universal Print Driver DetectFile3=%SystemDrive%\swsetup FileKey1=%ProgramData%\HP\Installer\Temp|* FileKey2=%ProgramData%\HP\Temp|* FileKey3=%ProgramFiles%\HP\Temp|*|RECURSE FileKey4=%SystemDrive%\HP Universal Print Driver|*|REMOVESELF FileKey5=%SystemDrive%\swsetup|*|REMOVESELF FileKey6=%WinDir%|*.dat.temp Tags=ccutil ID=HP Installation Files * Author=Winapp2.ini Project [HP Jumpstart *] DetectFile=%LocalAppData%\HP Jumpstart Apps FileKey1=%LocalAppData%\HP Jumpstart Apps\User Data\Default|*-journal;Extension Cookies;LOG;LOG.old;Network Persistent State;Top Sites;Visited Links;Web Data|RECURSE FileKey2=%LocalAppData%\HP Jumpstart Apps\User Data\Default\*Cache|*|RECURSE FileKey3=%LocalAppData%\HP Jumpstart Apps\User Data\ShaderCache\GPUCache|* Tags=ccapps ID=HP Jumpstart * Author=Winapp2.ini Project [HP MediaSmart Photo *] DetectFile=%LocalAppData%\Hewlett-Packard\MediaSmart\Photo FileKey1=%LocalAppData%\Hewlett-Packard\MediaSmart\Photo|subsys.cache FileKey2=%LocalAppData%\Hewlett-Packard\MediaSmart\Photo\tm*Cache|*|REMOVESELF Tags=ccmedia ID=HP MediaSmart Photo * Author=Winapp2.ini Project [HP OMEN Gaming Hub *] DetectFile=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6 FileKey1=%LocalAppData%\HPOMEN|*.log FileKey2=%LocalAppData%\HPOmenServices|*|RECURSE FileKey3=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey5=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey7=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\*Cache*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\AutoFill*|*|REMOVESELF FileKey9=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Avatars|*|REMOVESELF FileKey10=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\CertificateRevocation|*|REMOVESELF FileKey11=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\CookieReadinessList|*|REMOVESELF FileKey12=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Crash Reports|*|REMOVESELF FileKey13=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Crashpad|*|REMOVESELF FileKey14=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Crowd Deny|*|REMOVESELF FileKey15=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey16=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\*Cache*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey18=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\blob_storage|*|REMOVESELF FileKey19=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey20=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey22=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\coupon_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\DataSharing|*|REMOVESELF FileKey25=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\discount*_db|*|REMOVESELF FileKey26=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Download Service|*|REMOVESELF FileKey27=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Extension State|*|REMOVESELF FileKey28=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey29=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\File System|*|REMOVESELF FileKey30=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\GCM Store|*|REMOVESELF FileKey31=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey32=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey33=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey34=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\optimization*|*|REMOVESELF FileKey35=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey36=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey37=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey38=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey39=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Service Worker|*|REMOVESELF FileKey40=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Sessions|*|REMOVESELF FileKey41=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey42=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey43=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey44=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey45=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey46=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Sync Data|*|REMOVESELF FileKey47=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey48=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\Web Applications|*|REMOVESELF FileKey49=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey50=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey51=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey52=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Local Traces|*|REMOVESELF FileKey53=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\MEIPreload|*|REMOVESELF FileKey54=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Optimization*|*|REMOVESELF FileKey55=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\OriginTrials|*|REMOVESELF FileKey56=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\PKIMetadata|*|REMOVESELF FileKey57=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey58=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey59=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Safe Browsing|*|REMOVESELF FileKey60=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\SafetyTips|*|REMOVESELF FileKey61=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\SmartScreen|*|REMOVESELF FileKey62=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey63=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Stability|*|REMOVESELF FileKey64=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\Subresource Filter|*|REMOVESELF FileKey65=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey66=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\WidevineCdm|*|REMOVESELF FileKey67=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalCache\Local\LeftNav\WebViewCache\EBWebView\ZxcvbnData|*|REMOVESELF FileKey68=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey69=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey70=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey71=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey72=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey73=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey74=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey75=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey76=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey77=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey78=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey79=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey80=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey81=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey82=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey83=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey84=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey85=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey86=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey87=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey88=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey89=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey90=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey91=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey92=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey93=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey94=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey95=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey96=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey97=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey98=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey99=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey100=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey101=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey102=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey103=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey104=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey105=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey106=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey107=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey108=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey109=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey110=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey111=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey112=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey113=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey114=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey115=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey116=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey117=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey118=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey119=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey120=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey121=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey122=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey123=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey124=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey125=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey126=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey127=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Stability|*|REMOVESELF FileKey128=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey129=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey130=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey131=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey132=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\Settings|*.log* FileKey133=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\SystemAppData\Helium|*.log* FileKey134=%LocalAppData%\Packages\AD2F1837.OMENCommandCenter_v10z8vjag6ke6\TempState|*|REMOVESELF Tags=ccapps ID=HP OMEN Gaming Hub * Author=Winapp2.ini Project [HP Smart *] DetectFile=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6 FileKey1=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6\Settings|*.log* FileKey4=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\AD2F1837.HPPrinterControl_v10z8vjag6ke6\TempState|*|REMOVESELF Tags=ccutil ID=HP Smart * Author=Winapp2.ini Project [HP Support Assistant *] DetectFile=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6 FileKey1=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6\Settings|*.log* FileKey4=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_v10z8vjag6ke6\TempState|*|REMOVESELF Tags=ccutil ID=HP Support Assistant * Author=Winapp2.ini Project [HP Update *] DetectFile=%AppData%\HPUpdate FileKey1=%AppData%\HpUpdate|* Tags=ccapps ID=HP Update * Author=Winapp2.ini Project [HTC *] Detect=HKCU\Software\Microsoft\Installer\Products\34180280D77760A4BB4517FBA01DBB07\SourceList FileKey1=%SystemDrive%\Temp|HSM*.txt Tags=ccinternet ID=HTC * Author=Winapp2.ini Project [HTC Home Apis *] DetectFile=%ProgramFiles%\HTC Home FileKey1=%ProgramFiles%\HTC Home\log|*|RECURSE Tags=ccapps ID=HTC Home Apis * Author=Winapp2.ini Project [Huawei *] Detect=HKLM\Software\Huawei technologies FileKey1=%ProgramData%\MobileBrServ\log|*|REMOVESELF FileKey2=%ProgramFiles%\BILDmobil\Log|* FileKey3=%ProgramFiles%\HUAWEI Modem Driver|*.log Tags=ccmedia ID=Huawei * Author=Winapp2.ini Project [Huawei Hisuite *] DetectFile=%LocalAppData%\Hisuite FileKey1=%LocalAppData%\Hisuite\log|*.log;*.zip FileKey2=%LocalAppData%\Hisuite\UserData\AppIcon|*.png FileKey3=%LocalAppData%\Hisuite\UserData\driver\all|*.log FileKey4=%LocalAppData%\Hisuite\UserData\DropTemp|* FileKey5=%LocalAppData%\HiSuite\UserData\hwtools\old|* FileKey6=%ProgramFiles%\HiSuite\HandSetService\log|*.log Tags=ccapps ID=Huawei Hisuite * Author=Winapp2.ini Project [Hue Sync *] DetectFile1=%LocalAppData%\Packages\Signify.HueSync_j13q1hys0cg9e DetectFile2=%LocalAppData%\Signify\huesync FileKey1=%AppData%\HueSync\attachments|* FileKey2=%AppData%\HueSync\reports|* FileKey3=%LocalAppData%\Packages\Signify.HueSync_j13q1hys0cg9e\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\Signify.HueSync_j13q1hys0cg9e\Settings|*.log* FileKey5=%LocalAppData%\Packages\Signify.HueSync_j13q1hys0cg9e\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Signify.HueSync_j13q1hys0cg9e\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Signify\huesync\cache|*|RECURSE Tags=ccinternet ID=Hue Sync * Author=Winapp2.ini Project [Hulu *] DetectFile=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya FileKey1=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya\LocalState|*.tmp|RECURSE FileKey3=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya\Settings|*.log* FileKey4=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\HULULLC.HULUPLUS_fphbd361v8tya\TempState|*|REMOVESELF Tags=ccmedia ID=Hulu * Author=Winapp2.ini Project [Hulubulu Advanced Renamer *] DetectFile1=%AppData%\Hulubulu\Advanced Renamer 3 DetectFile2=%AppData%\Hulubulu\Advanced Renamer 4 FileKey1=%AppData%\Hulubulu\Advanced Renamer *\Data\UndoLists|* Tags=ccutil ID=Hulubulu Advanced Renamer * Author=Winapp2.ini Project [Humble App *] DetectFile=%AppData%\Humble App FileKey1=%AppData%\Humble App|*-journal;*.old;LOG;QuotaManager|RECURSE FileKey2=%AppData%\Humble App\*Cache|*|REMOVESELF FileKey3=%AppData%\Humble App\blob_storage|*|RECURSE FileKey4=%AppData%\Humble App\Crashpad\Reports|* FileKey5=%AppData%\Humble App\Logs|* FileKey6=%AppData%\Humble App\Service Worker\*Cache*|*|RECURSE FileKey7=%LocalAppData%\humble-client-updater|* FileKey8=%LocalAppData%\humble-client-updater\*|*|REMOVESELF Tags=ccapps ID=Humble App * Author=Winapp2.ini Project [Huru Beach Party *] DetectFile=%AppData%\HuruBeachParty FileKey1=%AppData%\HuruBeachParty|*log.html Tags=ccapps ID=Huru Beach Party * Author=Winapp2.ini Project [HxD Hexeditor *] Detect=HKCU\Software\Mael\HxD RegKey1=HKCU\Software\Mael\HxD\History Lists\Recent Files Tags=ccapps ID=HxD Hexeditor * Author=Winapp2.ini Project [HyperSnap *] Detect1=HKCU\Software\Hyperionics\HyperSnap 7 Detect2=HKCU\Software\Hyperionics\HyperSnap 8 FileKey1=%ProgramFiles%\HyperSnap *|*.url RegKey1=HKCU\Software\Hyperionics\HyperSnap 7\Recent File List RegKey2=HKCU\Software\Hyperionics\HyperSnap 8\Recent File List Tags=ccapps ID=HyperSnap * Author=Winapp2.ini Project [I2P *] Detect=HKLM\System\CurrentControlSet\Services\i2p DetectFile1=%AppData%\I2P DetectFile2=%ProgramFiles%\i2p FileKey1=%AppData%\I2P\eepsite\logs|* FileKey2=%AppData%\I2P\netDb|* FileKey3=%ProgramFiles%\i2p|*.log FileKey4=%ProgramFiles%\i2p\eepsite\logs|* Tags=ccinternet ID=I2P * Author=Winapp2.ini Project [IBM Security Trusteer Rapport *] Detect=HKCU\Software\Trusteer\Rapport FileKey1=%AppData%\Trusteer\Rapport\user\Logs|* FileKey2=%LocalAppData%\Trusteer\Rapport\user\logs|* FileKey3=%ProgramData%\Trusteer\Rapport\logs|* FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Trusteer\Rapport\user\logs|* Tags=ccinternet ID=IBM Security Trusteer Rapport * Author=Winapp2.ini Project [Icaros *] DetectFile=%LocalAppData%\Icaros FileKey1=%LocalAppData%\Icaros\IcarosCache|*.icdb Tags=ccutil ID=Icaros * Author=Winapp2.ini Project [IceCat Autocomplete History *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|formhistory* Tags=ccapps ID=IceCat Autocomplete History * Author=Winapp2.ini Project [IceCat Autofill Data *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|autofill-profiles.json Tags=ccapps ID=IceCat Autofill Data * Author=Winapp2.ini Project [IceCat Bookmark Backups *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*\bookmarkbackups|* Tags=ccapps ID=IceCat Bookmark Backups * Author=Winapp2.ini Project [IceCat Bookmark Favicons *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|favicons* Tags=ccapps ID=IceCat Bookmark Favicons * Author=Winapp2.ini Project [IceCat Caches *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Mozilla\icecat\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Mozilla\icecat\Profiles\*\notificationstore|* FileKey4=%AppData%\Mozilla\icecat\Profiles\*\security_state|* FileKey5=%AppData%\Mozilla\icecat\Profiles\*\shader-cache|* FileKey6=%AppData%\Mozilla\icecat\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Mozilla\icecat\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Mozilla\icecat\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Mozilla\icecat\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=IceCat Caches * Author=Winapp2.ini Project [IceCat Privacy Sandbox *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|credentialstate.sqlite Tags=ccapps ID=IceCat Privacy Sandbox * Author=Winapp2.ini Project [IceCat Saved Usernames & Passwords *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|key4.db;logins.json Tags=ccapps ID=IceCat Saved Usernames & Passwords * Author=Winapp2.ini Project [IceCat Synced Tabs *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|synced-tabs.db* Tags=ccapps ID=IceCat Synced Tabs * Author=Winapp2.ini Project [IceCat Telemetry *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat|*.log|RECURSE FileKey2=%AppData%\Mozilla\icecat\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Mozilla\icecat\Profiles\*\crashes|* FileKey4=%AppData%\Mozilla\icecat\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Mozilla\icecat\Profiles\*\minidumps|* FileKey6=%AppData%\Mozilla\icecat\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Mozilla\icecat\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Mozilla\icecat\Profiles\*\weave\logs|* Tags=ccapps ID=IceCat Telemetry * Author=Winapp2.ini Project [IceCat Web Browsing Cookies *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|cookies* Tags=ccapps ID=IceCat Web Browsing Cookies * Author=Winapp2.ini Project [IceCat Web Browsing Session *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|session*.json* Tags=ccapps ID=IceCat Web Browsing Session * Author=Winapp2.ini Project [IceCat Web Browsing Session Backups *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*\sessionstore-backups|* Tags=ccapps ID=IceCat Web Browsing Session Backups * Author=Winapp2.ini Project [IceCat Web Storage *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=IceCat Web Storage * Author=Winapp2.ini Project [IceCat Website Permissions *] DetectFile=%AppData%\Mozilla\icecat\Profiles FileKey1=%AppData%\Mozilla\icecat\Profiles\*|permissions.sqlite Tags=ccapps ID=IceCat Website Permissions * Author=Winapp2.ini Project [IceChat *] DetectFile=%LocalAppData%\IceChat Networks\IceChat FileKey1=%LocalAppData%\IceChat Networks\IceChat\Logs|*.log|RECURSE Tags=ccinternet ID=IceChat * Author=Winapp2.ini Project [Icecream Screen Recorder *] DetectFile=%LocalAppData%\Icecream\Icecream Screen Recorder FileKey1=%LocalAppData%\Icecream\Icecream Screen Recorder|history.json FileKey2=%UserProfile%\.Icecream Screen Recorder\log|log_*.txt Tags=ccutil ID=Icecream Screen Recorder * Author=Winapp2.ini Project [Icewind Dale *] DetectFile=%ProgramFiles%\Black Isle\Icewind Dale FileKey1=%ProgramFiles%\Black Isle\Icewind Dale\Temp|* Tags=ccapps ID=Icewind Dale * Author=Winapp2.ini Project [IcoFX *] DetectFile=%AppData%\IcoFX* FileKey1=%AppData%\IcoFX*\Settings|filebrecentcul.cfg;recent.cfg;recentIcl.cfg Tags=ccmedia ID=IcoFX * Author=Winapp2.ini Project [IconCool Editor *] DetectFile=%ProgramFiles%\IconCoolEditor FileKey1=%ProgramFiles%\IconCoolEditor|IconFileList.src;Recentlyused.src Tags=ccutil ID=IconCool Editor * Author=Winapp2.ini Project [Icons from File *] Detect=HKCU\Software\Vitaliy Levchenko\Icons from File RegKey1=HKCU\Software\Vitaliy Levchenko\Icons from File\Recent Tags=ccutil ID=Icons from File * Author=Winapp2.ini Project [ID Privacy Shield *] DetectFile=%ProgramFiles%\ID Security Suite\ID Privacy Shield FileKey1=%ProgramFiles%\ID Security Suite\ID Privacy Shield\logs|*|RECURSE Tags=ccutil ID=ID Privacy Shield * Author=Winapp2.ini Project [IdeaSoft Scrapbooks Plus 1.0 *] Detect=HKCU\Software\IdeaSoft\Scrapbooks Plus\1.0 RegKey1=HKCU\Software\IdeaSoft\Scrapbooks Plus\1.0\Recent File List Tags=ccapps ID=IdeaSoft Scrapbooks Plus 1.0 * Author=Winapp2.ini Project [IDLE *] Detect=HKCU\Software\Python FileKey1=%UserProfile%\.idlerc|recent-files.lst Tags=ccutil ID=IDLE * Author=Winapp2.ini Project [idoo Video Editor *] DetectFile=%ProgramFiles%\idoo\Video Editor FileKey1=%ProgramFiles%\idoo\Video Editor|*.log Tags=ccmedia ID=idoo Video Editor * Author=Winapp2.ini Project [IDrive *] DetectFile1=%LocalAppData%\IDrive DetectFile2=%ProgramFiles%\IDriveWindows FileKey1=%LocalAppData%\IDrive\IBCOMMON|SerTraceFile.txt FileKey2=%ProgramData%\IDrive\IBCOMMON|Tracefile.txt FileKey3=%ProgramFiles%\IDriveWindows\IBCOMMON|SerTraceFile.txt Tags=ccapps ID=IDrive * Author=Winapp2.ini Project [IDT NetGUI *] DetectFile=%AppData%\IDT\NetGUI FileKey1=%AppData%\IDT\NetGUI\Log|*.log Tags=ccinternet ID=IDT NetGUI * Author=Winapp2.ini Project [iExpert Registry Clean Expert *] Detect=HKCU\Software\iExpertSoft\Registry Clean Expert DetectFile=%ProgramFiles%\Registry Clean Expert FileKey1=%AppData%\iExpert Software\Registry Clean Expert\UndoCenter|* FileKey2=%ProgramFiles%\Registry Clean Expert|*.LOG RegKey1=HKCU\Software\iExpertSoft\Registry Clean Expert\Recent File List Tags=ccutil ID=iExpert Registry Clean Expert * Author=Winapp2.ini Project [iFunbox *] DetectFile=%ProgramFiles%\i-Funbox DevTeam FileKey1=%ProgramFiles%\i-Funbox DevTeam|debug.log Tags=ccutil ID=iFunbox * Author=Winapp2.ini Project [iGP11 *] DetectFile=%ProgramFiles%\S17L\iGP11 FileKey1=%ProgramFiles%\S17L\iGP11\logs|* Tags=ccapps ID=iGP11 * Author=Winapp2.ini Project [IISExpress *] DetectFile=%UserProfile%\Documents\IISExpress FileKey1=%UserProfile%\Documents\IISExpress\Logs|* FileKey2=%UserProfile%\Documents\IISExpress\TraceLogFiles|*|RECURSE Tags=ccinternet ID=IISExpress * Author=Winapp2.ini Project [ImageDupeless *] Detect=HKCU\Software\ImageDupeless\ImageDupeless RegKey1=HKCU\Software\ImageDupeless\ImageDupeless\Parameters|Last Decoded File RegKey2=HKCU\Software\ImageDupeless\ImageDupeless\Recent File List Tags=ccmedia ID=ImageDupeless * Author=Winapp2.ini Project [ImageGlass *] DetectFile=%LocalAppData%\ImageGlass FileKey1=%LocalAppData%\ImageGlass\ThumbnailsCache|*|REMOVESELF Tags=ccmedia ID=ImageGlass * Author=Winapp2.ini Project [ImagePrinter Pro *] Detect=HKCU\Software\Code Industry\ImagePrinterPro FileKey1=%LocalAppData%\ImagePrinter Pro\Temp|* RegKey1=HKCU\Software\Code Industry\ImagePrinterPro|path RegKey2=HKCU\Software\Code Industry\ImagePrinterPro|temp_path Tags=ccapps ID=ImagePrinter Pro * Author=Winapp2.ini Project [ImageRanger *] DetectFile=%ProgramFiles%\ImageRanger FileKey1=%ProgramFiles%\ImageRanger|vc*redist*x*.exe Tags=ccmedia ID=ImageRanger * Author=Winapp2.ini Project [ImgBurn *] Detect=HKCU\Software\ImgBurn RegKey1=HKCU\Software\ImgBurn|ISOREAD_RecentFiles_Destination RegKey2=HKCU\Software\ImgBurn|ISOREAD_RecentFolders_Destination Tags=ccapps ID=ImgBurn * Author=Winapp2.ini Project [Immersity *] DetectFile=%ProgramData%\Simulated Reality FileKey1=%ProgramData%\Simulated Reality\Applications\SRSession\Log|* FileKey2=%ProgramData%\Simulated Reality\Eye Tracker\Log|* FileKey3=%ProgramData%\Simulated RealityServer\Log|* Tags=ccapps ID=Immersity * Author=Winapp2.ini Project [Immunet *] Detect=HKLM\Software\Immunet Protect FileKey1=%AppData%\Immunet|*|REMOVESELF FileKey2=%ProgramData%\Immunet|*.log FileKey3=%ProgramFiles%\Immunet|*.log|RECURSE Tags=ccapps ID=Immunet * Author=Winapp2.ini Project [Imo Messenger *] DetectFile=%AppData%\Imo Messenger FileKey1=%AppData%\Imo Messenger\Data\*\images|* FileKey2=%AppData%\Imo Messenger\Logs|* FileKey3=%AppData%\Imo Messenger\updates|* Tags=ccinternet ID=Imo Messenger * Author=Winapp2.ini Project [iMobie *] DetectFile=%AppData%\iMobie FileKey1=%AppData%\iMobie\*|iTunesPrefs FileKey2=%AppData%\iMobie\*\AutoUpdate|*|RECURSE FileKey3=%AppData%\iMobie\*\Configue|Settings.plist FileKey4=%AppData%\iMobie\*\EasyLoseFiles|*|RECURSE FileKey5=%AppData%\iMobie\*\ErrorLog|*|RECURSE FileKey6=%AppData%\iMobie\*\Files|*|RECURSE FileKey7=%AppData%\iMobie\*\iMobieConfig|*|RECURSE FileKey8=%AppData%\iMobie\*\TempFiles|*|RECURSE ExcludeKey1=FILE|%AppData%\iMobie\*\iMobieConfig\|ConfigReg.ini Tags=ccutil ID=iMobie * Author=Winapp2.ini Project [iMobie Backups *] DetectFile=%AppData%\iMobie FileKey1=%AppData%\iMobie\*\*Backup|*|RECURSE FileKey2=%AppData%\iMobie\Backup|*|RECURSE Tags=ccutil ID=iMobie Backups * Author=Winapp2.ini Project [Imperator Rome *] DetectFile=%UserProfile%\Documents\Paradox Interactive\Imperator FileKey1=%UserProfile%\Documents\Paradox Interactive\Imperator\*Cache|*|RECURSE FileKey2=%UserProfile%\Documents\Paradox Interactive\Imperator\Crashes|*|REMOVESELF FileKey3=%UserProfile%\Documents\Paradox Interactive\Imperator\Dumps|* FileKey4=%UserProfile%\Documents\Paradox Interactive\Imperator\Logs|* Tags=ccapps ID=Imperator Rome * Author=Winapp2.ini Project [ImTOO iPad Video Converter *] Detect=HKCU\Software\ImTOO\iPad Video Converter FileKey1=%ProgramFiles%\ImTOO\iPad Video Converter|*.log;ERRORLOG.TXT Tags=ccmedia ID=ImTOO iPad Video Converter * Author=Winapp2.ini Project [ImTOO Video Converter Ultimate *] Detect=HKCU\Software\ImTOO\Video Converter Ultimate FileKey1=%ProgramData%\ImTOO\Video Converter Ultimate\customdata|settings.old RegKey1=HKCU\Software\ImTOO\Video Converter Ultimate\Settings|last_openfile_dir RegKey2=HKCU\Software\ImTOO\Video Converter Ultimate\Settings|last_output_dir RegKey3=HKCU\Software\ImTOO\Video Converter Ultimate\Settings|last_profile_group RegKey4=HKCU\Software\ImTOO\Video Converter Ultimate\Settings|last_profile_url RegKey5=HKCU\Software\ImTOO\Video Converter Ultimate\Settings|recent_profiles RegKey6=HKCU\Software\ImTOO\Video Converter Ultimate\Settings\output Tags=ccmedia ID=ImTOO Video Converter Ultimate * Author=Winapp2.ini Project [IMVU *] Detect=HKCU\Software\IMVU DetectFile=%AppData%\IMVU* FileKey1=%AppData%\IMVU|*.chk|RECURSE FileKey2=%AppData%\IMVU|*.db;*.jpg;*.log*;*.pickle;*.txt;mini.dmp.bak FileKey3=%AppData%\IMVU Desktop*|cookies*;network persistent state FileKey4=%AppData%\IMVU Desktop*\*Cache|*|REMOVESELF FileKey5=%AppData%\IMVU Desktop*\blob_storage|*|REMOVESELF FileKey6=%AppData%\IMVU Desktop*\Crashpad\Reports|*|RECURSE FileKey7=%AppData%\IMVU\*Cache|*|REMOVESELF FileKey8=%AppData%\IMVUApp|*.log FileKey9=%AppData%\IMVUClient|*.icns|RECURSE FileKey10=%AppData%\IMVUClient\installer|*|RECURSE FileKey11=%AppData%\IMVUClient\ui\profile|*.dat;*.js;*.mfl;*.sqlite FileKey12=%AppData%\IMVUClient\ui\profile\cache|*|REMOVESELF FileKey13=%LocalAppData%\IMVU*|*.log Tags=ccapps ID=IMVU * Author=Winapp2.ini Project [iMyFone Umate *] Detect=HKLM\Software\iMyFone\Umate FileKey1=%ProgramFiles%\iMyFone\iMyFone Umate|mate.log FileKey2=%ProgramFiles%\iMyFone\iMyFone Umate\cache|*|RECURSE FileKey3=%ProgramFiles%\iMyFone\iMyFone Umate\Log|*|RECURSE FileKey4=%ProgramFiles%\iMyFone\iMyFone Umate\temp|*|RECURSE Tags=ccutil ID=iMyFone Umate * Author=Winapp2.ini Project [Infinity Engine *] DetectFile=%UserProfile%\Documents\Infinity Engine - Enhanced Edition FileKey1=%UserProfile%\Documents\Infinity Engine - Enhanced Edition\Crash|*.dmp Tags=ccapps ID=Infinity Engine * Author=Winapp2.ini Project [Infix PDF Editor *] DetectFile=%LocalAppData%\Iceni\Infix FileKey1=%LocalAppData%\Iceni\Infix\*|fontcache;lastFileOpenned.txt RegKey1=HKCU\Software\Iceni Technology Limited\Infix\Find Replace|Find Save RegKey2=HKCU\Software\Iceni Technology Limited\Infix\Find Replace|Replace Save RegKey3=HKCU\Software\Iceni Technology Limited\Infix\Find Replace File|Find Save RegKey4=HKCU\Software\Iceni Technology Limited\Infix\Find Replace File|Replace Save RegKey5=HKCU\Software\Iceni Technology Limited\Infix\Watermark dialog|Find Save RegKey6=HKCU\Software\Iceni Technology Limited\Infix\Watermark dialog|Replace Save Tags=ccapps ID=Infix PDF Editor * Author=Winapp2.ini Project [inFlow Inventory *] DetectFile=%AppData%\inFlow Inventory FileKey1=%AppData%\inFlow Inventory|log.txt FileKey2=%ProgramData%\inFlow Inventory\Logs|* Tags=ccapps ID=inFlow Inventory * Author=Winapp2.ini Project [Infonautics File Date Corrector *] Detect=HKCU\Software\Infonautics\FileDateCorrector FileKey1=%AppData%\FileDateCorrector\Logs|* Tags=ccutil ID=Infonautics File Date Corrector * Author=Winapp2.ini Project [InfraRecorder *] DetectFile=%AppData%\InfraRecorder FileKey1=%AppData%\InfraRecorder\logs|* Tags=ccmedia ID=InfraRecorder * Author=Winapp2.ini Project [Ingit MapGPS *] Detect=HKCU\Software\Ingit\MapGPS\MapGPS RegKey1=HKCU\Software\Ingit\MapGPS\MapGPS\RARU0205|LastOpenChart RegKey2=HKCU\Software\Ingit\MapGPS\MapGPS\RARU0205 Recent Files Tags=ccapps ID=Ingit MapGPS * Author=Winapp2.ini Project [Injector DLL *] Detect=HKCU\Software\Drowse\Injector RegKey1=HKCU\Software\Drowse\Injector|DLL Tags=ccutil ID=Injector DLL * Author=Winapp2.ini Project [InkScape *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe FileKey1=%AppData%\InkScape|*.log|RECURSE FileKey2=%LocalAppData%|recently-used.xbel Tags=ccmedia ID=InkScape * Author=Winapp2.ini Project [Inno Setup *] Detect=HKCU\Software\Jordan Russell\Inno Setup RegKey1=HKCU\Software\Jordan Russell\Inno Setup\ScriptFileHistoryNew Tags=ccapps ID=Inno Setup * Author=Winapp2.ini Project [InnoExtractor *] DetectFile1=%AppData%\InnoExtractor DetectFile2=%LocalAppData%\InnoExtractor DetectFile3=%ProgramFiles%\InnoExtractor DetectFile4=%SystemDrive%\Programs\InnoExtractor FileKey1=%AppData%\InnoExtractor|Historial.dat FileKey2=%LocalAppData%\InnoExtractor|Historial.dat FileKey3=%ProgramFiles%\InnoExtractor|Historial.dat FileKey4=%SystemDrive%\Programs\InnoExtractor|Historial.dat Tags=ccutil ID=InnoExtractor * Author=Winapp2.ini Project [InnoTab *] DetectFile=%ProgramData%\VTech\DA FileKey1=%ProgramData%\VTech\DA|*.log;InnoTab.txt;IntallLog.txt|RECURSE FileKey2=%ProgramData%\VTech\DA\InnoTab\ConsoleLog|* FileKey3=%ProgramData%\VTech\DA\InnoTab\Games\tmp|*|REMOVESELF Tags=ccapps ID=InnoTab * Author=Winapp2.ini Project [Inpaint *] Detect=HKCU\Software\Teorex\Inpaint RegKey1=HKCU\Software\Teorex\Inpaint\Recent File List RegKey2=HKCU\Software\Teorex\Inpaint\RecentFileList RegKey3=HKCU\Software\Teorex\Inpaint\Settings|Folder Tags=ccapps ID=Inpaint * Author=Winapp2.ini Project [inSSIDer Home *] Detect=HKCU\Software\MetaGeek, LLC\inSSIDer Home FileKey1=%LocalAppData%\MetaGeek,_LLC|ConnectionErrorLog;MetaGeek-OUI.backup Tags=ccutil ID=inSSIDer Home * Author=Winapp2.ini Project [InstallShield *] Detect=HKCU\Software\InstallShield FileKey1=%ProgramFiles%|_ISTMP1.DIR FileKey2=%ProgramFiles%\InstallShield Installation Information|*.log|RECURSE FileKey3=%SystemDrive%|_ISTMP*.DIR RegKey1=HKCU\Software\InstallShield\16.0\Professional\Recent File List RegKey2=HKCU\Software\InstallShield\17.0\Professional\Recent File List RegKey3=HKCU\Software\InstallShield\18.0\Professional\Recent File List RegKey4=HKCU\Software\InstallShield\19.0\Professional\Recent File List RegKey5=HKCU\Software\InstallShield\20.0\Professional\Recent File List RegKey6=HKCU\Software\InstallShield\21.0\Professional\Recent File List RegKey7=HKCU\Software\InstallShield\InstallShield Cabinet and Log File Viewer\Recent File List RegKey8=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU1 RegKey9=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU2 RegKey10=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU3 RegKey11=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU4 Tags=ccutil ID=InstallShield * Author=Winapp2.ini Project [Instant Dungeon! *] Detect=HKCU\Software\Valve\Steam\Apps\326720 FileKey1=%AppData%\Instant Dungeon|log.txt Tags=ccapps ID=Instant Dungeon! * Author=Winapp2.ini Project [InstEd *] Detect=HKCU\Software\instedit.com\insted RegKey1=HKCU\Software\instedit.com\insted\MRU Tags=ccutil ID=InstEd * Author=Winapp2.ini Project [Intel *] Detect1=HKCU\Software\Intel Detect2=HKLM\Software\Intel FileKey1=%LocalAppData%\Intel\IGN\Logs|*.log FileKey2=%ProgramData%\Intel|*.bak;*.log;*Log*.txt|RECURSE FileKey3=%ProgramData%\Intel\*\Log*|* FileKey4=%ProgramData%\Intel\Logs|*|RECURSE FileKey5=%ProgramData%\Intel\Uploader\Intel Telemetry\uploader\*|* FileKey6=%ProgramFiles%\Intel\*|*.log;*Log.txt|RECURSE FileKey7=%ProgramFiles%\Intel\InfInst|*|REMOVESELF FileKey8=%SystemDrive%|IFRToolLog.txt FileKey9=%SystemDrive%\Driver_allOS\MEI\Drivers\MEI\INTERNAL|*.log|RECURSE FileKey10=%SystemDrive%\Intel|*.log|REMOVESELF FileKey11=%SystemDrive%\Intel\Logs|*|REMOVESELF FileKey12=%UserProfile%|BullseyeCoverageError.txt FileKey13=%UserProfile%\Intel\Logs|*|REMOVESELF FileKey14=%WinDir%\debug\Intel\Logs|*|REMOVESELF FileKey15=%WinDir%\INF\Intel Storage Counters|*.tmp|RECURSE FileKey16=%WinDir%\System32|Default_error_Stack-*.txt;Gms.log FileKey17=%WinDir%\System32\config\systemprofile\Intel\Logs|*|REMOVESELF FileKey18=%WinDir%\SysWOW64|Gms.log FileKey19=%WinDir%\SysWOW64\config\systemprofile\Intel\Logs|*|REMOVESELF Tags=ccutil ID=Intel * Author=Winapp2.ini Project [Intel Application Optimization *] DetectFile=%AppData%\Intel\ApplicationOptimization FileKey1=%AppData%\Intel\ApplicationOptimization|*.log Tags=ccapps ID=Intel Application Optimization * Author=Winapp2.ini Project [Intel Driver & Support Assistant *] DetectFile=%ProgramData%\Intel\DSA FileKey1=%ProgramData%\Intel\DSA\Data|* FileKey2=%ProgramData%\Intel\DSA\Logs|*|RECURSE FileKey3=%WinDir%\System32\config\systemprofile\AppData\Local\Intel\SUR\IDSA|* Tags=ccutil ID=Intel Driver & Support Assistant * Author=Winapp2.ini Project [Intel Extreme Tuning Utility *] DetectFile=%ProgramData%\Intel\Intel Extreme Tuning Utility FileKey1=%ProgramData%\Intel\Intel Extreme Tuning Utility\Logs|*|RECURSE Tags=ccutil ID=Intel Extreme Tuning Utility * Author=Winapp2.ini Project [Intel Graphics Command Center *] DetectFile=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt FileKey1=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\LocalState|gcc*_log_*.txt|RECURSE FileKey4=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\LocalState\Games2\cache|*|RECURSE FileKey5=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\LocalState\MetroLogs|*|RECURSE FileKey6=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\LocalState\Promotions|*|RECURSE FileKey7=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\Settings|*.log* FileKey8=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\SystemAppData\Helium|*.log* FileKey9=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\TempState|*|REMOVESELF FileKey10=%ProgramData%\Packages\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt\*\SystemAppData\Helium\Cache|* Tags=ccutil ID=Intel Graphics Command Center * Author=Winapp2.ini Project [Intel Graphics Driver *] DetectFile=%ProgramData%\Intel\GCC FileKey1=%LocalAppData%\Intel\GCC|*log* FileKey2=%ProgramData%\Intel\GCC|* FileKey3=%ProgramData%\Intel\GFXInstaller|*.dmp;*.log|RECURSE FileKey4=%SystemDrive%\Intel\GfxCPLBatchFiles|*|REMOVESELF FileKey5=%WinDir%\System32\config\systemprofile\AppData\Local\Intel\GCC|* FileKey6=%WinDir%\System32\drivers\DriverData\Intel\GfxDriver|*.etl FileKey7=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\GCC|*log*.txt Tags=ccutil ID=Intel Graphics Driver * Author=Winapp2.ini Project [Intel Graphics Software *] DetectFile=%LocalAppData%\Intel\IntelGraphicsSoftware FileKey1=%LocalAppData%\Intel\IntelGraphicsSoftware\EBWebView\*cache*|*|RECURSE FileKey2=%LocalAppData%\Intel\IntelGraphicsSoftware\EBWebView\Crashpad|*|RECURSE FileKey3=%LocalAppData%\Intel\IntelGraphicsSoftware\EBWebView\Default\*cache*|*|RECURSE Tags=ccutil ID=Intel Graphics Software * Author=Winapp2.ini Project [Intel NPU Driver *] DetectFile=%ProgramData%\Intel\NPUInstaller FileKey1=%ProgramData%\Intel\NPUInstaller|*.log|RECURSE Tags=ccutil ID=Intel NPU Driver * Author=Winapp2.ini Project [Intel Processor Diagnostic Tool *] Detect=HKCU\Software\Intel Corporation\Intel Processor Diagnostic Tool 64bit FileKey1=%ProgramFiles%\Intel Corporation\Intel Processor Diagnostic Tool 64bit|*Results.txt;System_Info.txt;TestResults_Full.txt Tags=ccutil ID=Intel Processor Diagnostic Tool * Author=Winapp2.ini Project [Intel Shader Cache *] DetectFile1=%ProgramData%\Intel\ShaderCache DetectFile2=%UserProfile%\AppData\LocalLow\Intel\ShaderCache FileKey1=%ProgramData%\Intel\ShaderCache|* FileKey2=%UserProfile%\AppData\LocalLow\Intel\ShaderCache|* FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Intel\ShaderCache|* Tags=ccutil ID=Intel Shader Cache * Author=Winapp2.ini Project [Intel System Usage Report Service *] DetectFile=%LocalAppData%\Intel\SUR FileKey1=%LocalAppData%\Intel\SUR\QueenCreek\Collected Data|*error_stack-*.txt FileKey2=%WinDir%\System32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\collected_data|*.txt FileKey3=%WinDir%\System32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\collected_data\DebugLogs|* FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\intermediate_data|* FileKey5=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\collected_data\DebugLogs|* FileKey6=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\intermediate_data|* FileKey7=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData|*.bak;*.log;last_cfu.txt FileKey8=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\captured_logs|* FileKey9=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\downloads\*|* FileKey10=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\history|* Tags=ccutil ID=Intel System Usage Report Service * Author=Winapp2.ini Project [Intel Thunderbolt Control Center *] DetectFile=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt FileKey1=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt\Settings|*.log* FileKey4=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\AppUp.ThunderboltControlCenter_8j3eq9eme6ctt\TempState|*|REMOVESELF FileKey6=%ProgramData%\Dell\UpdatePackage\Log|Intel-Thunderbolt-Controller-Application*.txt Tags=ccutil ID=Intel Thunderbolt Control Center * Author=Winapp2.ini Project [Intel Unison *] DetectFile=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt FileKey1=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\LocalCache|*.log FileKey3=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\LocalState|bg_cache.bin FileKey4=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\LocalState\BlobCache|* FileKey5=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\Settings|*.log* FileKey6=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\AppUp.IntelTechnologyMDE_8j3eq9eme6ctt\TempState|*|REMOVESELF Tags=ccutil ID=Intel Unison * Author=Winapp2.ini Project [Intel Update Manager *] DetectFile=%ProgramData%\Intel(R) Update Manager FileKey1=%ProgramData%\Intel(R) Update Manager\AppData|ium.log Tags=ccutil ID=Intel Update Manager * Author=Winapp2.ini Project [Intel Wireless Wi-Fi Drivers *] Detect=HKLM\Software\RivetNetworks FileKey1=%AppData%\Intel\Wireless\CrashDumps|* FileKey2=%ProgramData%\RivetNetworks\ImageCache|* FileKey3=%ProgramData%\RivetNetworks\Killer|*.log FileKey4=%WinDir%\System32\drivers\RivetNetworks\Killer|*.log Tags=ccutil ID=Intel Wireless Wi-Fi Drivers * Author=Winapp2.ini Project [Inter-Tel Device *] DetectFile=%ProgramFiles%\Inter-Tel FileKey1=%ProgramFiles%\Inter-Tel|*.log|RECURSE Tags=ccinternet ID=Inter-Tel Device * Author=Winapp2.ini Project [Internet Business Promoter *] DetectFile=%AppData%\IBP FileKey1=%AppData%\IBP|*.bak;*Log.txt|RECURSE Tags=ccinternet ID=Internet Business Promoter * Author=Winapp2.ini Project [Internet Download Manager *] Detect=HKCU\Software\DownloadManager FileKey1=%AppData%\IDM|*.Log;*.txt FileKey2=%AppData%\IDM\DwnlData|*|REMOVESELF FileKey3=%ProgramFiles%\Internet Download Manager|*.log FileKey4=%SystemDrive%|IDMSetup2.log RegKey1=HKCU\Software\DownloadManager\1 RegKey2=HKCU\Software\DownloadManager\2 RegKey3=HKCU\Software\DownloadManager\3 RegKey4=HKCU\Software\DownloadManager\4 RegKey5=HKCU\Software\DownloadManager\5 RegKey6=HKCU\Software\DownloadManager\6 RegKey7=HKCU\Software\DownloadManager\7 RegKey8=HKCU\Software\DownloadManager\8 RegKey9=HKCU\Software\DownloadManager\9 RegKey10=HKCU\Software\DownloadManager\10 RegKey11=HKCU\Software\DownloadManager\11 RegKey12=HKCU\Software\DownloadManager\12 RegKey13=HKCU\Software\DownloadManager\13 RegKey14=HKCU\Software\DownloadManager\14 RegKey15=HKCU\Software\DownloadManager\15 RegKey16=HKCU\Software\DownloadManager\16 RegKey17=HKCU\Software\DownloadManager\17 RegKey18=HKCU\Software\DownloadManager\18 RegKey19=HKCU\Software\DownloadManager\19 RegKey20=HKCU\Software\DownloadManager\20 RegKey21=HKCU\Software\DownloadManager\21 RegKey22=HKCU\Software\DownloadManager\22 RegKey23=HKCU\Software\DownloadManager\23 RegKey24=HKCU\Software\DownloadManager\24 RegKey25=HKCU\Software\DownloadManager\25 RegKey26=HKCU\Software\DownloadManager\26 RegKey27=HKCU\Software\DownloadManager\27 RegKey28=HKCU\Software\DownloadManager\28 RegKey29=HKCU\Software\DownloadManager\29 RegKey30=HKCU\Software\DownloadManager\30 RegKey31=HKCU\Software\DownloadManager\31 RegKey32=HKCU\Software\DownloadManager\32 RegKey33=HKCU\Software\DownloadManager\33 RegKey34=HKCU\Software\DownloadManager\34 RegKey35=HKCU\Software\DownloadManager\35 RegKey36=HKCU\Software\DownloadManager\36 RegKey37=HKCU\Software\DownloadManager\37 RegKey38=HKCU\Software\DownloadManager\38 RegKey39=HKCU\Software\DownloadManager\39 RegKey40=HKCU\Software\DownloadManager\40 RegKey41=HKCU\Software\DownloadManager\41 RegKey42=HKCU\Software\DownloadManager\42 RegKey43=HKCU\Software\DownloadManager\43 RegKey44=HKCU\Software\DownloadManager\44 RegKey45=HKCU\Software\DownloadManager\45 RegKey46=HKCU\Software\DownloadManager\46 RegKey47=HKCU\Software\DownloadManager\47 RegKey48=HKCU\Software\DownloadManager\48 RegKey49=HKCU\Software\DownloadManager\49 RegKey50=HKCU\Software\DownloadManager\50 RegKey51=HKCU\Software\DownloadManager\51 RegKey52=HKCU\Software\DownloadManager\52 RegKey53=HKCU\Software\DownloadManager\53 RegKey54=HKCU\Software\DownloadManager\54 RegKey55=HKCU\Software\DownloadManager\55 RegKey56=HKCU\Software\DownloadManager\56 RegKey57=HKCU\Software\DownloadManager\57 RegKey58=HKCU\Software\DownloadManager\58 RegKey59=HKCU\Software\DownloadManager\59 RegKey60=HKCU\Software\DownloadManager\60 RegKey61=HKCU\Software\DownloadManager\61 RegKey62=HKCU\Software\DownloadManager\62 RegKey63=HKCU\Software\DownloadManager\63 RegKey64=HKCU\Software\DownloadManager\64 RegKey65=HKCU\Software\DownloadManager\65 RegKey66=HKCU\Software\DownloadManager\66 RegKey67=HKCU\Software\DownloadManager\67 RegKey68=HKCU\Software\DownloadManager\68 RegKey69=HKCU\Software\DownloadManager\69 RegKey70=HKCU\Software\DownloadManager\70 RegKey71=HKCU\Software\DownloadManager\71 RegKey72=HKCU\Software\DownloadManager\72 RegKey73=HKCU\Software\DownloadManager\73 RegKey74=HKCU\Software\DownloadManager\74 RegKey75=HKCU\Software\DownloadManager\75 RegKey76=HKCU\Software\DownloadManager\maxID Tags=ccinternet ID=Internet Download Manager * Author=Winapp2.ini Project [Intuit Data Protect *] DetectFile=%LocalAppData%\Intuit\Intuit Data Protect FileKey1=%LocalAppData%\Intuit\Intuit Data Protect|*.log FileKey2=%ProgramData%\Intuit\Intuit Data Protect|*.log Tags=ccutil ID=Intuit Data Protect * Author=Winapp2.ini Project [Intuit Entitlement Client *] DetectFile=%ProgramData%\Intuit\Entitlement Client FileKey1=%ProgramData%\Intuit\Entitlement Client\*|IntuitEntitlementLog* Tags=ccapps ID=Intuit Entitlement Client * Author=Winapp2.ini Project [Intuit Proline Tax Import *] DetectFile=%AppData%\Intuit\PTI FileKey1=%AppData%\Intuit\PTI\Log|* Tags=ccapps ID=Intuit Proline Tax Import * Author=Winapp2.ini Project [Intuit QuickBooks *] Detect=HKLM\Software\Intuit\QuickBooks FileKey1=%CommonProgramFiles%\Intuit\Quickbooks\QBUpdate\Log|* FileKey2=%LocalAppData%\Intuit\QuickBooks\Log|*|RECURSE FileKey3=%ProgramData%\Common Files\Intuit\Quickbooks\qbupdate\log|* FileKey4=%ProgramData%\Intuit\QBWebConnector\log|* FileKey5=%ProgramData%\Intuit\Quickbooks|*.log;qbsdklog.txt FileKey6=%ProgramData%\Intuit\QuickBooks DB Server Manager|*.log;*.old Tags=ccapps ID=Intuit QuickBooks * Author=Winapp2.ini Project [Intuit Quicken *] Detect1=HKLM\Software\Intuit\Quicken Detect2=HKLM\Software\Quicken FileKey1=%AppData%\Intuit\Quicken\Log|*.log;*.txt FileKey2=%AppData%\Quicken\Log|*.log;*.txt FileKey3=%LocalAppData%\Intuit\Common\Authorization\V1\Logs|*.txt FileKey4=%LocalAppData%\Quicken\Common\Authorization\V1\Logs|*.txt FileKey5=%ProgramData%\Intuit\Quicken\Log|*.log FileKey6=%ProgramData%\Intuit\Quicken\Log\installer|*|REMOVESELF FileKey7=%ProgramData%\Intuit\SendError|*.log FileKey8=%ProgramData%\Quicken\Inet\QWWebData|LOG.old|RECURSE FileKey9=%ProgramData%\Quicken\Inet\QWWebData\Cache|* FileKey10=%ProgramData%\Quicken\Inet\QWWebData\GPUCache|*|REMOVESELF FileKey11=%ProgramData%\Quicken\Inet\QWWebData\Local Storage\leveldb|*tmp FileKey12=%ProgramData%\Quicken\Log|*.log FileKey13=%ProgramData%\Quicken\Log\installer|*|REMOVESELF FileKey14=%ProgramData%\Quicken\SendError|*.log FileKey15=%ProgramFiles%\Quicken\PDFDrv|install.log;InstallPDFConverter.log FileKey16=%UserProfile%\Documents\Quicken\GPUCache|*|REMOVESELF Tags=ccapps ID=Intuit Quicken * Author=Winapp2.ini Project [Intuit TurboTax *] DetectFile=%ProgramFiles%\TurboTax* FileKey1=%AppData%\Intuit*|*.log|RECURSE FileKey2=%CommonProgramFiles%\Intuit\Internet Client|Msdun13.exe FileKey3=%ProgramData%|*.bc FileKey4=%ProgramData%\Intuit*|*.log|RECURSE FileKey5=%ProgramData%\Intuit\Common\*\*\Logs|* FileKey6=%ProgramData%\Intuit\TurboTax\MSI\*\Logs|* FileKey7=%ProgramFiles%\TurboTax*|*.txt Tags=ccapps ID=Intuit TurboTax * Author=Winapp2.ini Project [inZOI *] DetectFile=%LocalAppData%\BlueClient FileKey1=%LocalAppData%\BlueClient\Intermediate\AssetRegistryCache|* FileKey2=%LocalAppData%\BlueClient\Saved|*.upipelinecache FileKey3=%LocalAppData%\BlueClient\Saved\Logs|*|RECURSE FileKey4=%LocalAppData%\BlueClient\Saved\webcache_*|*|RECURSE FileKey5=%UserProfile%\Documents\inZOI|*.log Tags=ccapps ID=inZOI * Author=Winapp2.ini Project [IObit Advanced SystemCare *] Detect=HKLM\Software\IObit\Advanced SystemCare FileKey1=%AppData%\IObit\Advanced SystemCare*|*.log;*_UndeleteReg.dat FileKey2=%AppData%\IObit\Advanced SystemCare*\Backup|*.reg FileKey3=%AppData%\IObit\Advanced SystemCare*\Boottime|*.log FileKey4=%AppData%\IObit\Advanced SystemCare*\ClonedFilesScanner|*_log.txt FileKey5=%AppData%\IObit\Advanced SystemCare*\EmptyFolder|*|RECURSE FileKey6=%AppData%\IObit\Advanced SystemCare*\Homepage*|*.new;*.old FileKey7=%AppData%\IObit\Advanced SystemCare*\Log|*|RECURSE FileKey8=%AppData%\IObit\Advanced SystemCare*\LogBackup*|*|RECURSE FileKey9=%AppData%\IObit\Advanced SystemCare*\TrayProductData|StatCache.db FileKey10=%ProgramData%\IObit\Advanced SystemCare*\Homepage*|*.log FileKey11=%ProgramData%\IObit\Advanced SystemCare*\Log|*|REMOVESELF FileKey12=%ProgramData%\IObit\ASCDownloader|*.log FileKey13=%ProgramFiles%\IObit\Advanced SystemCare Ultimate\Antivirus\BackupRec|*|RECURSE FileKey14=%ProgramFiles%\IObit\Advanced SystemCare*|*.log;*.tmp;*.txt|RECURSE FileKey15=%ProgramFiles%\IObit\Advanced SystemCare*\*.cab_Temp|*|REMOVESELF FileKey16=%ProgramFiles%\IObit\Advanced SystemCare*\ASCServiceLog|*|RECURSE FileKey17=%ProgramFiles%\IObit\Advanced SystemCare*\DumpFile|*.dmp FileKey18=%ProgramFiles%\IObit\Advanced SystemCare*\LatestNews|*.dat FileKey19=%ProgramFiles%\IObit\Advanced SystemCare*\Update|UpdateHistory.ini FileKey20=%SystemDrive%\Users\Default\AppData\Roaming\IObit\Advanced SystemCare*|*.log FileKey21=%WinDir%\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare*|*.log FileKey22=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare*|*.log RegKey1=HKLM\Software\IObit\Advanced SystemCare|LastUseDate RegKey2=HKLM\Software\IObit\Advanced SystemCare|LastWrite RegKey3=HKLM\Software\IObit\ASC|UninstallDate Tags=ccutil ID=IObit Advanced SystemCare * Author=Winapp2.ini Project [IObit Driver Booster *] DetectFile1=%AppData%\IObit\Driver Booster DetectFile2=%ProgramFiles%\IObit\Driver Booster FileKey1=%AppData%\IObit\Driver Booster|*.log|RECURSE FileKey2=%AppData%\IObit\Driver Booster\Logs|*|RECURSE FileKey3=%ProgramFiles%\IObit\Driver Booster|*.log FileKey4=%ProgramFiles%\IObit\Driver Booster\Update|*.tmp Tags=ccutil ID=IObit Driver Booster * Author=Winapp2.ini Project [IObit KB Downloader *] DetectFile=%ProgramData%\IObit\KBDownloader FileKey1=%ProgramData%\IObit\KBDownloader|*|RECURSE Tags=ccutil ID=IObit KB Downloader * Author=Winapp2.ini Project [IObit LiveUpdate *] DetectFile=%ProgramFiles%\IObit\LiveUpdate FileKey1=%ProgramFiles%\IObit\LiveUpdate|*.log|RECURSE Tags=ccutil ID=IObit LiveUpdate * Author=Winapp2.ini Project [IObit Malware Fighter *] DetectFile=%ProgramFiles%\IObit\IObit Malware Fighter FileKey1=%ProgramFiles%\IObit\IObit Malware Fighter\adsremoval\IE|*.log FileKey2=%ProgramFiles%\IObit\IObit Malware Fighter\log|*|RECURSE Tags=ccutil ID=IObit Malware Fighter * Author=Winapp2.ini Project [IObit Smart Defrag *] DetectFile=%ProgramFiles%\IObit\Smart Defrag* FileKey1=%ProgramFiles%\IObit\Smart Defrag*|*.log FileKey2=%ProgramFiles%\IObit\Smart Defrag*\Log|* FileKey3=%ProgramFiles%\IObit\Smart Defrag*\Temp|*|RECURSE FileKey4=%ProgramFiles%\IObit\Smart Defrag*\Update|*.tmp Tags=ccutil ID=IObit Smart Defrag * Author=Winapp2.ini Project [IObit Software Updater *] DetectFile=%AppData%\IObit\Software Updater FileKey1=%AppData%\IObit\Software Updater|*.log;UpdateInfo.ini FileKey2=%AppData%\IObit\Software Updater\*Log|* Tags=ccutil ID=IObit Software Updater * Author=Winapp2.ini Project [IObit StartMenu8 *] Detect=HKLM\Software\IObit\StartMenu FileKey1=%AppData%\IObit\StartMenu 8|*.log FileKey2=%ProgramFiles%\IObit\Start Menu 8\Freeware|*.exe Tags=ccutil ID=IObit StartMenu8 * Author=Winapp2.ini Project [IObit Uninstaller *] DetectFile=%AppData%\IObit\IObit Uninstaller FileKey1=%AppData%\IObit\IObit Uninstaller\*Log|* FileKey2=%AppData%\IObit\IObit Uninstaller\Installer|*.dbg FileKey3=%ProgramFiles%\IObit\iObit Uninstaller|*.log|RECURSE Tags=ccutil ID=IObit Uninstaller * Author=Winapp2.ini Project [IP Hider Pro *] DetectFile=%AppData%\IP Hider Pro FileKey1=%AppData%\IP Hider Pro\Logs|* Tags=ccinternet ID=IP Hider Pro * Author=Winapp2.ini Project [Iperius Backup *] DetectFile=%ProgramFiles%\Iperius Backup FileKey1=%ProgramData%\IperiusBackup\Logs|*|RECURSE Tags=ccapps ID=Iperius Backup * Author=Winapp2.ini Project [IPinside LWS Agent *] DetectFile=%UserProfile%\AppData\LocalLow\IPinside FileKey1=%UserProfile%\AppData\LocalLow\IPinside|*.log Tags=ccapps ID=IPinside LWS Agent * Author=Winapp2.ini Project [iPod-Cloner *] Detect=HKCU\Software\iPod-Cloner FileKey1=%ProgramFiles%\iPod-Cloner|*.log FileKey2=%ProgramFiles%\iPod-Cloner\ReadCache|* FileKey3=%SystemDrive%|dtdlog.txt Tags=ccmedia ID=iPod-Cloner * Author=Winapp2.ini Project [iResizer *] Detect=HKCU\Software\Teorex\iResizer RegKey1=HKCU\Software\Teorex\iResizer\RecentFileList Tags=ccapps ID=iResizer * Author=Winapp2.ini Project [Iridium Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|*Web Data FileKey2=%LocalAppData%\Iridium\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Iridium\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Iridium Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Iridium Autoplay Preferences *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Iridium Autoplay Preferences * Author=Winapp2.ini Project [Iridium Bookmark Backups *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|Bookmarks.bak Tags=ccapps ID=Iridium Bookmark Backups * Author=Winapp2.ini Project [Iridium Bookmark Favicons *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|favicons* Tags=ccapps ID=Iridium Bookmark Favicons * Author=Winapp2.ini Project [Iridium Caches *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Iridium\User Data|Module Info Cache FileKey3=%LocalAppData%\Iridium\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Iridium\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Iridium\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Iridium\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Iridium\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Iridium\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Iridium\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Iridium\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Iridium\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Iridium\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Iridium\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Iridium\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Iridium\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Iridium\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Iridium\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Iridium\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Iridium\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Iridium Caches * Author=Winapp2.ini Project [Iridium Default App Handlers *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|PreferredApps Tags=ccapps ID=Iridium Default App Handlers * Author=Winapp2.ini Project [Iridium Download History *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Iridium\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Iridium Download History * Author=Winapp2.ini Project [Iridium DRM Data *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Iridium\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Iridium DRM Data * Author=Winapp2.ini Project [Iridium Extension Cookies *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|Extension Cookies Tags=ccapps ID=Iridium Extension Cookies * Author=Winapp2.ini Project [Iridium Pinned Tabs *] DetectFile=%LocalAppData%\Iridium\User Data RegKey1=HKCU\Software\Iridium\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Iridium Pinned Tabs * Author=Winapp2.ini Project [Iridium Privacy Sandbox *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data|*first_party_sets* FileKey2=%LocalAppData%\Iridium\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Iridium\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Iridium\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Iridium\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Iridium\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Iridium\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Iridium\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Iridium Privacy Sandbox * Author=Winapp2.ini Project [Iridium Progressive Web Apps *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Iridium Progressive Web Apps * Author=Winapp2.ini Project [Iridium Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|Login Data* Tags=ccapps ID=Iridium Saved Usernames & Passwords * Author=Winapp2.ini Project [Iridium Security & Threat Detection *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|DIPS* FileKey2=%LocalAppData%\Iridium\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Iridium\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Iridium\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Iridium\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Iridium\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Iridium\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Iridium\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Iridium\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Iridium\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Iridium\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Iridium\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Iridium Security & Threat Detection * Author=Winapp2.ini Project [Iridium Shopping Insights *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Iridium\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Iridium\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Iridium\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Iridium\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Iridium Shopping Insights * Author=Winapp2.ini Project [Iridium Storage Quota Manager *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|QuotaManager Tags=ccapps ID=Iridium Storage Quota Manager * Author=Winapp2.ini Project [Iridium Sync Data *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Iridium Sync Data * Author=Winapp2.ini Project [Iridium Telemetry *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\Application|debug.log FileKey2=%LocalAppData%\Iridium\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Iridium\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Iridium\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Iridium\User Data\*|*.log FileKey6=%LocalAppData%\Iridium\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Iridium\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Iridium\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Iridium\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Iridium\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Iridium\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Iridium\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Iridium\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Iridium\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Iridium\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Iridium\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Iridium\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Iridium\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Iridium\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Iridium\Application|debug.log FileKey21=%ProgramFiles%\Iridium\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Iridium\BlBeacon|failed_count RegKey2=HKCU\Software\Iridium\BlBeacon|state RegKey3=HKCU\Software\Iridium\Installer|LastChecked RegKey4=HKCU\Software\Iridium\StabilityMetrics Tags=ccapps ID=Iridium Telemetry * Author=Winapp2.ini Project [Iridium Web Browsing Cookies *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Iridium Web Browsing Cookies * Author=Winapp2.ini Project [Iridium Web Browsing History *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Iridium Web Browsing History * Author=Winapp2.ini Project [Iridium Web Browsing Session *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Iridium\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Iridium Web Browsing Session * Author=Winapp2.ini Project [Iridium Web Storage *] DetectFile=%LocalAppData%\Iridium\User Data FileKey1=%LocalAppData%\Iridium\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Iridium\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Iridium\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Iridium\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Iridium\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Iridium\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Iridium\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Iridium\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Iridium Web Storage * Author=Winapp2.ini Project [iSkysoft Helper Compact *] DetectFile=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact FileKey1=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact|ISHelper*.exe_temp;ProductUpdateLists.xml FileKey2=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact\DATADICT|*|RECURSE FileKey3=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact\log|*|RECURSE FileKey4=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact\Temp|*|RECURSE RegKey1=HKLM\Software\iSkysoft\iSkysoft Helper Compact RegKey2=HKLM\Software\Wow6432Node\iSkysoft\iSkysoft Helper Compact Tags=ccmedia ID=iSkysoft Helper Compact * Author=Winapp2.ini Project [iSkysoft Video Converter *] Detect1=HKLM\Software\iSkysoft\iSkysoft Video Converter Detect2=HKLM\Software\iSkysoft\iSkysoft Video Converter Ultimate FileKey1=%ProgramData%\iSkysoft Video Converter*|*.dat.bak FileKey2=%ProgramData%\iSkysoft Video Converter*\Temp*Dir|*|RECURSE FileKey3=%ProgramFiles%\iSkysoft\Video Converter*\Log|*|RECURSE FileKey4=%ProgramFiles%\iSkysoft\Video Converter*\TempThumbDir|*|RECURSE Tags=ccmedia ID=iSkysoft Video Converter * Author=Winapp2.ini Project [iSkysoft Video Editor *] DetectFile=%ProgramFiles%\iSkysoft\Video Editor FileKey1=%ProgramFiles%\iSkysoft\Video Editor\Log|*.txt Tags=ccmedia ID=iSkysoft Video Editor * Author=Winapp2.ini Project [IsoBuster *] Detect=HKCU\Software\Smart Projects\IsoBuster RegKey1=HKCU\Software\Smart Projects\IsoBuster\RecentImages Tags=ccapps ID=IsoBuster * Author=Winapp2.ini Project [iSpy *] Detect=HKCU\Software\ISpy\ISPY FileKey1=%AppData%\iSpy\WebServerRoot\Media|*|RECURSE FileKey2=%LocalAppData%\iSpy\WebServerRoot\Media|*|RECURSE Tags=ccapps ID=iSpy * Author=Winapp2.ini Project [iSysCleaner *] DetectFile=%ProgramFiles%\Utils\iSysCleaner FileKey1=%ProgramFiles%\Utils\iSysCleaner\traces|* Tags=ccutil ID=iSysCleaner * Author=Winapp2.ini Project [It Takes Two *] DetectFile=%LocalAppData%\ItTakesTwo FileKey1=%LocalAppData%\ItTakesTwo\Saved\Logs|* Tags=ccapps ID=It Takes Two * Author=Winapp2.ini Project [iTop Screen Recorder *] DetectFile=%AppData%\iTop Screen Recorder FileKey1=%AppData%\iTop Screen Recorder\Logs|* Tags=ccmedia ID=iTop Screen Recorder * Author=Winapp2.ini Project [iTop Screenshot *] DetectFile=%AppData%\iTop Screenshot FileKey1=%AppData%\iTop Screenshot\Log|*.log Tags=ccutil ID=iTop Screenshot * Author=Winapp2.ini Project [iTop VPN *] DetectFile=%AppData%\iTop VPN FileKey1=%AppData%\iTop VPN\Log|*.bak*;*.log Tags=ccinternet ID=iTop VPN * Author=Winapp2.ini Project [iWisoft Free Video Converter *] DetectFile=%ProgramFiles%\iWisoft Free Video Converter FileKey1=%ProgramFiles%\iWisoft Free Video Converter|VideoConverter.log Tags=ccmedia ID=iWisoft Free Video Converter * Author=Winapp2.ini Project [iXL *] DetectFile=%AppData%\Fisher-Price\iXL FileKey1=%AppData%\Fisher-Price\iXL\Log|* Tags=ccapps ID=iXL * Author=Winapp2.ini Project [iZotope RX 2 *] DetectFile=%AppData%\iZotope\iZotope RX 2 Session Data FileKey1=%AppData%\iZotope\iZotope RX 2 Session Data|*|RECURSE Tags=ccapps ID=iZotope RX 2 * Author=Winapp2.ini Project [Jade Empire *] Detect=HKCU\Software\Valve\Steam\Apps\7110 FileKey1=%ProgramFiles%\Steam\steamapps\common\Jade Empire\logs|* Tags=ccapps ID=Jade Empire * Author=Winapp2.ini Project [Jagex Launcher *] DetectFile=%UserProfile%\jagexcache FileKey1=%ProgramData%\Jagex|*.jcache|RECURSE FileKey2=%UserProfile%\jagex*|*|RECURSE FileKey3=%WinDir%\.jagex*|*|REMOVESELF ExcludeKey1=PATH|%UserProfile%\jagexcache\jagexlauncher\|* Tags=ccapps ID=Jagex Launcher * Author=Winapp2.ini Project [JAJC *] DetectFile=%UserProfile%\JAJC FileKey1=%UserProfile%\JAJC\Avatars|*|RECURSE FileKey2=%UserProfile%\JAJC\Logs|*|RECURSE Tags=ccinternet ID=JAJC * Author=Winapp2.ini Project [Jalatext *] DetectFile=%UserProfile%\.jalatext FileKey1=%UserProfile%\.jalatext\log|* Tags=ccapps ID=Jalatext * Author=Winapp2.ini Project [James Patterson's Women's Murder Club: Twice in a Blue Moon *] DetectFile=%AppData%\Flood Light Games\WMC3 FileKey1=%AppData%\Flood Light Games\WMC3|*.log Tags=ccapps ID=James Patterson's Women's Murder Club: Twice in a Blue Moon * Author=Winapp2.ini Project [jAnrufmonitor *] DetectFile=%ProgramFiles%\jAnrufmonitor FileKey1=%ProgramFiles%\jAnrufmonitor\data|*.log FileKey2=%ProgramFiles%\jAnrufmonitor\lib\cache|classloader.cache.log FileKey3=%ProgramFiles%\jAnrufmonitor\logs|* Tags=ccinternet ID=jAnrufmonitor * Author=Winapp2.ini Project [Jasc Animation Shop *] Detect1=HKCU\Software\JASC\Animation Shop Detect2=HKCU\Software\Jasc\Animation Shop 2 RegKey1=HKCU\Software\Jasc\Animation Shop 2\Recent File List RegKey2=HKCU\Software\JASC\Animation Shop\Cache Tags=ccmedia ID=Jasc Animation Shop * Author=Winapp2.ini Project [Jatter Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|*Web Data FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Jatter\Jatter\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Jatter Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Jatter Autoplay Preferences *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Jatter Autoplay Preferences * Author=Winapp2.ini Project [Jatter Bookmark Backups *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|Bookmarks.bak Tags=ccapps ID=Jatter Bookmark Backups * Author=Winapp2.ini Project [Jatter Bookmark Favicons *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|favicons* Tags=ccapps ID=Jatter Bookmark Favicons * Author=Winapp2.ini Project [Jatter Caches *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Jatter\Jatter\User Data|Module Info Cache FileKey3=%LocalAppData%\Jatter\Jatter\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Jatter\Jatter\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Jatter\Jatter\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Jatter\Jatter\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Jatter\Jatter\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Jatter\Jatter\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Jatter\Jatter\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Jatter\Jatter\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Jatter\Jatter\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Jatter\Jatter\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Jatter\Jatter\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Jatter\Jatter\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Jatter\Jatter\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Jatter\Jatter\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Jatter\Jatter\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Jatter\Jatter\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Jatter\Jatter\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Jatter Caches * Author=Winapp2.ini Project [Jatter Default App Handlers *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|PreferredApps Tags=ccapps ID=Jatter Default App Handlers * Author=Winapp2.ini Project [Jatter Download History *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Jatter Download History * Author=Winapp2.ini Project [Jatter DRM Data *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Jatter\Jatter\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Jatter DRM Data * Author=Winapp2.ini Project [Jatter Extension Cookies *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|Extension Cookies Tags=ccapps ID=Jatter Extension Cookies * Author=Winapp2.ini Project [Jatter Pinned Tabs *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data RegKey1=HKCU\Software\Jatter\Jatter\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Jatter Pinned Tabs * Author=Winapp2.ini Project [Jatter Privacy Sandbox *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data|*first_party_sets* FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Jatter\Jatter\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Jatter\Jatter\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Jatter\Jatter\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Jatter\Jatter\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Jatter\Jatter\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Jatter\Jatter\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Jatter Privacy Sandbox * Author=Winapp2.ini Project [Jatter Progressive Web Apps *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Jatter Progressive Web Apps * Author=Winapp2.ini Project [Jatter Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|Login Data* Tags=ccapps ID=Jatter Saved Usernames & Passwords * Author=Winapp2.ini Project [Jatter Security & Threat Detection *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|DIPS* FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Jatter\Jatter\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Jatter\Jatter\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Jatter\Jatter\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Jatter\Jatter\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Jatter\Jatter\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Jatter\Jatter\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Jatter\Jatter\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Jatter\Jatter\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Jatter\Jatter\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Jatter\Jatter\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Jatter Security & Threat Detection * Author=Winapp2.ini Project [Jatter Shopping Insights *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Jatter\Jatter\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Jatter\Jatter\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Jatter\Jatter\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Jatter Shopping Insights * Author=Winapp2.ini Project [Jatter Storage Quota Manager *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|QuotaManager Tags=ccapps ID=Jatter Storage Quota Manager * Author=Winapp2.ini Project [Jatter Sync Data *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Jatter Sync Data * Author=Winapp2.ini Project [Jatter Telemetry *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\Application|debug.log FileKey2=%LocalAppData%\Jatter\Jatter\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Jatter\Jatter\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Jatter\Jatter\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Jatter\Jatter\User Data\*|*.log FileKey6=%LocalAppData%\Jatter\Jatter\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Jatter\Jatter\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Jatter\Jatter\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Jatter\Jatter\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Jatter\Jatter\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Jatter\Jatter\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Jatter\Jatter\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Jatter\Jatter\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Jatter\Jatter\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Jatter\Jatter\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Jatter\Jatter\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Jatter\Jatter\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Jatter\Jatter\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Jatter\Jatter\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Jatter\Jatter\Application|debug.log FileKey21=%ProgramFiles%\Jatter\Jatter\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Jatter\Jatter\BlBeacon|failed_count RegKey2=HKCU\Software\Jatter\Jatter\BlBeacon|state RegKey3=HKCU\Software\Jatter\Jatter\Installer|LastChecked RegKey4=HKCU\Software\Jatter\Jatter\StabilityMetrics Tags=ccapps ID=Jatter Telemetry * Author=Winapp2.ini Project [Jatter Web Browsing Cookies *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Jatter Web Browsing Cookies * Author=Winapp2.ini Project [Jatter Web Browsing History *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Jatter Web Browsing History * Author=Winapp2.ini Project [Jatter Web Browsing Session *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Jatter Web Browsing Session * Author=Winapp2.ini Project [Jatter Web Storage *] DetectFile=%LocalAppData%\Jatter\Jatter\User Data FileKey1=%LocalAppData%\Jatter\Jatter\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Jatter\Jatter\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Jatter\Jatter\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Jatter\Jatter\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Jatter\Jatter\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Jatter\Jatter\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Jatter\Jatter\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Jatter\Jatter\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Jatter Web Storage * Author=Winapp2.ini Project [JavaRa *] DetectFile=%ProgramFiles%\JavaRa* FileKey1=%ProgramFiles%\JavaRa 2.0|*.log|RECURSE FileKey2=%SystemDrive%|JavaRa.log Tags=ccinternet ID=JavaRa * Author=Winapp2.ini Project [Javelin PDF Reader *] DetectFile=%AppData%\DrumlinSecurity\JavelinNew FileKey1=%AppData%\DrumlinSecurity\JavelinNew|*history.xml FileKey2=%AppData%\DrumlinSecurity\JavelinNew\logs|* Tags=ccapps ID=Javelin PDF Reader * Author=Winapp2.ini Project [JDownloader *] Detect1=HKLM\Software\Classes\JDownloader2 Detect2=HKLM\Software\JDownloader DetectFile1=%ProgramFiles%\JDownloader DetectFile2=%ProgramFiles%\JDownloader 2 FileKey1=%LocalAppData%\JDownloader*2*|*.log;SessionInstallLog.json.*|RECURSE FileKey2=%LocalAppData%\JDownloader*2*\.install4j|*.log FileKey3=%LocalAppData%\JDownloader*2*\captchas|*|RECURSE FileKey4=%LocalAppData%\JDownloader*2*\cfg|CaptchaDialogDimensions_*.json FileKey5=%LocalAppData%\JDownloader*2*\logs|*|RECURSE FileKey6=%LocalAppData%\JDownloader*2*\tmp|*|RECURSE FileKey7=%ProgramFiles%\JDownloader*|*.lck;*.log;*.log.*;SessionInstallLog.json.*;updateLog.txt|RECURSE FileKey8=%ProgramFiles%\JDownloader*\.junique|* FileKey9=%ProgramFiles%\JDownloader*\captchas|*|RECURSE FileKey10=%ProgramFiles%\JDownloader*\container|* FileKey11=%ProgramFiles%\JDownloader*\downloads|* FileKey12=%ProgramFiles%\JDownloader*\tmp\linksave|* FileKey13=%ProgramFiles%\JDownloader*2*\.install4j|*.log FileKey14=%ProgramFiles%\JDownloader*2*\cfg|CaptchaDialogDimensions_*.json FileKey15=%ProgramFiles%\JDownloader*2*\logs|*|RECURSE FileKey16=%ProgramFiles%\JDownloader*2*\tmp|*|RECURSE FileKey17=%UserProfile%\.jd_home|JDownloader.log FileKey18=%UserProfile%\.jd_home\logs|*.0 ExcludeKey1=FILE|%LocalAppData%\JDownloader 2.0\.install4j\|files.log ExcludeKey2=PATH|%LocalAppData%\JDownloader*2*\cfg\|subconf_*.ejs ExcludeKey3=PATH|%ProgramFiles%\JDownloader*2*\cfg\|subconf_*.ejs Tags=ccinternet ID=JDownloader * Author=Winapp2.ini Project [JDownloader Backups *] Detect=HKLM\Software\JDownloader DetectFile=%ProgramFiles%\JDownloader FileKey1=%ProgramFiles%\JDownloader*\backup|* Tags=ccinternet ID=JDownloader Backups * Author=Winapp2.ini Project [jEdit *] DetectFile=%UserProfile%\.jedit FileKey1=%UserProfile%\.jedit|*.log|RECURSE FileKey2=%UserProfile%\.jedit\jars-cache|*|RECURSE Tags=ccapps ID=jEdit * Author=Winapp2.ini Project [Jellyfin Media Player *] DetectFile=%LocalAppData%\JellyfinMediaPlayer FileKey1=%LocalAppData%\Jellyfin Media Player\cache|*|RECURSE FileKey2=%LocalAppData%\Jellyfin Media Player\QtWebEngine\Default\GPUCache|* FileKey3=%LocalAppData%\JellyfinMediaPlayer\logs|*.log Tags=ccmedia ID=Jellyfin Media Player * Author=Winapp2.ini Project [Jet Downloader *] DetectFile=%ProgramFiles%\CloudTech\Jet Downloader FileKey1=%ProgramFiles%\CloudTech\Jet Downloader|*.log Tags=ccinternet ID=Jet Downloader * Author=Winapp2.ini Project [JetBrains dotPeek v1.1 *] Detect=HKLM\Software\JetBrains\dotPeek FileKey1=%LocalAppData%\JetBrains\dotPeek\v1.1\Caches|*|REMOVESELF Tags=ccutil ID=JetBrains dotPeek v1.1 * Author=Winapp2.ini Project [Jetbrains IntelliJ IDEA *] Detect1=HKCU\Software\JetBrains\IntelliJ IDEA Detect2=HKCU\Software\JetBrains\IntelliJ IDEA Community Edition FileKey1=%UserProfile%\.IdeaC*\System\Caches|* FileKey2=%UserProfile%\.IdeaC*\System\LocalHistory|* FileKey3=%UserProfile%\.IdeaC*\System\Logs|* FileKey4=%UserProfile%\.IdeaC*\System\tmp|*|RECURSE FileKey5=%UserProfile%\.IntelliJIdea12\system\Caches|* FileKey6=%UserProfile%\.IntelliJIdea12\system\LocalHistory|* FileKey7=%UserProfile%\.IntelliJIdea12\system\log|* FileKey8=%UserProfile%\.IntelliJIdea12\system\tmp|*|RECURSE Tags=ccutil ID=Jetbrains IntelliJ IDEA * Author=Winapp2.ini Project [Jetbrains Pycharm *] Detect=HKCU\Software\JetBrains\PyCharm FileKey1=%UserProfile%\.PyCharm*\system\caches|* FileKey2=%UserProfile%\.PyCharm*\system\log|* Tags=ccutil ID=Jetbrains Pycharm * Author=Winapp2.ini Project [Jetbrains WebStorm *] Detect=HKCU\Software\JetBrains\WebStorm FileKey1=%UserProfile%\.WebIde50\system\Caches|*|RECURSE FileKey2=%UserProfile%\.WebIde50\system\LocalHistory|*|RECURSE FileKey3=%UserProfile%\.WebIde50\system\Log|*|RECURSE FileKey4=%UserProfile%\.WebIde50\system\tmp|*|RECURSE Tags=ccutil ID=Jetbrains WebStorm * Author=Winapp2.ini Project [Jetico Personal Firewall *] Detect=HKCU\Software\Jetico\Personal Firewall FileKey1=%ProgramFiles%\Jetico\Jetico Personal Firewall|*.log Tags=ccinternet ID=Jetico Personal Firewall * Author=Winapp2.ini Project [Jitsi *] DetectFile=%ProgramFiles%\Jitsi FileKey1=%AppData%\Jitsi\avatarcache|*|RECURSE FileKey2=%AppData%\Jitsi\Log|*|RECURSE Tags=ccinternet ID=Jitsi * Author=Winapp2.ini Project [Jitsi Chat/File History *] DetectFile=%ProgramFiles%\Jitsi FileKey1=%AppData%\Jitsi\History*|*|RECURSE Tags=ccinternet ID=Jitsi Chat/File History * Author=Winapp2.ini Project [Joboshare DVD Toolkit *] Detect=HKCU\Software\Joboshare FileKey1=%SystemDrive%|*temp.txt;*test.txt FileKey2=%UserProfile%\Documents\Joboshare\DVD Copy\ifo_temp|*|REMOVESELF FileKey3=%UserProfile%\Documents\Joboshare\DVD Copy\log|*|REMOVESELF Tags=ccmedia ID=Joboshare DVD Toolkit * Author=Winapp2.ini Project [Join.Me *] Detect=HKCU\Software\join.me FileKey1=%LocalAppData%\join.me|*.log FileKey2=%LocalAppData%\join.me\join.me.*.*.*.*|*|REMOVESELF Tags=ccinternet ID=Join.Me * Author=Winapp2.ini Project [Jojo's Fashion Show *] DetectFile=%AppData%\Gamelab\Jojos Fashion Show FileKey1=%AppData%\Gamelab\Jojos Fashion Show|log.txt Tags=ccapps ID=Jojo's Fashion Show * Author=Winapp2.ini Project [JOSM *] DetectFile=%LocalAppData%\JOSM FileKey1=%LocalAppData%\JOSM\cache\tiles|*|RECURSE Tags=ccapps ID=JOSM * Author=Winapp2.ini Project [JRecoverer Software *] DetectFile=%UserProfile%\.jrecoverer-* FileKey1=%UserProfile%\.jrecoverer-*\logs|*.log FileKey2=%UserProfile%\.jrecoverer-*\reports|*|RECURSE Tags=ccutil ID=JRecoverer Software * Author=Winapp2.ini Project [JRiver Media Center 18 *] Detect=HKCU\Software\J. River\Media Center 18 FileKey1=%AppData%\J River\Media Center 18\Library|field (filename).jmd;field (name).jmd FileKey2=%UserProfile%\Documents\J River\Media Center 18\Library|*|RECURSE Tags=ccmedia ID=JRiver Media Center 18 * Author=Winapp2.ini Project [Jubler Subtitle Editor *] DetectFile=%AppData%\Jubler FileKey1=%AppData%\Jubler|log.txt Tags=ccmedia ID=Jubler Subtitle Editor * Author=Winapp2.ini Project [Juniper Networks *] Detect1=HKCU\Software\Juniper Networks Detect2=HKLM\Software\Juniper Networks FileKey1=%AppData%\Juniper Networks|*.log;*.old|RECURSE FileKey2=%LocalAppData%\Juniper Networks\Logging|* RegKey1=HKLM\Software\Juniper Networks\Default Tags=ccapps ID=Juniper Networks * Author=Winapp2.ini Project [Just King *] DetectFile=%UserProfile%\AppData\LocalLow\Vish Game Studio\King FileKey1=%UserProfile%\AppData\LocalLow\Vish Game Studio\King|*.log FileKey2=%UserProfile%\AppData\LocalLow\Vish Game Studio\King\Unity|*|REMOVESELF Tags=ccapps ID=Just King * Author=Winapp2.ini Project [Just Manager *] Detect=HKLM\Software\JustManager DetectFile=%ProgramFiles%\JustManager FileKey1=%LocalAppData%\JustManager|Log.txt Tags=ccapps ID=Just Manager * Author=Winapp2.ini Project [jv16 PowerTools *] DetectFile=%ProgramFiles%\jv16 PowerTools* FileKey1=%LocalAppData%\jv16PowerTools|*.log FileKey2=%ProgramFiles%\jv16 PowerTools*|*.log FileKey3=%ProgramFiles%\jv16 PowerTools*\Settings|*.log FileKey4=%ProgramFiles%\jv16 PowerTools*\Temp|*|RECURSE FileKey5=%ProgramFiles%\jv16 PowerTools\Debug|*.log;*.txt Tags=ccutil ID=jv16 PowerTools * Author=Winapp2.ini Project [jv16 PowerTools Backups *] DetectFile=%ProgramFiles%\jv16 PowerTools* FileKey1=%ProgramFiles%\jv16 PowerTools*|*.reg FileKey2=%ProgramFiles%\jv16 PowerTools*\Backups|*|RECURSE Tags=ccutil ID=jv16 PowerTools Backups * Author=Winapp2.ini Project [jv16 RegCleaner *] DetectFile=%ProgramFiles%\RegCleaner FileKey1=%ProgramFiles%\RegCleaner|old.dat FileKey2=%ProgramFiles%\RegCleaner\Backups|* Tags=ccutil ID=jv16 RegCleaner * Author=Winapp2.ini Project [K-Lite Codec Pack *] Detect=HKLM\Software\KLCodecPack FileKey1=%ProgramFiles%\K-Lite*|*.log;*.txt|RECURSE FileKey2=%SystemDrive%|*klcp_iph_*.tmp;*klcp_itp_*.tmp FileKey3=%UserProfile%\Desktop|klcp_codec_log.txt RegKey1=HKCU\Software\Gabest\vsfilter\DefTextPathes|Path0 RegKey2=HKCU\Software\Gabest\vsfilter\DefTextPathes|Path1 RegKey3=HKCU\Software\Gabest\vsfilter\DefTextPathes|Path2 Tags=ccmedia ID=K-Lite Codec Pack * Author=Winapp2.ini Project [Kakao Talk *] DetectFile=%LocalAppData%\Kakao\KakaoTalk FileKey1=%LocalAppData%\Kakao\KakaoTalk\Dump|*|RECURSE Tags=ccinternet ID=Kakao Talk * Author=Winapp2.ini Project [Kalypso Launcher *] DetectFile=%AppData%\Kalypso Media\Launcher FileKey1=%AppData%\Kalypso Media\Launcher|log*.txt Tags=ccapps ID=Kalypso Launcher * Author=Winapp2.ini Project [Kamo *] Detect=HKCU\Software\Piriform\Kamo FileKey1=%LocalAppData%\Kamo\TempBrowserDB|* FileKey2=%ProgramFiles%\Kamo|*.log;*.old FileKey3=%ProgramFiles%\Kamo\cache|*.old;LOG|RECURSE FileKey4=%ProgramFiles%\Kamo\cache\*Cache|*|RECURSE FileKey5=%ProgramFiles%\Kamo\NetFilter|*Log.txt FileKey6=%ProgramFiles%\Kamo\Support\Log|ErrorLog_*.txt FileKey7=%SystemDrive%\Support\Log|ErrorLog_*.txt RegKey1=HKCU\Software\Piriform\Kamo|epochAtInstall RegKey2=HKCU\Software\Piriform\Kamo|epochAtLastIPM RegKey3=HKCU\Software\Piriform\Kamo|epochForNextIPM RegKey4=HKCU\Software\Piriform\Kamo|epochSinceUILastUsed ExcludeKey1=FILE|%ProgramFiles%\Kamo\|install.log Tags=ccutil ID=Kamo * Author=Winapp2.ini Project [KarenWare Hasher *] Detect=HKCU\Software\KarenWare\Power Tools\Hasher RegKey1=HKCU\Software\KarenWare\Power Tools\Hasher|LastRun Tags=ccutil ID=KarenWare Hasher * Author=Winapp2.ini Project [Kaseto *] DetectFile=%LocalAppData%\Kaseto FileKey1=%LocalAppData%\Kaseto|*.backup FileKey2=%LocalAppData%\Kaseto\Logs|* Tags=ccmedia ID=Kaseto * Author=Winapp2.ini Project [Kaspersky *] Detect=HKCU\Software\KasperskyLab FileKey1=%ProgramData%\Kaspersky Lab|*.dmp*;*.log FileKey2=%ProgramData%\Kaspersky Lab\*\Bases|hdhm_temp_drives_* FileKey3=%ProgramData%\Kaspersky Lab\*\Bases\*|log*;strg*|RECURSE FileKey4=%ProgramData%\Kaspersky Lab\*\Bases\*\Cache|*|RECURSE FileKey5=%ProgramData%\Kaspersky Lab\*\Bases\Cache|*|RECURSE FileKey6=%ProgramData%\Kaspersky Lab\*\Data|*.*-shm;*.*-wal;*.bak*|RECURSE FileKey7=%ProgramData%\Kaspersky Lab\*\Data\KDSCRL|log* FileKey8=%ProgramData%\Kaspersky Lab\*\Data\Updater\Temporary Files|*|RECURSE FileKey9=%ProgramData%\Kaspersky Lab\*\Logs|*|RECURSE FileKey10=%ProgramData%\Kaspersky Lab\*\Report|*|RECURSE FileKey11=%ProgramData%\Kaspersky Lab\*\Temp|*|RECURSE FileKey12=%ProgramData%\Kaspersky Lab\Kaspersky Password Manager*\Logs|* FileKey13=%ProgramData%\Kaspersky Lab\UCPStorage|ucp_agent.bin.bak FileKey14=%ProgramFiles%\Kaspersky Lab\Kaspersky Password Manager*|*.bak* FileKey15=%ProgramFiles%\Kaspersky Lab\NetworkAgent\~dumps|* Tags=ccutil ID=Kaspersky * Author=Winapp2.ini Project [Kate's Video Toolkit *] Detect=HKCU\Software\Web Solution Mart\Kate's Video Toolkit FileKey1=%ProgramData%\Web Solution Mart\*|*.log|RECURSE Tags=ccmedia ID=Kate's Video Toolkit * Author=Winapp2.ini Project [Kazaa Lite Resurrection *] Detect=HKCU\Software\Kazaa\Kazaa Lite Resurrection RegKey1=HKCU\Software\Kazaa\Kazaa Lite Resurrection\Recent File List Tags=ccinternet ID=Kazaa Lite Resurrection * Author=Winapp2.ini Project [KDE *] Detect=HKCU\Software\KDE.org FileKey1=%UserProfile%\.kde\cache*|*|RECURSE Tags=ccapps ID=KDE * Author=Winapp2.ini Project [Kerish Doctor *] Detect=HKLM\Software\Kerish Products\Kerish Doctor FileKey1=%ProgramData%\Kerish Products\Kerish Doctor\Reports|* RegKey1=HKLM\Software\Kerish Products\Kerish Doctor|InstallDate RegKey2=HKLM\Software\Kerish Products\Kerish Doctor|LastScan RegKey3=HKLM\Software\Kerish Products\Kerish Doctor|LastStart RegKey4=HKLM\Software\Kerish Products\Kerish Doctor|LastUpdate RegKey5=HKLM\Software\Kerish Products\Kerish Doctor|LastWeeklyReport RegKey6=HKLM\Software\Kerish Products\Kerish Doctor|ServerDate Tags=ccutil ID=Kerish Doctor * Author=Winapp2.ini Project [Keroon Reset Local Password Pro *] DetectFile=%ProgramFiles%\Reset Local Password Pro FileKey1=%ProgramFiles%\Reset Local Password Pro|*.log Tags=ccutil ID=Keroon Reset Local Password Pro * Author=Winapp2.ini Project [Keyboard Tracer *] DetectFile=%ProgramData%\Keyboard Tracer FileKey1=%ProgramData%\Keyboard Tracer|*.log Tags=ccutil ID=Keyboard Tracer * Author=Winapp2.ini Project [KeyMapper *] DetectFile=%LocalAppData%\KeyMapper FileKey1=%LocalAppData%\KeyMapper|*.log Tags=ccutil ID=KeyMapper * Author=Winapp2.ini Project [Killing Floor 2 *] Detect=HKCU\Software\Valve\Steam\Apps\232090 FileKey1=%UserProfile%\Documents\My Games\KillingFloor2\KFGame\Logs|*|RECURSE Tags=ccapps ID=Killing Floor 2 * Author=Winapp2.ini Project [Kinetic Jump Updater *] DetectFile=%LocalAppData%\Kjs.AppLife.Update FileKey1=%LocalAppData%\Kjs.AppLife.Update|*.log Tags=ccapps ID=Kinetic Jump Updater * Author=Winapp2.ini Project [Kingo Root *] DetectFile=%LocalAppData%\Kingosoft\Kingo Root FileKey1=%LocalAppData%\Kingosoft\Kingo Root|*.log FileKey2=%LocalAppData%\Kingosoft\Kingo Root\LastLog|* Tags=ccapps ID=Kingo Root * Author=Winapp2.ini Project [Kingsoft Office *] Detect=HKCU\Software\Kingsoft DetectFile=%AppData%\Kingsoft\Office* FileKey1=%AppData%\Kingsoft\*|*.bak FileKey2=%AppData%\Kingsoft\*\backup|* FileKey3=%AppData%\Kingsoft\*\update\log|*.log FileKey4=%AppData%\Kingsoft\Office*\log\setup|*.log FileKey5=%AppData%\Kingsoft\Office*\OfficeSpace\log|*.log FileKey6=%LocalAppData%\Kingsoft\*\cache\http*|* FileKey7=%LocalAppData%\Kingsoft\WPS Cloud Files\UserData\Default\WebCache\http*|* FileKey8=%ProgramFiles%\Kingsoft\Kingsoft Office\*|*.log Tags=ccapps ID=Kingsoft Office * Author=Winapp2.ini Project [Kingston SSD Manager *] DetectFile=%ProgramFiles%\Kingston_SSD_Manager FileKey1=%ProgramFiles%\Kingston_SSD_Manager|*.log;*log.txt Tags=ccutil ID=Kingston SSD Manager * Author=Winapp2.ini Project [Kite Plugin *] DetectFile=%AppData%\Kite FileKey1=%AppData%\Kite\*Cache|* Tags=ccutil ID=Kite Plugin * Author=Winapp2.ini Project [Kiwix JS *] DetectFile=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e FileKey1=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e\LocalCache\Roaming\Kiwix JS Electron\*cache*|*|RECURSE FileKey3=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e\Settings|*.log* FileKey4=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Kiwix.KiwixJS_mc3511b08yc0e\TempState|*|REMOVESELF Tags=ccinternet ID=Kiwix JS * Author=Winapp2.ini Project [Kleaner *] DetectFile=%ProgramFiles%\Skyler Lyon\Kleaner FileKey1=%ProgramFiles%\Skyler Lyon\Kleaner|*.txt Tags=ccutil ID=Kleaner * Author=Winapp2.ini Project [KlokworkTeamConsole *] DetectFile=%ProgramFiles%\KlokworkTeamConsole FileKey1=%AppData%\com.mcgraphix.KlokworkTeamConsole\local store|debug.txt Tags=ccutil ID=KlokworkTeamConsole * Author=Winapp2.ini Project [KMS Emulator *] DetectFile1=%ProgramData%\KMSAuto* DetectFile2=%ProgramData%\Online_KMS_Activation DetectFile3=%ProgramFiles%\KMSpico DetectFile4=%WinDir%\AutoKMS FileKey1=%ProgramData%\KMSAuto*\bin|*.log FileKey2=%ProgramData%\Online_KMS_Activation|Logs.txt FileKey3=%ProgramFiles%\KMSpico\Logs|* FileKey4=%WinDir%\AutoKMS|*.log Tags=ccutil ID=KMS Emulator * Author=Winapp2.ini Project [Kobo Desktop *] DetectFile=%LocalAppData%\Kobo\Kobo Desktop Edition FileKey1=%LocalAppData%\Kobo\Kobo Desktop Edition\WebCache|*|RECURSE Tags=ccapps ID=Kobo Desktop * Author=Winapp2.ini Project [Kodak *] Detect1=HKCU\Software\Kodak Detect2=HKLM\Software\Eastman Kodak Company\KODAK AiO Home Center Detect3=HKLM\Software\Kodak\Kodak AiO Software DetectFile=%AppData%\Kodak\Share Button App FileKey1=%AppData%\Kodak\Share Button App|*.log FileKey2=%LocalAppData%|LaunchHomeCenter.log FileKey3=%LocalAppData%\Kodak\Diagnostics|UploadLog.xml FileKey4=%LocalAppData%\Kodak\Inkjet Logging|Status Monitor Log.* FileKey5=%ProgramData%\Kodak\Diagnostics|* FileKey6=%ProgramData%\Kodak\Inkjet Logging|*|RECURSE RegKey1=HKCU\Software\Kodak\Imaging\Recent File List Tags=ccapps ID=Kodak * Author=Winapp2.ini Project [Kodi *] DetectFile=%AppData%\kodi* FileKey1=%AppData%\kodi*|*.dmp;*.log;*.txt FileKey2=%AppData%\kodi*\Addons\Packages|*|RECURSE FileKey3=%AppData%\kodi*\Cache|*|RECURSE FileKey4=%AppData%\kodi*\UserData\Cache|*|RECURSE FileKey5=%AppData%\kodi*\UserData\Thumbnails|*|RECURSE Tags=ccmedia ID=Kodi * Author=Winapp2.ini Project [Koffix Blocker *] DetectFile=%ProgramFiles%\Koffix Blocker FileKey1=%UserProfile%\Documents\My Koffix Blocker Logs|* Tags=ccutil ID=Koffix Blocker * Author=Winapp2.ini Project [Koinonein Bittorrent Client *] DetectFile=%ProgramFiles%\Koinonein BitTorrent Client FileKey1=%LocalAppData%\Koinonein BitTorrent Client*\Application|log.db Tags=ccinternet ID=Koinonein Bittorrent Client * Author=Winapp2.ini Project [KoolPlaya *] Detect=HKCU\Software\AKi-Software\Kool-Playa RegKey1=HKCU\Software\AKi-Software\Kool-Playa\VideoHistory RegKey2=HKCU\Software\AKi-Software\Kool-Playa\Videos RegKey3=HKCU\Software\AKi-Software\Kool-PlayaX64\VideoHistory RegKey4=HKCU\Software\AKi-Software\Kool-PlayaX64\Videos Tags=ccmedia ID=KoolPlaya * Author=Winapp2.ini Project [KoPlayer *] DetectFile=%LocalAppData%\KoPlayerData FileKey1=%LocalAppData%\KoPlayerData|*.log Tags=ccapps ID=KoPlayer * Author=Winapp2.ini Project [Krita *] Detect=HKLM\Software\Krita FileKey1=%LocalAppData%|krita*.log FileKey2=%LocalAppData%\krita\cache|*|RECURSE Tags=ccmedia ID=Krita * Author=Winapp2.ini Project [L0pht AntiSniff *] Detect=HKCU\Software\L0pht\AntiSniff RegKey1=HKCU\Software\L0pht\AntiSniff\Recent File List Tags=ccutil ID=L0pht AntiSniff * Author=Winapp2.ini Project [L0phtCrack *] Detect=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6 DetectFile=%ProgramFiles%\L0phtCrack* FileKey1=%ProgramFiles%\L0phtCrack *|vc*redist*x*.exe RegKey1=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6\Recent File List RegKey2=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6\Settings|Last LC File RegKey3=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6\Settings|Last Remote Machine RegKey4=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6\Settings|Last SAM File RegKey5=HKCU\Software\L0pht Holdings LLC\L0phtCrack 6\Settings|Last SYSTEM File Tags=ccutil ID=L0phtCrack * Author=Winapp2.ini Project [Lantern *] DetectFile=%AppData%\Lantern FileKey1=%AppData%\Lantern|*.old;proxystats.csv FileKey2=%AppData%\Lantern\logs|*.log Tags=ccinternet ID=Lantern * Author=Winapp2.ini Project [Larian Launcher *] DetectFile=%LocalAppData%\Larian Studios\Launcher FileKey1=%LocalAppData%\Larian Studios\*cache|*|RECURSE FileKey2=%LocalAppData%\Larian Studios\logs|* FileKey3=%ProgramFiles%\Steam\steamapps\common\Baldur's Gate 3\Launcher|debug Tags=ccapps ID=Larian Launcher * Author=Winapp2.ini Project [Last.FM *] DetectFile=%LocalAppData%\Last.fm FileKey1=%LocalAppData%\Last.fm|*_recent_tracks.xml Tags=ccmedia ID=Last.FM * Author=Winapp2.ini Project [LastPass *] DetectFile=%UserProfile%\AppData\LocalLow\LastPass FileKey1=%UserProfile%\AppData\LocalLow\LastPass|debug.txt Tags=ccutil ID=LastPass * Author=Winapp2.ini Project [Launchy *] DetectFile=%AppData%\Launchy FileKey1=%AppData%\Launchy\*-icon-cache|* Tags=ccapps ID=Launchy * Author=Winapp2.ini Project [Lavender's Botanicals *] DetectFile=%AppData%\MysteryStudio\Lavender FileKey1=%AppData%\MysteryStudio\Lavender|*.log Tags=ccapps ID=Lavender's Botanicals * Author=Winapp2.ini Project [Layers of Fear *] Detect=HKCU\Software\Valve\Steam\Apps\391720 FileKey1=%AppData%\Aspyr Media\GameGuide\Cache|*|RECURSE Tags=ccapps ID=Layers of Fear * Author=Winapp2.ini Project [LBRY *] DetectFile=%AppData%\LBRY FileKey1=%AppData%\LBRY|*-journal;*.old;LOG;QuotaManager|RECURSE FileKey2=%AppData%\LBRY\*Cache|* Tags=ccinternet ID=LBRY * Author=Winapp2.ini Project [LDPlayer *] DetectFile=%AppData%\lddownloader FileKey1=%AppData%\lddownloader|*.log FileKey2=%UserProfile%\.Ld2VirtualBox|VBoxSVC.log Tags=ccapps ID=LDPlayer * Author=Winapp2.ini Project [Leadtek WinFast *] Detect=HKCU\Software\Leadtek\Video\WFFM FileKey1=%WinDir%\System32\WinFast\Multimedia\DirectBurn|*.log RegKey1=HKCU\Software\Leadtek\Video\WFFM|Last Name Tags=ccmedia ID=Leadtek WinFast * Author=Winapp2.ini Project [League of Legends *] DetectFile=%LocalAppData%\Riot Games\*League of Legends* FileKey1=%LocalAppData%\Riot Games\*League of Legends*\logs|*|RECURSE FileKey2=%LocalAppData%\Riot Games\League of Legends\League*\Crashes|*|REMOVESELF FileKey3=%SystemDrive%\Riot Games\League of Legends|*.log*;*.pandurl;*.tmp;*netlog.txt;*r3dlog.txt;Localization_Errors.txt|RECURSE FileKey4=%UserProfile%\riotsGamesLogs|* Tags=ccapps ID=League of Legends * Author=Winapp2.ini Project [Leapfrog Connect *] DetectFile=%ProgramFiles%\LeapFrog\LeapFrog Connect FileKey1=%ProgramData%\Leapfrog\LeapFrog Connect\cache\*\cookies|* FileKey2=%ProgramData%\Leapfrog\LeapFrog Connect\cache\*\data7\*|* FileKey3=%ProgramData%\Leapfrog\LeapFrog Connect\cache\*\http*|* FileKey4=%ProgramData%\Leapfrog\LeapFrog Connect\cache\*\prepared|* FileKey5=%ProgramData%\Leapfrog\LeapFrog Connect\DownloadCache|* Tags=ccapps ID=Leapfrog Connect * Author=Winapp2.ini Project [LeapFTP *] DetectFile=%ProgramFiles%\LeapFTP FileKey1=%ProgramFiles%\LeapFTP|stats.dat Tags=ccinternet ID=LeapFTP * Author=Winapp2.ini Project [Leawo Blu-ray Ripper *] DetectFile=%AppData%\Leawo\Blu-ray Ripper FileKey1=%AppData%\Leawo\Blu-ray Ripper\Burn|*.log FileKey2=%AppData%\Leawo\Blu-ray Ripper\CrashReport|* FileKey3=%AppData%\Leawo\Blu-ray Ripper\Download\WebCache|* FileKey4=%AppData%\Leawo\Blu-ray Ripper\Download\WebFiles|WebpageIcons.db FileKey5=%AppData%\Leawo\Blu-ray Ripper\Log|* FileKey6=%LocalAppData%\Leawo Blu-ray Ripper\Cache|*|RECURSE Tags=ccmedia ID=Leawo Blu-ray Ripper * Author=Winapp2.ini Project [Leawo Prof. Media *] Detect=HKCU\Software\Leawo Software\SoftwarePassport\Leawo Prof. Media FileKey1=%AppData%\Leawo\Prof. Media|*.xml FileKey2=%AppData%\Leawo\Prof. Media\Burn|*.log FileKey3=%AppData%\Leawo\Prof. Media\Burn\MenuTemplate\Cache|*|RECURSE FileKey4=%AppData%\Leawo\Prof. Media\CrashReport|*|RECURSE FileKey5=%AppData%\Leawo\Prof. Media\Download|*.dat;*.db;*.xml;*log FileKey6=%AppData%\Leawo\Prof. Media\Download\Thumbnails|*|RECURSE FileKey7=%AppData%\Leawo\Prof. Media\Download\WebCache|*|RECURSE FileKey8=%AppData%\Leawo\Prof. Media\Download\WebFiles|*|RECURSE FileKey9=%AppData%\Leawo\Prof. Media\Log|*|RECURSE FileKey10=%LocalAppData%\Leawo Prof\cache|*|RECURSE Tags=ccmedia ID=Leawo Prof. Media * Author=Winapp2.ini Project [Leawo Video Converter *] DetectFile=%AppData%\Leawo\Video Converter* FileKey1=%AppData%\Leawo\Video Converter*|*.log FileKey2=%AppData%\Leawo\Video Converter*\CrashReport|*|RECURSE FileKey3=%LocalAppData%\Video Converter*\cache|*|RECURSE Tags=ccmedia ID=Leawo Video Converter * Author=Winapp2.ini Project [Legacy Games Launcher *] DetectFile=%AppData%\legacy-games-launcher FileKey1=%AppData%\legacy-games-launcher|*state;Cookies* FileKey2=%AppData%\legacy-games-launcher\*cache|*|REMOVESELF FileKey3=%AppData%\legacy-games-launcher\blob_storage|*|REMOVESELF FileKey4=%AppData%\legacy-games-launcher\logs|* FileKey5=%LocalAppData%\legacy-games-launcher-updater|* FileKey6=%LocalAppData%\legacy-games-launcher-updater\*|*|REMOVESELF Tags=ccapps ID=Legacy Games Launcher * Author=Winapp2.ini Project [Legends of Amberland *] DetectFile=%AppData%\Legends of Amberland FileKey1=%AppData%\Legends of Amberland|logs.txt Tags=ccapps ID=Legends of Amberland * Author=Winapp2.ini Project [LEGO Universe *] DetectFile=%LocalAppData%\LEGO Software\LEGO Universe FileKey1=%LocalAppData%\LEGO Software\LEGO Universe\Log Files|* Tags=ccapps ID=LEGO Universe * Author=Winapp2.ini Project [LeiaSR SDK *] DetectFile=%ProgramData%\Simulated Reality FileKey1=%ProgramData%\Simulated Reality\Applications\SRSession\Log|* FileKey2=%ProgramData%\Simulated Reality\Eye Tracker\Log|* FileKey3=%ProgramData%\Simulated Reality\Server\Log|* Tags=ccapps ID=LeiaSR SDK * Author=Winapp2.ini Project [Leica Cyclone *] DetectFile=%UserProfile%\Documents\Cyclone FileKey1=%UserProfile%\Documents\Cyclone\Log|*.err FileKey2=%UserProfile%\Documents\Cyclone\Temp|* Tags=ccutil ID=Leica Cyclone * Author=Winapp2.ini Project [Lenovo SWTOOLS *] DetectFile=%SystemDrive%\SWTOOLS FileKey1=%SystemDrive%\SWTOOLS|*|REMOVESELF Tags=ccutil ID=Lenovo SWTOOLS * Author=Winapp2.ini Project [Lenovo System Update *] DetectFile=%ProgramData%\Lenovo\SystemUpdate FileKey1=%ProgramData%\Lenovo\SystemUpdate\sessionSE\Repository|*|RECURSE FileKey2=%ProgramData%\Lenovo\SystemUpdate\sessionSE\system\SSClientCommon|*.xml Tags=ccutil ID=Lenovo System Update * Author=Winapp2.ini Project [Lenovo Vantage *] DetectFile=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8 FileKey1=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\Logs\Lenovo.Vantage.DeployAssistant|* FileKey3=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\*Cache*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Avatars|*|REMOVESELF FileKey9=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Crashpad|*|REMOVESELF FileKey13=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\File System|*|REMOVESELF FileKey29=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Local Traces|*|REMOVESELF FileKey52=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Optimization*|*|REMOVESELF FileKey54=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Stability|*|REMOVESELF FileKey63=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\LocalState\UDF\EBWebView\ZxcvbnData|*|REMOVESELF FileKey67=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\Settings|*.log* FileKey68=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\E046963F.LenovoCompanion_k1h2ywk1493x8\TempState|*|REMOVESELF Tags=ccutil ID=Lenovo Vantage * Author=Winapp2.ini Project [Letasoft Sound Booster *] DetectFile=%ProgramData%\Letasoft\Sound Booster FileKey1=%ProgramData%\Letasoft\Sound Booster\Logs|* Tags=ccutil ID=Letasoft Sound Booster * Author=Winapp2.ini Project [Leviev Sales Information Portal *] DetectFile=%ProgramFiles%\Leviev Sales Information Portal FileKey1=%ProgramFiles%\JMS|JMSErrors.txt FileKey2=%ProgramFiles%\Leviev Sales Information Portal|JMSErrors.txt Tags=ccapps ID=Leviev Sales Information Portal * Author=Winapp2.ini Project [Lexmark *] DetectFile=%ProgramData%\gn_logs FileKey1=%ProgramData%\gn_logs\*|* Tags=ccapps ID=Lexmark * Author=Winapp2.ini Project [Lexmark Inkjet *] Detect=HKLM\Software\LexmarkInkjet FileKey1=%SystemDrive%|lxbt.log FileKey2=%SystemDrive%\Temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}|*|REMOVESELF RegKey1=HKLM\Software\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\lxbt\Product|CdRoot RegKey2=HKLM\Software\Lexmark\5200 Series|Path Tags=ccapps ID=Lexmark Inkjet * Author=Winapp2.ini Project [Lexmark Photo Editor *] Detect=HKCU\Software\LexmarkPhoto\Lexmark Photo Software\pheditor DetectFile=%ProgramFiles%\Lexmark 5200 Series\pheditor.exe RegKey1=HKCU\Software\LexmarkPhoto\Lexmark Photo Software\pheditor\Recent File List Tags=ccapps ID=Lexmark Photo Editor * Author=Winapp2.ini Project [Lexware *] DetectFile=%LocalAppData%\Lexware FileKey1=%AppData%\Lexware|*.log|RECURSE FileKey2=%CommonProgramFiles%\Lexware|*.log|RECURSE FileKey3=%LocalAppData%\Lexware|*.log*|RECURSE FileKey4=%ProgramData%\Lexware|*.log*|RECURSE FileKey5=%ProgramData%\Lexware\elster\Log|*|REMOVESELF FileKey6=%ProgramData%\Lexware\logs|*|REMOVESELF FileKey7=%ProgramFiles%\Lexware|*.log*|RECURSE FileKey8=%SystemDrive%|LxDasi.Log Tags=ccapps ID=Lexware * Author=Winapp2.ini Project [LG ODD Auto Firmware Update *] DetectFile=%ProgramFiles%\ODD Auto Firmware Update FileKey1=%ProgramFiles%\ODD Auto Firmware Update\Log|*|RECURSE Tags=ccutil ID=LG ODD Auto Firmware Update * Author=Winapp2.ini Project [LG PC Suite *] DetectFile=%LocalAppData%\LG Electronics\LG PC Suite FileKey1=%LocalAppData%\LG Electronics\LG PC Suite\Connection|*.log FileKey2=%LocalAppData%\LG Electronics\LG PC Suite\ocbr\bnr_ui_log|*.log FileKey3=%LocalAppData%\LG Electronics\LG PC Suite\Upgrade\UpgradeLog|* Tags=ccapps ID=LG PC Suite * Author=Winapp2.ini Project [LG Software Innovations 1Click DVD Copy Pro *] DetectFile=%ProgramData%\1click dvd copy pro FileKey1=%ProgramData%\1click dvd copy pro|*.log Tags=ccmedia ID=LG Software Innovations 1Click DVD Copy Pro * Author=Winapp2.ini Project [LibreCAD *] Detect=HKCU\Software\LibreCAD RegKey1=HKCU\Software\LibreCAD\LibreCAD\RecentFiles Tags=ccapps ID=LibreCAD * Author=Winapp2.ini Project [LibreOffice *] Detect=HKLM\Software\LibreOffice FileKey1=%AppData%\LibreOffice\*\cache|*.log FileKey2=%AppData%\LibreOffice\*\crash|* FileKey3=%AppData%\LibreOffice\*\User\backup|* FileKey4=%AppData%\LibreOffice\*\User\extensions\shared|log.* FileKey5=%AppData%\LibreOffice\*\User\temp|* FileKey6=%AppData%\LibreOffice\*\User\uno_packages\cache|log.* FileKey7=%ProgramFiles%\LibreOffice*\program_old*|*|REMOVESELF FileKey8=%ProgramFiles%\LibreOffice\program\logs|* Tags=ccapps ID=LibreOffice * Author=Winapp2.ini Project [LibreWolf Autocomplete History *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|formhistory* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|formhistory* Tags=ccapps ID=LibreWolf Autocomplete History * Author=Winapp2.ini Project [LibreWolf Autofill Data *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|autofill-profiles.json FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|autofill-profiles.json Tags=ccapps ID=LibreWolf Autofill Data * Author=Winapp2.ini Project [LibreWolf Bookmark Backups *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*\bookmarkbackups|* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\bookmarkbackups|* Tags=ccapps ID=LibreWolf Bookmark Backups * Author=Winapp2.ini Project [LibreWolf Bookmark Favicons *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|favicons* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|favicons* Tags=ccapps ID=LibreWolf Bookmark Favicons * Author=Winapp2.ini Project [LibreWolf Caches *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\librewolf\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\librewolf\Profiles\*\notificationstore|* FileKey4=%AppData%\librewolf\Profiles\*\security_state|* FileKey5=%AppData%\librewolf\Profiles\*\shader-cache|* FileKey6=%AppData%\librewolf\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\librewolf\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\librewolf\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\librewolf\Profiles\*\thumbnails|*|REMOVESELF FileKey10=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|*.corrupt|RECURSE FileKey11=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey12=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\*cache*|*|REMOVESELF FileKey13=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey14=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\notificationstore|* FileKey15=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\security_state|* FileKey16=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\shader-cache|* FileKey17=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\storage\temporary|*|RECURSE FileKey18=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=LibreWolf Caches * Author=Winapp2.ini Project [LibreWolf Privacy Sandbox *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|credentialstate.sqlite FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|credentialstate.sqlite Tags=ccapps ID=LibreWolf Privacy Sandbox * Author=Winapp2.ini Project [LibreWolf Saved Usernames & Passwords *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|key4.db;logins.json FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|key4.db;logins.json Tags=ccapps ID=LibreWolf Saved Usernames & Passwords * Author=Winapp2.ini Project [LibreWolf Synced Tabs *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|synced-tabs.db* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|synced-tabs.db* Tags=ccapps ID=LibreWolf Synced Tabs * Author=Winapp2.ini Project [LibreWolf Telemetry *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf|*.log|RECURSE FileKey2=%AppData%\librewolf\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\librewolf\Profiles\*\crashes|* FileKey4=%AppData%\librewolf\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\librewolf\Profiles\*\minidumps|* FileKey6=%AppData%\librewolf\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\librewolf\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\librewolf\Profiles\*\weave\logs|* FileKey9=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf|*.log|RECURSE FileKey10=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey11=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\crashes|* FileKey12=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\datareporting|*|REMOVESELF FileKey13=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\minidumps|* FileKey14=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\saved-telemetry-pings|* FileKey15=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\sessionstore-logs|* FileKey16=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\weave\logs|* Tags=ccapps ID=LibreWolf Telemetry * Author=Winapp2.ini Project [LibreWolf Web Browsing Cookies *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|cookies* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|cookies* Tags=ccapps ID=LibreWolf Web Browsing Cookies * Author=Winapp2.ini Project [LibreWolf Web Browsing Session *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|session*.json* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|session*.json* Tags=ccapps ID=LibreWolf Web Browsing Session * Author=Winapp2.ini Project [LibreWolf Web Browsing Session Backups *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*\sessionstore-backups|* FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*\sessionstore-backups|* Tags=ccapps ID=LibreWolf Web Browsing Session Backups * Author=Winapp2.ini Project [LibreWolf Web Storage *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\storage\default\http*|*|REMOVESELF FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=LibreWolf Web Storage * Author=Winapp2.ini Project [LibreWolf Website Permissions *] DetectFile1=%AppData%\librewolf\Profiles DetectFile2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles FileKey1=%AppData%\librewolf\Profiles\*|permissions.sqlite FileKey2=%LocalAppData%\Packages\31856maltejur.LibreWolf_ssmwz6s360tct\LocalCache\Roaming\librewolf\Profiles\*|permissions.sqlite Tags=ccapps ID=LibreWolf Website Permissions * Author=Winapp2.ini Project [LightScribe *] Detect=HKCU\Software\LightScribe FileKey1=%ProgramData%\LightScribe\log|*.xml Tags=ccmedia ID=LightScribe * Author=Winapp2.ini Project [LightShot *] DetectFile1=%LocalAppData%\Skillbrains\lightshot DetectFile2=%ProgramFiles%\Skillbrains\Updater FileKey1=%LocalAppData%|updater.log FileKey2=%ProgramFiles%\Skillbrains\Updater|*.log Tags=ccinternet ID=LightShot * Author=Winapp2.ini Project [Lightworks *] Detect=HKLM\Software\Lightworks FileKey1=%Public%\Documents\Lightworks\Logs|*|REMOVESELF Tags=ccapps ID=Lightworks * Author=Winapp2.ini Project [Lili: Child of Geos - Complete Edition *] Detect=HKCU\Software\Valve\Steam\Apps\266490 FileKey1=%UserProfile%\Documents\my games\UnrealEngine3-MazeGame\MazeGame\Logs|* Tags=ccapps ID=Lili: Child of Geos - Complete Edition * Author=Winapp2.ini Project [LimePro *] Detect=HKCU\Software\LimePro RegKey1=HKCU\Software\LimePro|GUI.LastChatRoomBrowse RegKey2=HKCU\Software\LimePro|GUI.LastSearch Tags=ccinternet ID=LimePro * Author=Winapp2.ini Project [LimeWire *] Detect=HKLM\Software\LimeWire FileKey1=%AppData%\LimeWire|createtimes.cache;fileurns.cache;gnutella.net;responses.cache;ttree.cache FileKey2=%UserProfile%\Incomplete|*|RECURSE Tags=ccinternet ID=LimeWire * Author=Winapp2.ini Project [LINE Messenger *] DetectFile=%LocalAppData%\LINE FileKey1=%LocalAppData%\LINE\bin|update_log*.txt FileKey2=%LocalAppData%\LINE\bin\current|*_CrashLog.txt FileKey3=%LocalAppData%\LINE\Cache|*|RECURSE FileKey4=%LocalAppData%\LINE\Data\advertisement|*|RECURSE FileKey5=%LocalAppData%\LINE\Data\Sticker|*|RECURSE FileKey6=%LocalAppData%\LINE\Data\Sticon|*|RECURSE FileKey7=%LocalAppData%\LINE\QtWebEngine\Default|Visited Links Tags=ccinternet ID=LINE Messenger * Author=Winapp2.ini Project [LINE Messenger Plugin *] DetectFile1=%LocalAppData%\LineCall DetectFile2=%LocalAppData%\LineMediaPlayer FileKey1=%LocalAppData%\LineCall\Cache|*|RECURSE FileKey2=%LocalAppData%\LineMediaPlayer\Cache|*|RECURSE Tags=ccinternet ID=LINE Messenger Plugin * Author=Winapp2.ini Project [LinkAlyzer *] Detect=HKCU\Software\Sanderson Forensics\LinkAlyzer RegKey1=HKCU\Software\Sanderson Forensics\LinkAlyzer|LastOpenFolder RegKey2=HKCU\Software\Sanderson Forensics\LinkAlyzer|LastSaveFolder Tags=ccutil ID=LinkAlyzer * Author=Winapp2.ini Project [Listary *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1 FileKey1=%AppData%\Listary\CrashRpt|*|REMOVESELF FileKey2=%AppData%\Listary\UserData|*.log;DiskSearch.db;History_v2.sqlite FileKey3=%ProgramFiles%\Listary|*.log Tags=ccutil ID=Listary * Author=Winapp2.ini Project [Loadout *] Detect=HKCU\Software\Valve\Steam\Apps\208090 FileKey1=%LocalAppData%\EdgeOfReality\Loudout\CrashReports|* Tags=ccapps ID=Loadout * Author=Winapp2.ini Project [Locate32 *] Detect=HKCU\Software\Update\Locate32 RegKey1=HKCU\Software\Update\Locate32\Dialogs|Advanced/ContainData RegKey2=HKCU\Software\Update\Locate32\Dialogs|Name/LookIn RegKey3=HKCU\Software\Update\Locate32\Dialogs|Name/Name RegKey4=HKCU\Software\Update\Locate32\Dialogs|Name/Type RegKey5=HKCU\Software\Update\Locate32\Recent Strings Tags=ccutil ID=Locate32 * Author=Winapp2.ini Project [LockHunter *] Detect=HKCU\Software\LockHunter FileKey1=%AppData%\LockHunter|*.log;*.txt FileKey2=%ProgramData%\LHService|*.log;*.txt Tags=ccutil ID=LockHunter * Author=Winapp2.ini Project [Logitech Alert Commander *] DetectFile=%ProgramData%\Logitech\Logitech Alert Commander FileKey1=%ProgramData%\Logitech\Logitech Alert Commander|Commander Event Log.txt;Tamper Log.txt FileKey2=%ProgramData%\Logitech\Logitech Alert Commander\Install Logs|* Tags=ccutil ID=Logitech Alert Commander * Author=Winapp2.ini Project [Logitech ASTRO C40 TR Configuration Software *] DetectFile=%LocalAppData%\Astro Gaming\ASTRO C40 TR Configuration Software FileKey1=%LocalAppData%\Astro Gaming\ASTRO C40 TR Configuration Software\cache|*|RECURSE FileKey2=%WinDir%|DPINST.LOG Tags=ccutil ID=Logitech ASTRO C40 TR Configuration Software * Author=Winapp2.ini Project [Logitech Astro Command Center *] DetectFile=%LocalAppData%\Packages\AstroGaming.AstroCommandCenter_9cg1kgznx2mv2 FileKey1=%LocalAppData%\Packages\AstroGaming.AstroCommandCenter_9cg1kgznx2mv2\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\AstroGaming.AstroCommandCenter_9cg1kgznx2mv2\Settings|*.log* FileKey3=%LocalAppData%\Packages\AstroGaming.AstroCommandCenter_9cg1kgznx2mv2\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\AstroGaming.AstroCommandCenter_9cg1kgznx2mv2\TempState|*|REMOVESELF Tags=ccutil ID=Logitech Astro Command Center * Author=Winapp2.ini Project [Logitech Capture *] DetectFile=%ProgramFiles%\Logitech\LogiCapture FileKey1=%LocalAppData%\Logitech\LogiCapture\cefcache|*|RECURSE FileKey2=%ProgramFiles%\Logitech\LogiCapture\bin\service|LogiFacecamService.exe.log Tags=ccutil ID=Logitech Capture * Author=Winapp2.ini Project [Logitech Firmware Update Tool *] DetectFile=%LocalAppData%\FirmwareUpdateTool FileKey1=%LocalAppData%\FirmwareUpdateTool\devio_cache|* FileKey2=%ProgramData%\FirmwareUpdateTool\analytics\*|*|REMOVESELF Tags=ccutil ID=Logitech Firmware Update Tool * Author=Winapp2.ini Project [Logitech G HUB - Window Size/Location *] Detect=HKCU\SOFTWARE\Logitech\LGHUB FileKey1=%AppData%\lghub|window-state.json Tags=ccutil ID=Logitech G HUB - Window Size/Location * Author=Winapp2.ini Project [Logitech G HUB *] Detect=HKCU\SOFTWARE\Logitech\LGHUB FileKey1=%AppData%\G HUB|Local State FileKey2=%AppData%\G HUB\*Cache|*|REMOVESELF FileKey3=%AppData%\G HUB\Crashpad|*|REMOVESELF FileKey4=%AppData%\G HUB\Network|*|REMOVESELF FileKey5=%LocalAppData%\Logi\LogiPluginService|*.log;*.txt|RECURSE FileKey6=%LocalAppData%\Logi\LogiPluginService\Temp|*|REMOVESELF FileKey7=%ProgramData%\LGHUB\Cache|* FileKey8=%ProgramData%\LogiShrd\LGHUB\analytics|*|REMOVESELF FileKey9=%SystemDrive%\Users\Default\AppData\Local\Logi\LogiPluginService\Logs\installer_ca|*.log FileKey10=%WinDir%\System32\config\systemprofile\AppData\Local\LGHUB\sentry_db_lghub_updater\*|*.json;__sentry-* FileKey11=%WinDir%\System32\config\systemprofile\AppData\Local\Temp\com.logi.ghub.software_manager.logs|*|REMOVESELF Tags=ccutil ID=Logitech G HUB * Author=Winapp2.ini Project [Logitech Gaming Software *] DetectFile=%AppData%\LogiShrd\LGS8_setup FileKey1=%AppData%\LogiShrd\LGS8_setup|*.log Tags=ccutil ID=Logitech Gaming Software * Author=Winapp2.ini Project [Logitech Harmony *] Detect=HKCU\Software\JavaSoft\Prefs\Com\Logitech\harmony FileKey1=%UserProfile%\Logitech\browser - logitech\Cache|* Tags=ccutil ID=Logitech Harmony * Author=Winapp2.ini Project [Logitech Logi Bolt *] DetectFile=%LocalAppData%\LogiBolt FileKey1=%LocalAppData%\LogiBolt|InstallerLog.txt;settings.backup FileKey2=%LocalAppData%\LogiBolt\devio_cache|* FileKey3=%ProgramData%\Logishrd\LogiBolt\analytics\*|*|REMOVESELF Tags=ccutil ID=Logitech Logi Bolt * Author=Winapp2.ini Project [Logitech Logi Tune *] DetectFile=%ProgramFiles%\Logitech\LogiTune FileKey1=%AppData%\logitune\*cache*|*|RECURSE FileKey2=%AppData%\logitune\*logs|*|RECURSE FileKey3=%AppData%\logitune\dumps|*|RECURSE FileKey4=%ProgramData%\RightSightForWebcams\Logs|*.log FileKey5=%ProgramFiles%\Logitech\LogiTune\data\dumps|*|RECURSE FileKey6=%ProgramFiles%\Logitech\LogiTune\data\logs|*.log|RECURSE FileKey7=%ProgramFiles%\Logitech\LogiTune\data\sentry\LogiTuneUpdater\attachments|* FileKey8=%ProgramFiles%\Logitech\LogiTune\data\sentry\LogiTuneUpdater\reports|* Tags=ccutil ID=Logitech Logi Tune * Author=Winapp2.ini Project [Logitech LogiOptions *] DetectFile=%AppData%\LogiShrd\LogiOptions FileKey1=%AppData%\LogiShrd\LogiOptions|*.log FileKey2=%ProgramFiles%\Logitech\LogiOptions\LogiBolt|*|REMOVESELF Tags=ccutil ID=Logitech LogiOptions * Author=Winapp2.ini Project [Logitech LogiOptions+ *] Detect=HKLM\Software\Logitech\LogiOptionsPlus FileKey1=%AppData%\logioptionsplus\*Cache*|*|RECURSE FileKey2=%LocalAppData%\flutter_webview_windows\LogiAiPromptBuilder\EBWebView|DIPS* FileKey3=%LocalAppData%\flutter_webview_windows\LogiAiPromptBuilder\EBWebView\*Cache*|*|RECURSE FileKey4=%LocalAppData%\flutter_webview_windows\LogiAiPromptBuilder\EBWebView\Default\*Cache*|RECURSE FileKey5=%LocalAppData%\LogiOptionsPlus\*_cache|* FileKey6=%ProgramData%\LogiOptionsPlus\Cache|* Tags=ccutil ID=Logitech LogiOptions+ * Author=Winapp2.ini Project [Logitech MIXLINE *] DetectFile=%LocalAppData%\Logi\MIXLINE FileKey1=%LocalAppData%\Logi\MIXLINE\logs|*.log Tags=ccutil ID=Logitech MIXLINE * Author=Winapp2.ini Project [Logitech Presentation *] DetectFile=%AppData%\LogiShrd\LogiPresentation FileKey1=%AppData%\LogiShrd\LogiPresentation|*.log|RECURSE Tags=ccapps ID=Logitech Presentation * Author=Winapp2.ini Project [Logitech SetPoint *] DetectFile=%ProgramFiles%\Logitech\SetPointP FileKey1=%AppData%\Logishrd\sp*_Log|* FileKey2=%ProgramData%\Logitech\KHAL\Battery|*.log Tags=ccutil ID=Logitech SetPoint * Author=Winapp2.ini Project [Logitech Streamlabs Desktop *] DetectFile=%AppData%\slobs-client FileKey1=%AppData%\slobs-client|*.bak;*.log;long_calls.txt FileKey2=%AppData%\slobs-client\*cache*|*|RECURSE FileKey3=%AppData%\slobs-client\CrashMemoryDump|* FileKey4=%AppData%\slobs-client\Crashpad|*|RECURSE FileKey5=%AppData%\slobs-client\node-obs\logs|* FileKey6=%LocalAppData%\slobs-client-updater|installer.exe Tags=ccmedia ID=Logitech Streamlabs Desktop * Author=Winapp2.ini Project [Logitech Unifying Software *] DetectFile=%ProgramData%\LogiShrd\Unifying FileKey1=%ProgramData%\LogiShrd\Unifying|EngineLog.txt Tags=ccutil ID=Logitech Unifying Software * Author=Winapp2.ini Project [LogMeIn Hamachi *] Detect=HKLM\Software\LogMeIn, Inc. FileKey1=%WinDir%\System32\config\systemprofile\*\*\LogMeIn Hamachi|*.bak;*.log;*.old FileKey2=%WinDir%\SysWOW64\config\systemprofile\*\*\LogMeIn Hamachi|*.bak;*.log;*.old Tags=ccinternet ID=LogMeIn Hamachi * Author=Winapp2.ini Project [Lost Photos *] DetectFile=%ProgramFiles%\Lost Photos FileKey1=%LocalAppData%\Lost_Photos\*|ResultSearchFile.info FileKey2=%ProgramFiles%\Lost Photos\Logs|* Tags=ccinternet ID=Lost Photos * Author=Winapp2.ini Project [Luck be a Landlord *] Detect=HKCU\Software\Valve\Steam\Apps\1404850 DetectFile=%AppData%\Godot\app_userdata\Luck be a Landlord FileKey1=%AppData%\Godot\app_userdata\Luck be a Landlord|errors.log FileKey2=%AppData%\Godot\app_userdata\Luck be a Landlord\*|*.log Tags=ccapps ID=Luck be a Landlord * Author=Winapp2.ini Project [Lunascape Phoebe Bookmark Favicons *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\favicons|* Tags=ccapps ID=Lunascape Phoebe Bookmark Favicons * Author=Winapp2.ini Project [Lunascape Phoebe Caches *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe|cacheUrl.db FileKey2=%AppData%\Phoebe\*cache*|*|RECURSE Tags=ccapps ID=Lunascape Phoebe Caches * Author=Winapp2.ini Project [Lunascape Phoebe Cookies *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\Network|cookies* Tags=ccapps ID=Lunascape Phoebe Cookies * Author=Winapp2.ini Project [Lunascape Phoebe Crash Reports *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\Crashpad|*|RECURSE Tags=ccapps ID=Lunascape Phoebe Crash Reports * Author=Winapp2.ini Project [Lunascape Phoebe Privacy Sandbox *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\Network|Trust Tokens* Tags=ccapps ID=Lunascape Phoebe Privacy Sandbox * Author=Winapp2.ini Project [Lunascape Phoebe Storage Quota Manager *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\WebStorage|QuotaManager* Tags=ccapps ID=Lunascape Phoebe Storage Quota Manager * Author=Winapp2.ini Project [Lunascape Phoebe Telemetry *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\Network|Network Persistent State Tags=ccapps ID=Lunascape Phoebe Telemetry * Author=Winapp2.ini Project [Lunascape Phoebe Web Browsing History *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe|history.db Tags=ccapps ID=Lunascape Phoebe Web Browsing History * Author=Winapp2.ini Project [Lunascape Phoebe Web Storage *] DetectFile=%AppData%\Phoebe FileKey1=%AppData%\Phoebe\WebStorage\*|*|RECURSE Tags=ccapps ID=Lunascape Phoebe Web Storage * Author=Winapp2.ini Project [Lupinho.Net Hardlink *] Detect=HKLM\Software\Lupinho.Net FileKey1=%LocalAppData%\Lupinho.Net|*.log|RECURSE Tags=ccmedia ID=Lupinho.Net Hardlink * Author=Winapp2.ini Project [Lynx Web Browser *] DetectFile=%ProgramFiles%\Lynx - web browser FileKey1=%ProgramFiles%\Lynx - web browser\tmp|* Tags=ccinternet ID=Lynx Web Browser * Author=Winapp2.ini Project [Lyrik *] Detect=HKLM\Software\Lyrik FileKey1=%LocalAppData%\Lyrik|* Tags=ccmedia ID=Lyrik * Author=Winapp2.ini Project [Lyx *] DetectFile=%AppData%\LyX2.0 FileKey1=%AppData%\LyX2.0|*.log|RECURSE FileKey2=%AppData%\LyX2.0\Cache|*|RECURSE Tags=ccapps ID=Lyx * Author=Winapp2.ini Project [Macaw *] DetectFile=%AppData%\Macaw FileKey1=%AppData%\Macaw\Cef_Data|cookies*.*;data*.;index. FileKey2=%AppData%\Macaw\Cef_Data\GPUCache|*|RECURSE FileKey3=%AppData%\Macaw\Cef_Data\Local Storage|* Tags=ccinternet ID=Macaw * Author=Winapp2.ini Project [Machete *] Detect=HKCU\Software\MacheteSoft\Machete DetectFile=%ProgramFiles%\MacheteSoft\Machete FileKey1=%AppData%\Machete|MacheteSettings.xml.bak RegKey1=HKCU\Software\Local AppWizard-Generated Applications\Machete\Recent File List RegKey2=HKCU\Software\MacheteSoft\Machete\Recent File List Tags=ccmedia ID=Machete * Author=Winapp2.ini Project [Macrium Reflect *] Detect=HKCU\Software\Macrium\Reflect FileKey1=%ProgramData%\Macrium|*.log|RECURSE FileKey2=%ProgramData%\Macrium\Reflect|*.html;*.tmp;*.vsslog;loaderrors.txt FileKey3=%ProgramData%\Macrium\waik|waiklog.txt FileKey4=%SystemDrive%|Recovery.txt;Reflect_Install.log;ref~tmp~.txt;rescuepe.log Tags=ccutil ID=Macrium Reflect * Author=Winapp2.ini Project [Magic: The Gathering Arena *] DetectFile=%ProgramFiles%\MTG Arena FileKey1=%ProgramFiles%\MTG Arena\MTGA_Data\Logs|*|RECURSE Tags=ccapps ID=Magic: The Gathering Arena * Author=Winapp2.ini Project [Magicka *] Detect=HKCU\Software\Valve\Steam\Apps\42910 FileKey1=%ProgramFiles%\Steam\steamapps\common\magicka|errorReport*.txt Tags=ccapps ID=Magicka * Author=Winapp2.ini Project [Magicka 2 *] DetectFile=%AppData%\ParadoxInteractive\Magicka2 FileKey1=%AppData%\ParadoxInteractive\Magicka2\logs|* Tags=ccapps ID=Magicka 2 * Author=Winapp2.ini Project [MagicLine4NX *] DetectFile=%LocalAppData%\DreamSecurity\MagicLine4NX FileKey1=%LocalAppData%\DreamSecurity\MagicLine4NX\Logs|* Tags=ccapps ID=MagicLine4NX * Author=Winapp2.ini Project [MagicTweak Magic Utilities *] DetectFile=%ProgramFiles%\Mgutil FileKey1=%ProgramFiles%\Mgutil|*_log.txt Tags=ccapps ID=MagicTweak Magic Utilities * Author=Winapp2.ini Project [MAGIX ACID Pro *] DetectFile=%ProgramFiles%\Sony\ACID Pro 5.0 FileKey1=%ProgramFiles%\Sony\ACID Pro 5.0|Acid*.log FileKey2=%UserProfile%\Documents\ACID Pro 5.0 projects|*.bak Tags=ccmedia ID=MAGIX ACID Pro * Author=Winapp2.ini Project [MAGIX Installation Manager *] Detect=HKCU\Software\Magix\MAGIX Installation manager FileKey1=%ProgramData%\MAGIX\*|*.log;*.reg FileKey2=%ProgramData%\MAGIX\*\download|*|RECURSE Tags=ccmedia ID=MAGIX Installation Manager * Author=Winapp2.ini Project [MAGIX Photostory *] DetectFile=%AppData%\MAGIX\Photostory* FileKey1=%AppData%\MAGIX\Photostory*\Crash|* Tags=ccmedia ID=MAGIX Photostory * Author=Winapp2.ini Project [MAGIX Vegas Pro *] Detect1=HKLM\Software\Sony Creative Software\Vegas Detect2=HKLM\Software\Sony Media Software\Vegas FileKey1=%AppData%\Sony|*.log FileKey2=%LocalAppData%\Sony\Vegas Pro\*|*.log Tags=ccmedia ID=MAGIX Vegas Pro * Author=Winapp2.ini Project [MAGIX Video Easy TERRATEC Edition *] Detect=HKLM\Software\MAGIX\Video_easy_3_TerraTec FileKey1=%AppData%\MAGIX\Video_easy_TERRATEC_Edition|*.log|RECURSE Tags=ccmedia ID=MAGIX Video Easy TERRATEC Edition * Author=Winapp2.ini Project [MAGIX Video Pro *] Detect1=HKCU\Software\MAGIX AG\Videodeluxe18_pro Detect2=HKCU\Software\MAGIX AG\Videodeluxe19_pro FileKey1=%AppData%\MAGIX\Video*Pro*|*.log FileKey2=%UserProfile%\Documents\MAGIX\Video*Pro*\AudioTemp|*|RECURSE RegKey1=HKCU\Software\MAGIX AG\Videodeluxe19_pro\ExportConfigurator\DialogItems|LastFile RegKey2=HKCU\Software\MAGIX AG\Videodeluxe19_pro\ExportConfigurator\DialogItems|LastPreset Tags=ccmedia ID=MAGIX Video Pro * Author=Winapp2.ini Project [Mailbird *] DetectFile=%LocalAppData%\Mailbird FileKey1=%LocalAppData%\Mailbird|*.log FileKey2=%LocalAppData%\Mailbird\Misc|favicons*;History*;Visited Links*;Web Data* FileKey3=%LocalAppData%\Mailbird\Misc\*cache*|*|RECURSE FileKey4=%LocalAppData%\Mailbird\Misc\Default\*cache*|*|RECURSE Tags=ccinternet ID=Mailbird * Author=Winapp2.ini Project [MailWasher Pro *] DetectFile=%AppData%\Firetrust\MailWasher FileKey1=%AppData%\Firetrust\MailWasher|log_*|RECURSE FileKey2=%AppData%\Firetrust\MailWasher|regex.txt;updatesAIU.txt FileKey3=%AppData%\Firetrust\MailWasher\cache|*|RECURSE FileKey4=%AppData%\Firetrust\MailWasher\logs|*|RECURSE ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache\|MWP.db3 ExcludeKey2=FILE|%AppData%\Firetrust\MailWasher\cache\|mwp_conv.dat ExcludeKey3=FILE|%AppData%\Firetrust\MailWasher\cache\|mwp_exw.dat ExcludeKey4=FILE|%AppData%\Firetrust\MailWasher\cache\|mwp_inw.dat ExcludeKey5=FILE|%AppData%\Firetrust\MailWasher\cache\|mwp_pmap.dat Tags=ccinternet ID=MailWasher Pro * Author=Winapp2.ini Project [MakeHuman *] DetectFile=%UserProfile%\Documents\makehuman FileKey1=%UserProfile%\Documents\makehuman\v1|makehuman-debug.txt;makehuman.log;python_err.txt;python_out.txt FileKey2=%UserProfile%\Documents\makehuman\v1\cache|*.mhc Tags=ccapps ID=MakeHuman * Author=Winapp2.ini Project [MAL Updater *] DetectFile=%ProgramFiles%\Mal Updater 2 FileKey1=%AppData%\Mal Updater\*Pics|* FileKey2=%AppData%\Mal Updater\SeasonData|* FileKey3=%AppData%\Mal Updater\Users|*.log|RECURSE Tags=ccmedia ID=MAL Updater * Author=Winapp2.ini Project [Malwarebytes *] Detect1=HKCU\Software\Malwarebytes Detect2=HKLM\Software\Malwarebytes FileKey1=%AppData%\Malwarebytes\Malwarebytes*Anti-Malware\Logs|* FileKey2=%LocalAppData%\Crashdumps\Malwarebytes|*|REMOVESELF FileKey3=%LocalAppData%\MBAM*\Cache\qmlcache|* FileKey4=%ProgramData%\Malwarebytes Anti-Exploit|*.log;mbae*.bak FileKey5=%ProgramData%\Malwarebytes\Malwarebytes*Anti-Malware|mbam-setup.exe FileKey6=%ProgramData%\Malwarebytes\Malwarebytes*Anti-Malware\Logs|* FileKey7=%ProgramData%\Malwarebytes\MBAMService|*-ntuser.dat;*-UsrClass.dat;*.bak;*.log;*.LOG*;*.regtrans-ms;*.TM.blf FileKey8=%ProgramData%\Malwarebytes\MBAMService\config|*.bak FileKey9=%ProgramData%\Malwarebytes\MBAMService\logs|* FileKey10=%ProgramData%\Malwarebytes\MBAMService\ScanResults|* FileKey11=%ProgramData%\Malwarebytes\MBAMService\tmp|* FileKey12=%ProgramFiles%\Malwarebytes Anti-Exploit|changelog.txt;mbae-uninstall.log FileKey13=%SystemDrive%\Malwarebytes|*|REMOVESELF FileKey14=%UserProfile%\AppData\LocalLow\IGDump|*|REMOVESELF Tags=ccutil ID=Malwarebytes * Author=Winapp2.ini Project [ManiacTools mp3Tag Pro *] Detect=HKCU\Software\ManiacTools\mp3Tag Pro FileKey1=%AppData%\mp3tagpro|Temp.~Txt RegKey1=HKCU\Software\ManiacTools\mp3Tag Pro|fmImageOpen RegKey2=HKCU\Software\ManiacTools\mp3Tag Pro|fmImageSave RegKey3=HKCU\Software\ManiacTools\mp3Tag Pro|fmTextOpen RegKey4=HKCU\Software\ManiacTools\mp3Tag Pro|fmTextSave RegKey5=HKCU\Software\ManiacTools\mp3Tag Pro|StartDir RegKey6=HKCU\Software\ManiacTools\mp3Tag Pro|StartFile Tags=ccmedia ID=ManiacTools mp3Tag Pro * Author=Winapp2.ini Project [ManiacTools Music Duplicate *] Detect=HKCU\Software\ManiacTools\MusicDuplicate RegKey1=HKCU\Software\ManiacTools\MusicDuplicate|DateLastLaunch RegKey2=HKCU\Software\ManiacTools\MusicDuplicate|DuplicatesFolders RegKey3=HKCU\Software\ManiacTools\MusicDuplicate|MoveFilesFolder RegKey4=HKCU\Software\ManiacTools\MusicDuplicate|NotDuplicatesFolders RegKey5=HKCU\Software\ManiacTools\MusicDuplicate|SavedFoldersList Tags=ccmedia ID=ManiacTools Music Duplicate * Author=Winapp2.ini Project [ManiaPlanet *] DetectFile=%ProgramData%\ManiaPlanet FileKey1=%ProgramData%\ManiaPlanet\Cache|* Tags=ccapps ID=ManiaPlanet * Author=Winapp2.ini Project [ManyCam *] Detect1=HKCU\Software\ManyCam Detect2=HKLM\Software\ManyCam DetectFile=%LocalAppData%\Visicom Media\ManyCam FileKey1=%AppData%\ManyCam\Logs|* FileKey2=%AppData%\ManyCam\Settings\MoviesThumbnails|*|RECURSE FileKey3=%LocalAppData%\ManyCam|*.log|RECURSE FileKey4=%LocalAppData%\ManyCam\cache\gallery|*|RECURSE FileKey5=%LocalAppData%\Visicom Media\ManyCam\Cache\QtWebEngine\Default\Cache|* Tags=ccmedia ID=ManyCam * Author=Winapp2.ini Project [Marine Sharpshooter 3 *] DetectFile=%ProgramFiles%\Groove Games\Marine Sharpshooter 3 FileKey1=%ProgramFiles%\Groove Games\Marine Sharpshooter 3|*.*dmp|RECURSE Tags=ccapps ID=Marine Sharpshooter 3 * Author=Winapp2.ini Project [Mass Effect *] DetectFile=%UserProfile%\Documents\Bioware\Mass Effect* FileKey1=%UserProfile%\Documents\BioWare\Mass Effect*\BIOGame\Logs|* FileKey2=%UserProfile%\Documents\BioWare\Mass Effect*\Logs|* Tags=ccapps ID=Mass Effect * Author=Winapp2.ini Project [MassTube *] DetectFile1=%AppData%\MassTube DetectFile2=%LocalAppData%\MassTube DetectFile3=%ProgramFiles%\MassTube DetectFile4=%SystemDrive%\Programs\MassTube FileKey1=%AppData%\MassTube|Historial.dat FileKey2=%AppData%\MassTube\Miniaturas|*.jpg FileKey3=%LocalAppData%\MassTube|Historial.dat FileKey4=%LocalAppData%\MassTube\Miniaturas|*.jpg FileKey5=%ProgramFiles%\MassTube|Historial.dat FileKey6=%ProgramFiles%\MassTube\Miniaturas|*.jpg FileKey7=%SystemDrive%\Programs\MassTube|Historial.dat FileKey8=%SystemDrive%\Programs\MassTube\Miniaturas|*.jpg Tags=ccutil ID=MassTube * Author=Winapp2.ini Project [Master PDF Editor *] Detect=HKCU\Software\Code Industry\Master PDF Editor 5 RegKey1=HKCU\Software\Code Industry\Master PDF Editor 5|ImportFilePath RegKey2=HKCU\Software\Code Industry\Master PDF Editor 5|openFilePath RegKey3=HKCU\Software\Code Industry\Master PDF Editor 5|saveFilePath RegKey4=HKCU\Software\Code Industry\Master PDF Editor 5|str_destination_save_as RegKey5=HKCU\Software\Code Industry\Master PDF Editor 5\pinned_files_history RegKey6=HKCU\Software\Code Industry\Master PDF Editor 5\resent_files_history Tags=ccapps ID=Master PDF Editor * Author=Winapp2.ini Project [MATLAB *] DetectFile=%ProgramFiles%\MATLAB FileKey1=%AppData%\MathWorks\MATLAB\R20*|*.prev;cwdhistory.m;History.xml;matlab.prf;MATLABDesktop.xml FileKey2=%AppData%\MathWorks\MATLAB\R20*\HtmlPanel\cache|*|RECURSE FileKey3=%ProgramFiles%\MATLAB\R20*\polyspace\examples\cxx\*|*.log|RECURSE FileKey4=%ProgramFiles%\MATLAB\R20*\sys\jxbrowser-chromium\win32\chromium|*.log FileKey5=%ProgramFiles%\MATLAB\R20*\sys\tex\latex\base|*.log FileKey6=%ProgramFiles%\MATLAB\R20*\sys\tomcat\temp|*.tmp FileKey7=%ProgramFiles%\MATLAB\R20*\toolbox\rtw\rtwdemos\tlctutorial\tlcdebug\solutions|*.log Tags=ccapps ID=MATLAB * Author=Winapp2.ini Project [Mavis Beacon *] DetectFile=%AppData%\Broderbund\Mavis FileKey1=%AppData%\Broderbund\Mavis|logfile.* Tags=ccapps ID=Mavis Beacon * Author=Winapp2.ini Project [Max Recorder *] Detect=HKLM\Software\MaxRecorder FileKey1=%LocalAppData%\MaxRecorder|*.tmp|RECURSE Tags=ccmedia ID=Max Recorder * Author=Winapp2.ini Project [Maxprog iCash *] Detect=HKCR\iCash FileKey1=%ProgramFiles%\iCash\vlogs|*|REMOVESELF FileKey2=%UserProfile%\Documents\Maxprog\iCash\Database Logs|*|REMOVESELF FileKey3=%UserProfile%\Documents\Maxprog\iCash\Error Logs|*|REMOVESELF FileKey4=%UserProfile%\Documents\Maxprog\iCash\XML Dumps|*|REMOVESELF Tags=ccapps ID=Maxprog iCash * Author=Winapp2.ini Project [MAXQDA Reader *] DetectFile=%ProgramFiles%\MAXQDA*_Reader FileKey1=%AppData%\MAXQDA* Reader|*Log_*.html FileKey2=%LocalAppData%\MAXQDA*_Reader\cache\QtWebEngine\Default\Cache|* FileKey3=%LocalAppData%\MAXQDA*_Reader\QtWebEngine\Default\GPUCache|* FileKey4=%ProgramFiles%\MAXQDA*_Reader|debug.log FileKey5=%UserProfile%\Documents\MAXQDA*\_MAXQDA_System|MAXQDA*_Support.zip Tags=ccapps ID=MAXQDA Reader * Author=Winapp2.ini Project [Maxthon Autofill Backups *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\Backups\MagicFill|*|REMOVESELF Tags=ccapps ID=Maxthon Autofill Backups * Author=Winapp2.ini Project [Maxthon Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|*Web Data FileKey2=%LocalAppData%\Maxthon\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Maxthon\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Maxthon Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Maxthon Autoplay Preferences *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Maxthon Autoplay Preferences * Author=Winapp2.ini Project [Maxthon Bookmark Backups *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|Bookmarks.bak FileKey2=%LocalAppData%\Maxthon\User Data\*\Backups\BookMarks|*|REMOVESELF Tags=ccapps ID=Maxthon Bookmark Backups * Author=Winapp2.ini Project [Maxthon Bookmark Favicons *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|favicons* Tags=ccapps ID=Maxthon Bookmark Favicons * Author=Winapp2.ini Project [Maxthon Caches *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Maxthon\User Data|Module Info Cache FileKey3=%LocalAppData%\Maxthon\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Maxthon\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Maxthon\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Maxthon\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Maxthon\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Maxthon\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Maxthon\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Maxthon\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Maxthon\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Maxthon\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Maxthon\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Maxthon\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Maxthon\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Maxthon\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Maxthon\User Data\*\Thumbnail|*|REMOVESELF FileKey18=%LocalAppData%\Maxthon\User Data\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\Maxthon\User Data\Avatars|*|REMOVESELF FileKey20=%LocalAppData%\Maxthon\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Maxthon Caches * Author=Winapp2.ini Project [Maxthon Default App Handlers *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|PreferredApps Tags=ccapps ID=Maxthon Default App Handlers * Author=Winapp2.ini Project [Maxthon Download History *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Maxthon\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Maxthon Download History * Author=Winapp2.ini Project [Maxthon DRM Data *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Maxthon\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Maxthon DRM Data * Author=Winapp2.ini Project [Maxthon Extension Cookies *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|Extension Cookies Tags=ccapps ID=Maxthon Extension Cookies * Author=Winapp2.ini Project [Maxthon Pinned Tabs *] DetectFile=%LocalAppData%\Maxthon\User Data RegKey1=HKCU\Software\Maxthon\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Maxthon Pinned Tabs * Author=Winapp2.ini Project [Maxthon Privacy Sandbox *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data|*first_party_sets* FileKey2=%LocalAppData%\Maxthon\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Maxthon\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Maxthon\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Maxthon\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Maxthon\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Maxthon\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Maxthon\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Maxthon Privacy Sandbox * Author=Winapp2.ini Project [Maxthon Progressive Web Apps *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Maxthon Progressive Web Apps * Author=Winapp2.ini Project [Maxthon Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|Login Data*;Mx Login Data Tags=ccapps ID=Maxthon Saved Usernames & Passwords * Author=Winapp2.ini Project [Maxthon Security & Threat Detection *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|DIPS* FileKey2=%LocalAppData%\Maxthon\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Maxthon\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Maxthon\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Maxthon\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Maxthon\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Maxthon\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Maxthon\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Maxthon\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Maxthon\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Maxthon\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Maxthon\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Maxthon Security & Threat Detection * Author=Winapp2.ini Project [Maxthon Shopping Insights *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Maxthon\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Maxthon\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Maxthon\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Maxthon\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Maxthon Shopping Insights * Author=Winapp2.ini Project [Maxthon Storage Quota Manager *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|QuotaManager Tags=ccapps ID=Maxthon Storage Quota Manager * Author=Winapp2.ini Project [Maxthon Sync Data *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Maxthon Sync Data * Author=Winapp2.ini Project [Maxthon Telemetry *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon|debug.log FileKey2=%LocalAppData%\Maxthon\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Update State.json FileKey3=%LocalAppData%\Maxthon\User Data|*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Maxthon\User Data\*|*.log FileKey5=%LocalAppData%\Maxthon\User Data\*\DataSharing|*|REMOVESELF FileKey6=%LocalAppData%\Maxthon\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey7=%LocalAppData%\Maxthon\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey8=%LocalAppData%\Maxthon\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey9=%LocalAppData%\Maxthon\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey10=%LocalAppData%\Maxthon\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey11=%LocalAppData%\Maxthon\User Data\*\WebRTC Logs|*|REMOVESELF FileKey12=%LocalAppData%\Maxthon\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey13=%LocalAppData%\Maxthon\User Data\*BrowserMetrics|*|REMOVESELF FileKey14=%LocalAppData%\Maxthon\User Data\Crash Reports|*|REMOVESELF FileKey15=%LocalAppData%\Maxthon\User Data\Crashpad|*|REMOVESELF FileKey16=%LocalAppData%\Maxthon\User Data\Local Traces|*|REMOVESELF FileKey17=%LocalAppData%\Maxthon\User Data\Log Files|*|REMOVESELF FileKey18=%LocalAppData%\Maxthon\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Maxthon\User Data\Stability|*|REMOVESELF RegKey1=HKCU\Software\Maxthon\BlBeacon|failed_count RegKey2=HKCU\Software\Maxthon\BlBeacon|state RegKey3=HKCU\Software\Maxthon\Installer|LastChecked RegKey4=HKCU\Software\Maxthon\StabilityMetrics Tags=ccapps ID=Maxthon Telemetry * Author=Winapp2.ini Project [Maxthon Web Browsing Cookies *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Maxthon Web Browsing Cookies * Author=Winapp2.ini Project [Maxthon Web Browsing History *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Maxthon Web Browsing History * Author=Winapp2.ini Project [Maxthon Web Browsing Session *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Maxthon\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Maxthon Web Browsing Session * Author=Winapp2.ini Project [Maxthon Web Storage *] DetectFile=%LocalAppData%\Maxthon\User Data FileKey1=%LocalAppData%\Maxthon\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Maxthon\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Maxthon\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Maxthon\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Maxthon\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Maxthon\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Maxthon\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Maxthon\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Maxthon Web Storage * Author=Winapp2.ini Project [MBBSoftware Audio Control *] DetectFile=%LocalAppData%\MBBSoftware\Audio Control FileKey1=%LocalAppData%\MBBSoftware\Audio Control\*\TemporaryFolder|* Tags=ccmedia ID=MBBSoftware Audio Control * Author=Winapp2.ini Project [McAfee *] DetectFile=%ProgramData%\McAfee FileKey1=%ProgramData%\McAfee\AMCore\datreputation\Logs|*|RECURSE FileKey2=%ProgramData%\McAfee\Common Framework\AgentEvents|* FileKey3=%ProgramData%\McAfee\CSP\ETW|*.bak FileKey4=%ProgramData%\McAfee\Jcm|*.tmp FileKey5=%ProgramData%\McAfee\MCLOGS|*.bak;*.log|RECURSE FileKey6=%ProgramData%\McAfee\MHN|*.bak FileKey7=%ProgramData%\McAfee\modulecoreservice.exe|*.txt FileKey8=%ProgramData%\McAfee\MPF|*.tmp FileKey9=%ProgramData%\McAfee\MPF\data|*|RECURSE FileKey10=%ProgramData%\McAfee\MSC\Cache|McSubDB.Bak FileKey11=%ProgramData%\McAfee\MSC\Logs|*.log FileKey12=%ProgramData%\McAfee\SiteAdvisor|*.log;*.tmp;*.txt|RECURSE FileKey13=%ProgramData%\McAfee\Uninstall.exe|log.txt FileKey14=%ProgramData%\McAfee\Update|*|RECURSE FileKey15=%ProgramData%\McAfee\VirusScan\Data|*.log;*.old FileKey16=%ProgramData%\McAfee\VirusScan\Logs|*|RECURSE FileKey17=%ProgramData%\Network Associates\Common Framework\AgentEvents|* Tags=ccutil ID=McAfee * Author=Winapp2.ini Project [McAfee Real Protect *] DetectFile=%ProgramFiles%\McAfee\Real Protect FileKey1=%ProgramFiles%\McAfee\Real Protect|*.log Tags=ccutil ID=McAfee Real Protect * Author=Winapp2.ini Project [McAfee Safe Connect *] DetectFile=%AppData%\McAfee Safe Connect FileKey1=%AppData%\McAfee Safe Connect|*.log Tags=ccutil ID=McAfee Safe Connect * Author=Winapp2.ini Project [McPixel *] Detect=HKCU\Software\Valve\Steam\Apps\220860 FileKey1=%ProgramFiles%\Steam\Steamapps\common\mcpixel|log.txt Tags=ccapps ID=McPixel * Author=Winapp2.ini Project [Meausoft Mo-Search *] Detect=HKCU\Software\Meauxsoft\Mo-Search FileKey1=%LocalAppData%\Meauxsoft\Mo-Search4.0\Logs|* RegKey1=HKCU\Software\Meauxsoft\Mo-Search\Mo-Search v4.0.13\Last Position Tags=ccutil ID=Meausoft Mo-Search * Author=Winapp2.ini Project [Media Jukebox *] Detect=HKCU\Software\J. River\Music Exchange\1.0\Media Jukebox FileKey1=%ProgramFiles%\J River\Media Jukebox\Data|*.jmd Tags=ccmedia ID=Media Jukebox * Author=Winapp2.ini Project [Media Player Classic *] Detect1=HKCU\Software\Gabest\Media Player Classic Detect2=HKCU\Software\MPC-BE Detect3=HKCU\Software\MPC-HC\MPC-HC FileKey1=%AppData%\Media Player Classic|*.dmp FileKey2=%AppData%\MPC-*|*.dmp RegKey1=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 0 RegKey2=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 1 RegKey3=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 2 RegKey4=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 3 RegKey5=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 4 RegKey6=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 5 RegKey7=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 6 RegKey8=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 7 RegKey9=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 8 RegKey10=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 9 RegKey11=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 10 RegKey12=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 11 RegKey13=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 12 RegKey14=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 13 RegKey15=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 14 RegKey16=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 15 RegKey17=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 16 RegKey18=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 17 RegKey19=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 18 RegKey20=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 19 RegKey21=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 20 RegKey22=HKCU\Software\MPC-BE\Recent File List RegKey23=HKCU\Software\MPC-BE\RecentFiles RegKey24=HKCU\Software\MPC-BE\Settings|DVDPath RegKey25=HKCU\Software\MPC-BE\Settings|LastOpenDir RegKey26=HKCU\Software\MPC-BE\Settings|LastOpenFilterDir RegKey27=HKCU\Software\MPC-BE\Settings|LastSavedPlaylistDir RegKey28=HKCU\Software\MPC-BE\Settings|SnapShotPath RegKey29=HKCU\Software\MPC-HC\MPC-HC\Recent File List RegKey30=HKCU\Software\MPC-HC\MPC-HC\Settings|SnapshotPath Tags=ccmedia ID=Media Player Classic * Author=Winapp2.ini Project [Mediachance UtraSnap Pro *] Detect=HKCU\Software\Mediachance\UtraSnapPRO RegKey1=HKCU\Software\Mediachance\UtraSnapPRO\Disk|Filename RegKey2=HKCU\Software\Mediachance\UtraSnapPRO\Recent File List Tags=ccmedia ID=Mediachance UtraSnap Pro * Author=Winapp2.ini Project [MEGAsync *] DetectFile=%LocalAppData%\Mega Limited\MEGAsync FileKey1=%LocalAppData%\Mega Limited\MEGAsync|*.bak FileKey2=%LocalAppData%\Mega Limited\MEGAsync\crashDumps|* FileKey3=%LocalAppData%\Mega Limited\MEGAsync\logs|* Tags=ccinternet ID=MEGAsync * Author=Winapp2.ini Project [Melbits World *] DetectFile=%UserProfile%\AppData\LocalLow\Melbot Studios\Melbits World FileKey1=%UserProfile%\AppData\LocalLow\Melbot Studios\Melbits World|*log FileKey2=%UserProfile%\AppData\LocalLow\Melbot Studios\Melbits World\Unity|*|REMOVESELF Tags=ccapps ID=Melbits World * Author=Winapp2.ini Project [Melodics *] DetectFile=%LocalAppData%\Melodics\Melodics FileKey1=%LocalAppData%\Melodics\Melodics\Cache\qmlcache|* FileKey2=%LocalAppData%\Melodics\Melodics\Crashes|*|RECURSE FileKey3=%LocalAppData%\Melodics\Melodics\Logs|* FileKey4=%LocalAppData%\Melodics\Melodics\NetworkCache|*|RECURSE Tags=ccmedia ID=Melodics * Author=Winapp2.ini Project [Meltytech Shotcut *] DetectFile=%LocalAppData%\Meltytech\Shotcut FileKey1=%LocalAppData%\Meltytech\Shotcut|*-log.txt Tags=ccmedia ID=Meltytech Shotcut * Author=Winapp2.ini Project [Memeo *] DetectFile=%AppData%\Memeo FileKey1=%AppData%\Memeo\AutoBackup\Logs|* FileKey2=%AppData%\Memeo\Memeo Send\Logs|* Tags=ccutil ID=Memeo * Author=Winapp2.ini Project [MemoMaster 5 *] Detect=HKCU\Software\JBSoftware\MemoMaster5 RegKey1=HKCU\Software\JBSoftware\MemoMaster5|FileMRU1 RegKey2=HKCU\Software\JBSoftware\MemoMaster5|FileMRU2 RegKey3=HKCU\Software\JBSoftware\MemoMaster5|FileMRU3 RegKey4=HKCU\Software\JBSoftware\MemoMaster5|FileMRU4 RegKey5=HKCU\Software\JBSoftware\MemoMaster5|FileMRU5 RegKey6=HKCU\Software\JBSoftware\MemoMaster5|FileMRU6 RegKey7=HKCU\Software\JBSoftware\MemoMaster5|FileMRU7 RegKey8=HKCU\Software\JBSoftware\MemoMaster5|FileMRU8 RegKey9=HKCU\Software\JBSoftware\MemoMaster5|FileMRU9 RegKey10=HKCU\Software\JBSoftware\MemoMaster5|FileMRU10 RegKey11=HKCU\Software\JBSoftware\MemoMaster5|FileMRU11 RegKey12=HKCU\Software\JBSoftware\MemoMaster5|FileMRU12 RegKey13=HKCU\Software\JBSoftware\MemoMaster5|FileMRU13 RegKey14=HKCU\Software\JBSoftware\MemoMaster5|FileMRU14 RegKey15=HKCU\Software\JBSoftware\MemoMaster5|FileMRU15 Tags=ccapps ID=MemoMaster 5 * Author=Winapp2.ini Project [MemoQ *] DetectFile=%AppData%\MemoQ FileKey1=%AppData%\MemoQ\Log|*.log FileKey2=%ProgramData%\MemoQ Server\Log|*.log Tags=ccinternet ID=MemoQ * Author=Winapp2.ini Project [MEmu Android Emulator *] DetectFile=%LocalAppData%\Microvirt\MEmu FileKey1=%LocalAppData%\Microvirt\dump|* FileKey2=%LocalAppData%\Microvirt\MEmu|*.log FileKey3=%LocalAppData%\Microvirt\Setup|*.log Tags=ccapps ID=MEmu Android Emulator * Author=Winapp2.ini Project [Men of War *] DetectFile1=%UserProfile%\Documents\My Games\Men of War* DetectFile2=%UserProfile%\Documents\My Games\mow * FileKey1=%UserProfile%\Documents\My Games\men of war*\log|* FileKey2=%UserProfile%\Documents\My Games\men of war*\shader_cache|*|RECURSE FileKey3=%UserProfile%\Documents\My Games\mow *\log|* FileKey4=%UserProfile%\Documents\My Games\mow *\shader_cache|*|RECURSE Tags=ccapps ID=Men of War * Author=Winapp2.ini Project [Mercury Autocomplete History *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|formhistory* Tags=ccapps ID=Mercury Autocomplete History * Author=Winapp2.ini Project [Mercury Autofill Data *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|autofill-profiles.json Tags=ccapps ID=Mercury Autofill Data * Author=Winapp2.ini Project [Mercury Bookmark Backups *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Mercury Bookmark Backups * Author=Winapp2.ini Project [Mercury Bookmark Favicons *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|favicons* Tags=ccapps ID=Mercury Bookmark Favicons * Author=Winapp2.ini Project [Mercury Caches *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\mercury\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\mercury\Profiles\*\notificationstore|* FileKey4=%AppData%\mercury\Profiles\*\security_state|* FileKey5=%AppData%\mercury\Profiles\*\shader-cache|* FileKey6=%AppData%\mercury\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\mercury\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\mercury\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\mercury\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Mercury Caches * Author=Winapp2.ini Project [Mercury Privacy Sandbox *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Mercury Privacy Sandbox * Author=Winapp2.ini Project [Mercury Saved Usernames & Passwords *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|key4.db;logins.json Tags=ccapps ID=Mercury Saved Usernames & Passwords * Author=Winapp2.ini Project [Mercury Synced Tabs *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|synced-tabs.db* Tags=ccapps ID=Mercury Synced Tabs * Author=Winapp2.ini Project [Mercury Telemetry *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury|*.log|RECURSE FileKey2=%AppData%\mercury\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\mercury\Profiles\*\crashes|* FileKey4=%AppData%\mercury\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\mercury\Profiles\*\minidumps|* FileKey6=%AppData%\mercury\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\mercury\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\mercury\Profiles\*\weave\logs|* Tags=ccapps ID=Mercury Telemetry * Author=Winapp2.ini Project [Mercury Web Browsing Cookies *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|cookies* Tags=ccapps ID=Mercury Web Browsing Cookies * Author=Winapp2.ini Project [Mercury Web Browsing Session *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|session*.json* Tags=ccapps ID=Mercury Web Browsing Session * Author=Winapp2.ini Project [Mercury Web Browsing Session Backups *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Mercury Web Browsing Session Backups * Author=Winapp2.ini Project [Mercury Web Storage *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Mercury Web Storage * Author=Winapp2.ini Project [Mercury Website Permissions *] DetectFile=%AppData%\mercury\Profiles FileKey1=%AppData%\mercury\Profiles\*|permissions.sqlite Tags=ccapps ID=Mercury Website Permissions * Author=Winapp2.ini Project [Messenger for Desktop *] DetectFile=%LocalAppData%\Programs\messengerfordesktop FileKey1=%LocalAppData%\messengerfordesktop-updater|*|RECURSE Tags=ccinternet ID=Messenger for Desktop * Author=Winapp2.ini Project [Metadata Analyzer *] Detect=HKCU\Software\Smart PC Solutions\Metadata Analyzer RegKey1=HKCU\Software\Smart PC Solutions\Metadata Analyzer|LastFile RegKey2=HKCU\Software\Smart PC Solutions\Metadata Analyzer|LastFolder Tags=ccutil ID=Metadata Analyzer * Author=Winapp2.ini Project [Metamorphose *] DetectFile=%ProgramFiles%\metamorphose FileKey1=%AppData%\.metamorphose\undo|* Tags=ccutil ID=Metamorphose * Author=Winapp2.ini Project [Metapad *] Detect=HKCU\Software\metapad RegKey1=HKCU\Software\metapad|mru_1 RegKey2=HKCU\Software\metapad|mru_2 RegKey3=HKCU\Software\metapad|mru_3 RegKey4=HKCU\Software\metapad|mru_4 RegKey5=HKCU\Software\metapad|mru_5 RegKey6=HKCU\Software\metapad|mru_6 RegKey7=HKCU\Software\metapad|mru_7 RegKey8=HKCU\Software\metapad|mru_8 RegKey9=HKCU\Software\metapad|mru_9 RegKey10=HKCU\Software\metapad|mru_10 RegKey11=HKCU\Software\metapad|szLastDirectory Tags=ccapps ID=Metapad * Author=Winapp2.ini Project [MetaTrader *] DetectFile=%ProgramFiles%\MetaTrader* FileKey1=%ProgramFiles%\MetaTrader*\experts|*.log|RECURSE FileKey2=%ProgramFiles%\MetaTrader*\Logs|* Tags=ccapps ID=MetaTrader * Author=Winapp2.ini Project [MetaX *] Detect=HKCU\Software\No Bull Software\MetaX FileKey1=%UserProfile%\Documents\MetaX|*.log RegKey1=HKCU\Software\No Bull Software\MetaX\Preferences|lastDir Tags=ccutil ID=MetaX * Author=Winapp2.ini Project [Metin2 *] DetectFile=%ProgramFiles%\Metin2 FileKey1=%ProgramFiles%\Metin2|*.log FileKey2=%ProgramFiles%\Metin2\hshield|*.log FileKey3=%ProgramFiles%\Metin2\hshield\Update|*.log FileKey4=%ProgramFiles%\Metin2\temp|*.log Tags=ccapps ID=Metin2 * Author=Winapp2.ini Project [Microangelo *] Detect1=HKCU\Software\Eclipsit\Microangelo\Toolset 6 Detect2=HKCU\Software\Impact\Microangelo RegKey1=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Animator\MRU List RegKey2=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Librarian\MRU List RegKey3=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Studio\MRU List RegKey4=HKCU\Software\Impact\Microangelo\Animator\MRU List RegKey5=HKCU\Software\Impact\Microangelo\Librarian\MRU List RegKey6=HKCU\Software\Impact\Microangelo\Studio\MRU List Tags=ccapps ID=Microangelo * Author=Winapp2.ini Project [Micron Storage Executive *] Detect=HKLM\Software\Micron\StorageExecutive FileKey1=%ProgramFiles%\Micron Technology\Micron Storage Executive\logs|*.txt Tags=ccutil ID=Micron Storage Executive * Author=Winapp2.ini Project [Microsoft 3D Viewer *] DetectFile=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\PersistedStorageItemTable\MostRecentlyUsed Tags=ccmedia ID=Microsoft 3D Viewer * Author=Winapp2.ini Project [Microsoft App-V *] DetectFile=%AppData%\SoftGrid Client FileKey1=%AppData%\SoftGrid Client|*.tmp|RECURSE FileKey2=%AppData%\SoftGrid Client\Icon Cache|* FileKey3=%LocalAppData%\SoftGrid Client|*.tmp|RECURSE FileKey4=%ProgramData%\Microsoft\Application Virtualization Client\SoftGrid Client|*.tmp|RECURSE Tags=ccinternet ID=Microsoft App-V * Author=Winapp2.ini Project [Microsoft Azure VPN Client *] DetectFile=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\LocalState\LogFiles|* FileKey3=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccinternet ID=Microsoft Azure VPN Client * Author=Winapp2.ini Project [Microsoft Bing Dynamic *] DetectFile=%LocalAppData%\Microsoft\Windows\Themes\BingDynamic1.theme FileKey1=%LocalAppData%\Microsoft\Feeds|http~c~f~fthemeserver~dmicrosoft~dcom~fdefault~daspx~mp*Bing* Tags=ccmedia ID=Microsoft Bing Dynamic * Author=Winapp2.ini Project [Microsoft Bing Wallpapers *] DetectFile=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\BingWallpaper_Widget\1001\EBWebView\ZxcvbnData|*|REMOVESELF FileKey66=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\images\bing|* FileKey67=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\Settings|*.log* FileKey68=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Bing Wallpapers * Author=Winapp2.ini Project [Microsoft Clipchamp *] DetectFile=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt FileKey1=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey66=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\Settings|*.log* FileKey67=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium|*.log* FileKey68=%LocalAppData%\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Clipchamp * Author=Winapp2.ini Project [Microsoft Company Portal *] DetectFile=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\LocalState|*.log FileKey3=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey4=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.CompanyPortal_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Company Portal * Author=Winapp2.ini Project [Microsoft Copilot *] DetectFile=%LocalAppData%\Packages\Microsoft.Copilot_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Copilot_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Copilot_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.Copilot_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Microsoft Copilot * Author=Winapp2.ini Project [Microsoft Dependency Walker *] Detect=HKCU\Software\Microsoft\Dependency Walker RegKey1=HKCU\Software\Microsoft\Dependency Walker\Recent File List Tags=ccapps ID=Microsoft Dependency Walker * Author=Winapp2.ini Project [Microsoft Deployment Toolkit *] DetectFile=%ProgramFiles%\Microsoft Deployment Toolkit FileKey1=%ProgramFiles%\Microsoft Deployment Toolkit\Downloads|*|RECURSE Tags=ccutil ID=Microsoft Deployment Toolkit * Author=Winapp2.ini Project [Microsoft Diagnostics and Recovery Toolkit *] Detect=HKCU\Software\MSDART RegKey1=HKCU\Software\MSDART\Explorer\Recent File List Tags=ccwindows ID=Microsoft Diagnostics and Recovery Toolkit * Author=Winapp2.ini Project [Microsoft DirectX *] Detect=HKCU\Software\Microsoft\Windows RegKey1=HKCU\Software\Microsoft\Direct3D\MostRecentApplication RegKey2=HKCU\SOFTWARE\Microsoft\DirectInput\MostRecentApplication RegKey3=HKCU\Software\Microsoft\MPEG2Demultiplexer|WriteCaptureDir RegKey4=HKCU\Software\Microsoft\MPEG2Demultiplexer|WriteCapturePath RegKey5=HKCU\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache RegKey6=HKCU\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache64 RegKey7=HKLM\Software\Microsoft\Direct3D\MostRecentApplication RegKey8=HKLM\Software\Microsoft\DirectDraw\MostRecentApplication RegKey9=HKLM\Software\Wow6432Node\Microsoft\Direct3D\MostRecentApplication RegKey10=HKLM\Software\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication Tags=ccwindows ID=Microsoft DirectX * Author=Winapp2.ini Project [Microsoft DirectX Shader Cache *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%LocalAppData%\D3DSCache|*|REMOVESELF FileKey2=%WinDir%\System32\config\systemprofile\AppData\Local\D3DSCache|*|RECURSE Tags=ccwindows ID=Microsoft DirectX Shader Cache * Author=Winapp2.ini Project [Microsoft Edge Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|*Web Data FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\AutoFill*|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Microsoft Edge Autoplay Preferences *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\MEIPreload|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Autoplay Preferences * Author=Winapp2.ini Project [Microsoft Edge Bookmark Backups *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Bookmarks.bak Tags=Microsoft,Browser,Edge ID=Microsoft Edge Bookmark Backups * Author=Winapp2.ini Project [Microsoft Edge Bookmark Favicons *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|favicons* Tags=Microsoft,Browser,Edge ID=Microsoft Edge Bookmark Favicons * Author=Winapp2.ini Project [Microsoft Edge Caches *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Microsoft\Edge*\User Data|Module Info Cache FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\*|*.ldb;CURRENT;HubApps Icons;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Edge*\User Data\*\EdgePushStorage|*|REMOVESELF FileKey9=%LocalAppData%\Microsoft\Edge*\User Data\*\File System|*|REMOVESELF FileKey10=%LocalAppData%\Microsoft\Edge*\User Data\*\GCM Store|*|REMOVESELF FileKey11=%LocalAppData%\Microsoft\Edge*\User Data\*\JumpListIcons*|*|REMOVESELF FileKey12=%LocalAppData%\Microsoft\Edge*\User Data\*\optimization*|*|REMOVESELF FileKey13=%LocalAppData%\Microsoft\Edge*\User Data\*\Platform Notifications|*|REMOVESELF FileKey14=%LocalAppData%\Microsoft\Edge*\User Data\*\Service Worker|*|REMOVESELF FileKey15=%LocalAppData%\Microsoft\Edge*\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\*|*|RECURSE FileKey19=%LocalAppData%\Microsoft\Edge*\User Data\*Cache*|*|REMOVESELF FileKey20=%LocalAppData%\Microsoft\Edge*\User Data\Avatars|*|REMOVESELF FileKey21=%LocalAppData%\Microsoft\Edge*\User Data\Optimization*|*|REMOVESELF FileKey22=%LocalAppData%\Microsoft\Edge*\User Data\SmartScreen\local|*cache|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Caches * Author=Winapp2.ini Project [Microsoft Edge Default App Handlers *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|PreferredApps Tags=Microsoft,Browser,Edge ID=Microsoft Edge Default App Handlers * Author=Winapp2.ini Project [Microsoft Edge Download History *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\shared_proto_db|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Download History * Author=Winapp2.ini Project [Microsoft Edge DRM Data *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\WidevineCdm|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge DRM Data * Author=Winapp2.ini Project [Microsoft Edge Extension Cookies *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Extension Cookies Tags=Microsoft,Browser,Edge ID=Microsoft Edge Extension Cookies * Author=Winapp2.ini Project [Microsoft Edge PDF Restore Data *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\PDF Restore Data|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge PDF Restore Data * Author=Winapp2.ini Project [Microsoft Edge Pinned Tabs *] DetectFile=%LocalAppData%\Microsoft\Edge* RegKey1=HKCU\Software\Microsoft\Edge Beta\PreferenceMACs\Default|pinned_tabs RegKey2=HKCU\Software\Microsoft\Edge Dev\PreferenceMACs\Default|pinned_tabs RegKey3=HKCU\Software\Microsoft\Edge SxS\PreferenceMACs\Default|pinned_tabs RegKey4=HKCU\Software\Microsoft\Edge\PreferenceMACs\Default|pinned_tabs RegKey5=HKCU\Software\Microsoft\EdgeWebView\PreferenceMACs\Default|pinned_tabs Tags=Microsoft,Browser,Edge ID=Microsoft Edge Pinned Tabs * Author=Winapp2.ini Project [Microsoft Edge Privacy Sandbox *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data|*first_party_sets* FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Edge*\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Privacy Sandbox * Author=Winapp2.ini Project [Microsoft Edge Progressive Web Apps *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Web Applications|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Progressive Web Apps * Author=Winapp2.ini Project [Microsoft Edge Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Login Data* Tags=Microsoft,Browser,Edge ID=Microsoft Edge Saved Usernames & Passwords * Author=Winapp2.ini Project [Microsoft Edge Security & Threat Detection *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data|Safe Browsing Cookies FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*|DIPS* FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\*\ClientCertificates|*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\*\Network|TransportSecurity* FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\CertificateRevocation|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\Crowd Deny|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Edge*\User Data\PKIMetadata|*|REMOVESELF FileKey9=%LocalAppData%\Microsoft\Edge*\User Data\Safe Browsing|*|REMOVESELF FileKey10=%LocalAppData%\Microsoft\Edge*\User Data\SafetyTips|*|REMOVESELF FileKey11=%LocalAppData%\Microsoft\Edge*\User Data\SSLErrorAssistant|*|REMOVESELF FileKey12=%LocalAppData%\Microsoft\Edge*\User Data\Subresource Filter|*|REMOVESELF FileKey13=%LocalAppData%\Microsoft\Edge*\User Data\ZxcvbnData|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Security & Threat Detection * Author=Winapp2.ini Project [Microsoft Edge Shopping Insights *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\*\EdgeCoupons|*|REMOVESELF FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\*\parcel_tracking_db|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\*\PriceComparison|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Shopping Insights * Author=Winapp2.ini Project [Microsoft Edge Storage Quota Manager *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|QuotaManager Tags=Microsoft,Browser,Edge ID=Microsoft Edge Storage Quota Manager * Author=Winapp2.ini Project [Microsoft Edge Sync Data *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Sync Data|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Sync Data * Author=Winapp2.ini Project [Microsoft Edge Telemetry *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\Application|debug.log FileKey2=%LocalAppData%\Microsoft\Edge*\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Microsoft\Edge*\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Microsoft\Edge*\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\*|*.log;load_statistics.db* FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Edge*\User Data\*\Logs|*|REMOVESELF FileKey9=%LocalAppData%\Microsoft\Edge*\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%LocalAppData%\Microsoft\Edge*\User Data\*\Nurturing|*|REMOVESELF FileKey11=%LocalAppData%\Microsoft\Edge*\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey12=%LocalAppData%\Microsoft\Edge*\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey13=%LocalAppData%\Microsoft\Edge*\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey14=%LocalAppData%\Microsoft\Edge*\User Data\*\WebRTC Logs|*|REMOVESELF FileKey15=%LocalAppData%\Microsoft\Edge*\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey16=%LocalAppData%\Microsoft\Edge*\User Data\*BrowserMetrics|*|REMOVESELF FileKey17=%LocalAppData%\Microsoft\Edge*\User Data\Crash Reports|*|REMOVESELF FileKey18=%LocalAppData%\Microsoft\Edge*\User Data\Crashpad|*|REMOVESELF FileKey19=%LocalAppData%\Microsoft\Edge*\User Data\Edge Cloud Config|CloudConfigLog FileKey20=%LocalAppData%\Microsoft\Edge*\User Data\EdgeHubAppUsage|*|REMOVESELF FileKey21=%LocalAppData%\Microsoft\Edge*\User Data\Local Traces|*|REMOVESELF FileKey22=%LocalAppData%\Microsoft\Edge*\User Data\Nurturing|*|REMOVESELF FileKey23=%LocalAppData%\Microsoft\Edge*\User Data\OriginTrials|*|REMOVESELF FileKey24=%LocalAppData%\Microsoft\Edge*\User Data\Stability|*|REMOVESELF FileKey25=%ProgramFiles%\Microsoft\Edge*\Application|debug.log FileKey26=%ProgramFiles%\Microsoft\Edge*\Application\SetupMetrics|*|REMOVESELF FileKey27=%ProgramFiles%\Microsoft\EdgeWebView\Application\SetupMetrics|*.pma FileKey28=%UserProfile%\AppData\LocalLow\Microsoft\EdgeBho|*.log RegKey1=HKCU\Software\Microsoft\Edge Beta\BlBeacon|failed_count RegKey2=HKCU\Software\Microsoft\Edge Beta\BlBeacon|state RegKey3=HKCU\Software\Microsoft\Edge Beta\Installer|LastChecked RegKey4=HKCU\Software\Microsoft\Edge Beta\StabilityMetrics RegKey5=HKCU\Software\Microsoft\Edge Dev\BlBeacon|failed_count RegKey6=HKCU\Software\Microsoft\Edge Dev\BlBeacon|state RegKey7=HKCU\Software\Microsoft\Edge Dev\Installer|LastChecked RegKey8=HKCU\Software\Microsoft\Edge Dev\StabilityMetrics RegKey9=HKCU\Software\Microsoft\Edge SxS\BlBeacon|failed_count RegKey10=HKCU\Software\Microsoft\Edge SxS\BlBeacon|state RegKey11=HKCU\Software\Microsoft\Edge SxS\Installer|LastChecked RegKey12=HKCU\Software\Microsoft\Edge SxS\StabilityMetrics RegKey13=HKCU\Software\Microsoft\Edge\BlBeacon|failed_count RegKey14=HKCU\Software\Microsoft\Edge\BlBeacon|state RegKey15=HKCU\Software\Microsoft\Edge\Installer|LastChecked RegKey16=HKCU\Software\Microsoft\Edge\StabilityMetrics RegKey17=HKCU\Software\Microsoft\EdgeWebView\BlBeacon|failed_count RegKey18=HKCU\Software\Microsoft\EdgeWebView\BlBeacon|state RegKey19=HKCU\Software\Microsoft\EdgeWebView\Installer|LastChecked RegKey20=HKCU\Software\Microsoft\EdgeWebView\StabilityMetrics Tags=Microsoft,Browser,Edge ID=Microsoft Edge Telemetry * Author=Winapp2.ini Project [Microsoft Edge Web Browsing Cookies *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Microsoft,Browser,Edge ID=Microsoft Edge Web Browsing Cookies * Author=Winapp2.ini Project [Microsoft Edge Web Browsing History *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Microsoft,Browser,Edge ID=Microsoft Edge Web Browsing History * Author=Winapp2.ini Project [Microsoft Edge Web Browsing Session *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\Sessions|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Web Browsing Session * Author=Winapp2.ini Project [Microsoft Edge Web Storage *] DetectFile=%LocalAppData%\Microsoft\Edge* FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Microsoft\Edge*\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Microsoft\Edge*\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Edge*\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Edge*\User Data\*\WebStorage|*|REMOVESELF Tags=Microsoft,Browser,Edge ID=Microsoft Edge Web Storage * Author=Winapp2.ini Project [Microsoft Expression Encoder *] DetectFile=%UserProfile%\Documents\Expression\Expression Encoder FileKey1=%UserProfile%\Documents\Expression\Expression Encoder\Logs|* Tags=ccmedia ID=Microsoft Expression Encoder * Author=Winapp2.ini Project [Microsoft Expression Web *] Detect=HKCU\Software\Microsoft\Expression\Web Designer RegKey1=HKCU\Software\Microsoft\Expression\Web Designer\FindMRU Tags=ccutil ID=Microsoft Expression Web * Author=Winapp2.ini Project [Microsoft Flight Simulator X *] Detect=HKLM\Software\Microsoft\Microsoft Games\Flight Simulator\10.0 FileKey1=%ProgramFiles%\Microsoft Games\Microsoft Flight Simulator X|*.html;*.log;*.rtf;*.URL FileKey2=%ProgramFiles%\Microsoft Games\Microsoft Flight Simulator X\Modules|*.log ExcludeKey1=FILE|%ProgramFiles%\Microsoft Games\Microsoft Flight Simulator X\|kiosk.rtf ExcludeKey2=PATH|%ProgramFiles%\Microsoft Games\Microsoft Flight Simulator X\|readme.* Tags=ccapps ID=Microsoft Flight Simulator X * Author=Winapp2.ini Project [Microsoft Garage Mouse Without Borders *] DetectFile=%ProgramFiles%\Microsoft Garage\Mouse without Borders FileKey1=%ProgramFiles%\Microsoft Garage\Mouse without Borders|*.log Tags=ccutil ID=Microsoft Garage Mouse Without Borders * Author=Winapp2.ini Project [Microsoft HTML Help *] Detect1=HKCU\Software\Microsoft\HTML Help Workshop Detect2=HKCU\Software\Microsoft\Microsoft Help Workshop Detect3=HKLM\Software\Microsoft\HTMLHelp FileKey1=%AppData%\Microsoft\HTML Help|*.chw;hh.dat;hhcolreg.dat FileKey2=%ProgramData%\Microsoft\HTML Help|hh.dat;hhcolreg.dat FileKey3=%SystemDrive%\Documents and Settings\LocalService\Application Data\Microsoft\HTML Help|hh.dat FileKey4=%WinDir%\Application Data\Microsoft\HTML Help|hh.dat FileKey5=%WinDir%\Help|*.chw;*.cnt RegKey1=HKCU\Software\Microsoft\HTML Help Workshop\Compressed HTML RegKey2=HKCU\Software\Microsoft\HTML Help Workshop\Html Titles RegKey3=HKCU\Software\Microsoft\HTML Help Workshop\Project Files RegKey4=HKCU\Software\Microsoft\HTML Help Workshop\Recent File List RegKey5=HKCU\Software\Microsoft\HTML Help Workshop\Settings|LastProject RegKey6=HKCU\Software\Microsoft\Microsoft Help Workshop\Cnt Files RegKey7=HKCU\Software\Microsoft\Microsoft Help Workshop\Forage Files RegKey8=HKCU\Software\Microsoft\Microsoft Help Workshop\Hlp Files RegKey9=HKCU\Software\Microsoft\Microsoft Help Workshop\Hpj Files RegKey10=HKCU\Software\Microsoft\Microsoft Help Workshop\Map Files RegKey11=HKCU\Software\Microsoft\Microsoft Help Workshop\Recent File List RegKey12=HKCU\Software\Microsoft\Microsoft HTML Help Image Editor\Folders RegKey13=HKCU\Software\Microsoft\Microsoft HTML Help Image Editor\Recent File List Tags=ccwindows ID=Microsoft HTML Help * Author=Winapp2.ini Project [Microsoft Journal *] DetectFile=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\LocalCache|cache* FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\LocalCache\SearchIndex|* FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.MicrosoftJournal_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Journal * Author=Winapp2.ini Project [Microsoft Management Console *] Detect=HKLM\Software\Microsoft\MMC FileKey1=%AppData%\Microsoft\MMC|* RegKey1=HKCU\SOFTWARE\Microsoft\Microsoft Management Console\Recent File List Tags=ccwindows ID=Microsoft Management Console * Author=Winapp2.ini Project [Microsoft Message Analyzer *] DetectFile=%LocalAppData%\Microsoft\MessageAnalyzer FileKey1=%LocalAppData%\Microsoft\MessageAnalyzer|*.log FileKey2=%UserProfile%\Documents\MessageAnalyzer\Traces|*|RECURSE Tags=ccutil ID=Microsoft Message Analyzer * Author=Winapp2.ini Project [Microsoft Messaging *] DetectFile=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\LocalCache|*.etl;*.xml FileKey3=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Messaging_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccinternet ID=Microsoft Messaging * Author=Winapp2.ini Project [Microsoft Mixed Reality Link *] DetectFile=%LocalAppData%\Packages\Microsoft.MixedRealityLink_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MixedRealityLink_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MixedRealityLink_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.MixedRealityLink_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.MixedRealityLink_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Mixed Reality Link * Author=Winapp2.ini Project [Microsoft Mixed Reality Portal *] DetectFile=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Mixed Reality Portal * Author=Winapp2.ini Project [Microsoft Mobile Plans *] DetectFile=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\LocalState\DiagOutputDir|*.txt FileKey5=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccinternet ID=Microsoft Mobile Plans * Author=Winapp2.ini Project [Microsoft Mouse and Keyboard Center *] DetectFile1=%ProgramFiles%\Microsoft Device Center DetectFile2=%ProgramFiles%\Microsoft Mouse and Keyboard Center Warning=This will also delete all app-specific settings. RegKey1=HKCU\Software\Microsoft\IntelliPoint\AppSpecific RegKey2=HKCU\Software\Microsoft\IntelliType Pro\AppSpecific Tags=ccapps ID=Microsoft Mouse and Keyboard Center * Author=Winapp2.ini Project [Microsoft Movies & TV *] DetectFile=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalCache\PlayReady|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous|*.log FileKey4=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\ImageCache|*|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\ImageRetrievalFailure|*|RECURSE FileKey6=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\ImageStore|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\PlayReady|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings|*.log* FileKey10=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.ZuneVideo_8wekyb3d8bbwe\SearchHistory\SearchHistory Tags=ccmedia ID=Microsoft Movies & TV * Author=Winapp2.ini Project [Microsoft News *] DetectFile=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\LocalState\Cache\Images|* FileKey3=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.BingNews_8wekyb3d8bbwe\SearchHistory Tags=ccwindows ID=Microsoft News * Author=Winapp2.ini Project [Microsoft NuGet Package Cache *] DetectFile=%LocalAppData%\NuGet FileKey1=%LocalAppData%\NuGet\*Cache|*|REMOVESELF Tags=ccapps ID=Microsoft NuGet Package Cache * Author=Winapp2.ini Project [Microsoft Office *] Detect=HKCU\Software\Microsoft\Office DetectFile=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe FileKey1=%AppData%\Microsoft\Clip Organizer|mstore*.mgc;Offic*.MGC FileKey2=%AppData%\Microsoft\Document Building Blocks|*|RECURSE FileKey3=%AppData%\Microsoft\Office|*.tmp|RECURSE FileKey4=%AppData%\Microsoft\Office\Recent|* FileKey5=%AppData%\Microsoft\OIS|Toolbars.dat FileKey6=%AppData%\Microsoft\PowerPoint\Sync\Temp|* FileKey7=%AppData%\Microsoft\Templates|*.dot*;*.pot*;*.xlt* FileKey8=%AppData%\Microsoft\UProof|*.bin;*.XML FileKey9=%AppData%\Microsoft\Windows\Recent\AutomaticDestinations|*a7fd3622d948815;*b711200c399477;*d006197d08ade86|RECURSE FileKey10=%LocalAppData%\Microsoft Help|* FileKey11=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|._sync FileKey12=%LocalAppData%\Microsoft\Office\*|OneNoteOfflineCache.onecache FileKey13=%LocalAppData%\Microsoft\Office\*\BackstageInAppNavCache|*|RECURSE FileKey14=%LocalAppData%\Microsoft\Office\16.0\OfficeFileCache|*|RECURSE FileKey15=%LocalAppData%\Microsoft\Office\16.0\WebServiceCache|*|RECURSE FileKey16=%LocalAppData%\Microsoft\Office\DLP\mip\Logs|* FileKey17=%LocalAppData%\Microsoft\Office\OTele|*|RECURSE FileKey18=%LocalAppData%\Microsoft\OneNote\*|OneNoteOfflineCache.onecache FileKey19=%LocalAppData%\Microsoft\OneNote\*\cache|*|RECURSE FileKey20=%LocalAppData%\Microsoft\OneNote\*\OneNoteOfflineCache_Files|*|RECURSE FileKey21=%LocalAppData%\Microsoft\Visio|thumbs.dat FileKey22=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC|*|RECURSE FileKey23=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey24=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\AppData\Local\Office\*\WebServiceCache|*|RECURSE FileKey25=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey26=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey27=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey28=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey29=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey32=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey33=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey34=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey35=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey36=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey38=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey39=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey40=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey41=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey42=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey44=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey45=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey46=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey48=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey49=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey50=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey51=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey52=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey53=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey54=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey55=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey56=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey57=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey58=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Stability|*|REMOVESELF FileKey59=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings|*.log* FileKey60=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey61=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey62=%LocalAppData%\Packages\oice_*\AC|*|RECURSE FileKey63=%LocalAppData%\TempOffice*|*|REMOVESELF FileKey64=%SystemDrive%|propfix.log FileKey65=%UserProfile%\Documents|~*.doc*;~*.ppt*|RECURSE FileKey66=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Office\OTele|*|RECURSE FileKey67=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Office\OTele|*|RECURSE RegKey1=HKCU\Software\Microsoft\ClipArt Gallery\2.0\MRUDescription RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\General|SymbolMRU RegKey3=HKCU\Software\Microsoft\Office\11.0\Excel|FontInfoCache RegKey4=HKCU\Software\Microsoft\Office\11.0\MSE|LastLoadedSolution RegKey5=HKCU\Software\Microsoft\Office\11.0\MSE\FileMRUList RegKey6=HKCU\Software\Microsoft\Office\11.0\MSE\ProjectMRUList RegKey7=HKCU\Software\Microsoft\Office\11.0\MSE\SolutionMRUList RegKey8=HKCU\Software\Microsoft\Office\11.0\Word|FontInfoCache RegKey9=HKCU\Software\Microsoft\Office\12.0\Common\Internet|UseRWHlinkNavigation RegKey10=HKCU\Software\Microsoft\Office\12.0\Common\OfficeStart\Web\Templates RegKey11=HKCU\Software\Microsoft\Office\12.0\Excel\Recent Templates RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\Recent Templates RegKey13=HKCU\Software\Microsoft\Office\12.0\Word\Reading Locations RegKey14=HKCU\Software\Microsoft\Office\12.0\Word\Recent Templates RegKey15=HKCU\Software\Microsoft\Office\14.0\Common\Internet|UseRWHlinkNavigation RegKey16=HKCU\Software\Microsoft\Office\14.0\Common\OfficeStart\Web\Templates RegKey17=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Print to file\File Name MRU RegKey18=HKCU\Software\Microsoft\Office\14.0\Excel\Recent Templates RegKey19=HKCU\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents\TrustRecords RegKey20=HKCU\Software\Microsoft\Office\14.0\PowerPoint\Recent Templates RegKey21=HKCU\Software\Microsoft\Office\14.0\Word\Reading Locations RegKey22=HKCU\Software\Microsoft\Office\14.0\Word\Recent Templates RegKey23=HKCU\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents\TrustRecords RegKey24=HKCU\Software\Microsoft\Office\15.0\Common\Internet|UseRWHlinkNavigation RegKey25=HKCU\Software\Microsoft\Office\15.0\Common\OfficeStart\Web\Templates RegKey26=HKCU\Software\Microsoft\Office\15.0\Excel\Recent Templates RegKey27=HKCU\Software\Microsoft\Office\15.0\PowerPoint\Recent Templates RegKey28=HKCU\Software\Microsoft\Office\15.0\Word\Reading Locations RegKey29=HKCU\Software\Microsoft\Office\15.0\Word\Recent Templates RegKey30=HKCU\Software\Microsoft\Office\16.0\Access\File MRU RegKey31=HKCU\Software\Microsoft\Office\16.0\Access\User MRU RegKey32=HKCU\Software\Microsoft\Office\16.0\Common\Internet|UseRWHlinkNavigation RegKey33=HKCU\Software\Microsoft\Office\16.0\Common\OfficeStart\Web\Templates RegKey34=HKCU\Software\Microsoft\Office\16.0\Excel\File MRU RegKey35=HKCU\Software\Microsoft\Office\16.0\Excel\Place MRU RegKey36=HKCU\Software\Microsoft\Office\16.0\Excel\Recent Templates RegKey37=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU RegKey38=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU\ADAL_\File MRU RegKey39=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU\ADAL_\Place MRU RegKey40=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU\LiveId_\File MRU RegKey41=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU\LiveId_\Place MRU RegKey42=HKCU\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks RegKey43=HKCU\Software\Microsoft\Office\16.0\PowerPoint\File MRU RegKey44=HKCU\Software\Microsoft\Office\16.0\PowerPoint\Place MRU RegKey45=HKCU\Software\Microsoft\Office\16.0\PowerPoint\Recent Templates RegKey46=HKCU\Software\Microsoft\Office\16.0\PowerPoint\RecentAnimationList RegKey47=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU RegKey48=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU\ADAL_\File MRU RegKey49=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU\ADAL_\Place MRU RegKey50=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU\LiveId_\File MRU RegKey51=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU\LiveId_\Place MRU RegKey52=HKCU\Software\Microsoft\Office\16.0\Publisher\File MRU RegKey53=HKCU\Software\Microsoft\Office\16.0\Publisher\User MRU RegKey54=HKCU\Software\Microsoft\Office\16.0\Word\File MRU RegKey55=HKCU\Software\Microsoft\Office\16.0\Word\Place MRU RegKey56=HKCU\Software\Microsoft\Office\16.0\Word\Reading Locations RegKey57=HKCU\Software\Microsoft\Office\16.0\Word\Recent Templates RegKey58=HKCU\Software\Microsoft\Office\16.0\Word\User MRU RegKey59=HKCU\Software\Microsoft\Office\16.0\Word\User MRU\ADAL_\File MRU RegKey60=HKCU\Software\Microsoft\Office\16.0\Word\User MRU\ADAL_\Place MRU RegKey61=HKCU\Software\Microsoft\Office\16.0\Word\User MRU\LiveId_\File MRU RegKey62=HKCU\Software\Microsoft\Office\16.0\Word\User MRU\LiveId_\Place MRU RegKey63=HKCU\Software\Microsoft\Office\Common|FontBmpCache RegKey64=HKCU\Software\Microsoft\OfficeCustomizeWizard\12.0\RecentFileList RegKey65=HKCU\Software\Microsoft\OfficeCustomizeWizard\14.0\RecentFileList RegKey66=HKCU\Software\Microsoft\OfficeCustomizeWizard\15.0\RecentFileList RegKey67=HKCU\Software\Microsoft\OfficeCustomizeWizard\16.0\RecentFileList ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to MS Project.LNK ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to OneNote.LNK ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Publisher.LNK ExcludeKey4=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Visio.LNK ExcludeKey5=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Word.LNK ExcludeKey6=FILE|%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\Microsoft\Internet Explorer\DOMStore\*\|www.office[1].xml ExcludeKey7=PATH|%UserProfile%\Documents\*\|~*.doc*.* ExcludeKey8=PATH|%UserProfile%\Documents\*\|~*.ppt*.* Tags=ccapps ID=Microsoft Office * Author=Winapp2.ini Project [Microsoft Office Unsaved Files *] Detect=HKCU\Software\Microsoft\Office FileKey1=%AppData%\Microsoft\Excel|*|RECURSE FileKey2=%AppData%\Microsoft\PowerPoint|*|RECURSE FileKey3=%AppData%\Microsoft\Word|*|RECURSE FileKey4=%LocalAppData%\Microsoft\Office\UnsavedFiles|*|RECURSE ExcludeKey1=FILE|%AppData%\Microsoft\Word\|listgal.dat ExcludeKey2=PATH|%AppData%\Microsoft\Excel\XLSTART\|* ExcludeKey3=PATH|%AppData%\Microsoft\PowerPoint\|PPT*.pcb ExcludeKey4=PATH|%AppData%\Microsoft\Word\STARTUP\|* Tags=ccapps ID=Microsoft Office Unsaved Files * Author=Winapp2.ini Project [Microsoft OneDrive *] DetectFile1=%LocalAppData%\Microsoft\OneDrive DetectFile2=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\OneDrive\Logs|*|RECURSE FileKey2=%LocalAppData%\Microsoft\OneDrive\Setup\Logs|*|RECURSE FileKey3=%LocalAppData%\Microsoft\SkyDrive\logs|* FileKey4=%LocalAppData%\Microsoft\Windows\OneDrive\logs|*|RECURSE FileKey5=%LocalAppData%\OneDrive\Cache|*|RECURSE FileKey6=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\AC|*|RECURSE FileKey7=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey8=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\LocalState\Logs|*.log FileKey9=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\Settings|*.log* FileKey10=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey11=%LocalAppData%\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey12=%ProgramFiles%\Microsoft OneDrive\Setup\Logs|* FileKey13=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\OneDrive\Logs|*|RECURSE FileKey14=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\OneDrive\Setup\Logs|*|RECURSE FileKey15=%WinDir%\System32\LogFiles\CloudFiles|*|RECURSE FileKey16=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\OneDrive\Logs|*|RECURSE FileKey17=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\OneDrive\Setup\Logs|*|RECURSE RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.microsoftskydrive_8wekyb3d8bbwe\PersistedPickerData\microsoft.microsoftskydrive_8wekyb3d8bbwe!Microsoft.MicrosoftSkyDrive\DefaultOpenFileMultiple|LastLocation RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.microsoftskydrive_8wekyb3d8bbwe\SearchHistory Tags=ccapps ID=Microsoft OneDrive * Author=Winapp2.ini Project [Microsoft OneNote *] DetectFile=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\AppData\Local|msodata*.dat FileKey3=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\office*client.microsoft.com|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\AppData\Local\Office\OTele|*|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\AppData\Local\OneNote\16.0|*.onecache FileKey6=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\AppData\Local\OneNote\16.0\OneNote*Cache_Files|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings|*.log* FileKey8=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey9=%LocalAppData%\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Office.OneNote_8wekyb3d8bbwe\SearchHistory Tags=ccapps ID=Microsoft OneNote * Author=Winapp2.ini Project [Microsoft Orca *] Detect=HKCU\Software\Microsoft\Orca RegKey1=HKCU\Software\Microsoft\Orca\Recent File List Tags=ccutil ID=Microsoft Orca * Author=Winapp2.ini Project [Microsoft Outlook *] Detect1=HKCU\Software\Microsoft\Office\9.0\Outlook Detect2=HKCU\Software\Microsoft\Office\10.0\Outlook Detect3=HKCU\Software\Microsoft\Office\11.0\Outlook Detect4=HKCU\Software\Microsoft\Office\12.0\Outlook Detect5=HKCU\Software\Microsoft\Office\14.0\Outlook Detect6=HKCU\Software\Microsoft\Office\15.0\Outlook Detect7=HKCU\Software\Microsoft\Office\16.0\Outlook RegKey1=HKCU\Identities\{9745A9A1-95D3-4584-B4E8-C9C2374B3BD3}\Software\Microsoft\Outlook Express\5.0\Recent Stationery List RegKey2=HKCU\Software\Microsoft\Office\9.0\Outlook\Office Finder|1 RegKey3=HKCU\Software\Microsoft\Office\9.0\Outlook\Office Finder|2 RegKey4=HKCU\Software\Microsoft\Office\9.0\Outlook\Office Finder|3 RegKey5=HKCU\Software\Microsoft\Office\9.0\Outlook\Preferences|LocationMRU RegKey6=HKCU\Software\Microsoft\Office\9.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey7=HKCU\Software\Microsoft\Office\10.0\Outlook\Office Finder|1 RegKey8=HKCU\Software\Microsoft\Office\10.0\Outlook\Office Finder|2 RegKey9=HKCU\Software\Microsoft\Office\10.0\Outlook\Office Finder|3 RegKey10=HKCU\Software\Microsoft\Office\10.0\Outlook\Preferences|LocationMRU RegKey11=HKCU\Software\Microsoft\Office\10.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey12=HKCU\Software\Microsoft\Office\11.0\Outlook\Office Finder|1 RegKey13=HKCU\Software\Microsoft\Office\11.0\Outlook\Office Finder|2 RegKey14=HKCU\Software\Microsoft\Office\11.0\Outlook\Office Finder|3 RegKey15=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU RegKey16=HKCU\Software\Microsoft\Office\11.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey17=HKCU\Software\Microsoft\Office\12.0\Outlook\Office Finder|1 RegKey18=HKCU\Software\Microsoft\Office\12.0\Outlook\Office Finder|2 RegKey19=HKCU\Software\Microsoft\Office\12.0\Outlook\Office Finder|3 RegKey20=HKCU\Software\Microsoft\Office\12.0\Outlook\Preferences|LocationMRU RegKey21=HKCU\Software\Microsoft\Office\12.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey22=HKCU\Software\Microsoft\Office\14.0\Outlook\Office Finder|1 RegKey23=HKCU\Software\Microsoft\Office\14.0\Outlook\Office Finder|2 RegKey24=HKCU\Software\Microsoft\Office\14.0\Outlook\Office Finder|3 RegKey25=HKCU\Software\Microsoft\Office\14.0\Outlook\Preferences|LocationMRU RegKey26=HKCU\Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey27=HKCU\Software\Microsoft\Office\15.0\Outlook\Office Finder|1 RegKey28=HKCU\Software\Microsoft\Office\15.0\Outlook\Office Finder|2 RegKey29=HKCU\Software\Microsoft\Office\15.0\Outlook\Office Finder|3 RegKey30=HKCU\Software\Microsoft\Office\15.0\Outlook\Preferences|LocationMRU RegKey31=HKCU\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 RegKey32=HKCU\Software\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData|BootDiagnosticsLogFile RegKey33=HKCU\Software\Microsoft\Office\16.0\Outlook\Office Finder|1 RegKey34=HKCU\Software\Microsoft\Office\16.0\Outlook\Office Finder|2 RegKey35=HKCU\Software\Microsoft\Office\16.0\Outlook\Office Finder|3 RegKey36=HKCU\Software\Microsoft\Office\16.0\Outlook\Preferences|LocationMRU RegKey37=HKCU\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046|101f0445 Tags=ccinternet ID=Microsoft Outlook * Author=Winapp2.ini Project [Microsoft Outlook For Windows *] DetectFile=%LocalAppData%\Microsoft\Olk FileKey1=%LocalAppData%\Microsoft\Olk\Application|debug.log FileKey2=%LocalAppData%\Microsoft\Olk\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Microsoft\Olk\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%LocalAppData%\Microsoft\Olk\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Microsoft\Olk\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%LocalAppData%\Microsoft\Olk\EBWebView\*Cache*|*|REMOVESELF FileKey7=%LocalAppData%\Microsoft\Olk\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%LocalAppData%\Microsoft\Olk\EBWebView\Avatars|*|REMOVESELF FileKey9=%LocalAppData%\Microsoft\Olk\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%LocalAppData%\Microsoft\Olk\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%LocalAppData%\Microsoft\Olk\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%LocalAppData%\Microsoft\Olk\EBWebView\Crashpad|*|REMOVESELF FileKey13=%LocalAppData%\Microsoft\Olk\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%LocalAppData%\Microsoft\Olk\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;Login Data*;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%LocalAppData%\Microsoft\Olk\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%LocalAppData%\Microsoft\Olk\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%LocalAppData%\Microsoft\Olk\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%LocalAppData%\Microsoft\Olk\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%LocalAppData%\Microsoft\Olk\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%LocalAppData%\Microsoft\Olk\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%LocalAppData%\Microsoft\Olk\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%LocalAppData%\Microsoft\Olk\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%LocalAppData%\Microsoft\Olk\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%LocalAppData%\Microsoft\Olk\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%LocalAppData%\Microsoft\Olk\EBWebView\Default\File System|*|REMOVESELF FileKey29=%LocalAppData%\Microsoft\Olk\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%LocalAppData%\Microsoft\Olk\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%LocalAppData%\Microsoft\Olk\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%LocalAppData%\Microsoft\Olk\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%LocalAppData%\Microsoft\Olk\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%LocalAppData%\Microsoft\Olk\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%LocalAppData%\Microsoft\Olk\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%LocalAppData%\Microsoft\Olk\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%LocalAppData%\Microsoft\Olk\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%LocalAppData%\Microsoft\Olk\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%LocalAppData%\Microsoft\Olk\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%LocalAppData%\Microsoft\Olk\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%LocalAppData%\Microsoft\Olk\EBWebView\Local Traces|*|REMOVESELF FileKey52=%LocalAppData%\Microsoft\Olk\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%LocalAppData%\Microsoft\Olk\EBWebView\Optimization*|*|REMOVESELF FileKey54=%LocalAppData%\Microsoft\Olk\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%LocalAppData%\Microsoft\Olk\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%LocalAppData%\Microsoft\Olk\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%LocalAppData%\Microsoft\Olk\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%LocalAppData%\Microsoft\Olk\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%LocalAppData%\Microsoft\Olk\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%LocalAppData%\Microsoft\Olk\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%LocalAppData%\Microsoft\Olk\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%LocalAppData%\Microsoft\Olk\EBWebView\Stability|*|REMOVESELF FileKey63=%LocalAppData%\Microsoft\Olk\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%LocalAppData%\Microsoft\Olk\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%LocalAppData%\Microsoft\Olk\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%LocalAppData%\Microsoft\Olk\EBWebView\ZxcvbnData|*|REMOVESELF FileKey67=%LocalAppData%\Microsoft\Olk\Logs|*|REMOVESELF Tags=ccinternet ID=Microsoft Outlook For Windows * Author=Winapp2.ini Project [Microsoft Paint 3D *] DetectFile=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.MsPaint_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Paint 3D * Author=Winapp2.ini Project [Microsoft PC Manager *] DetectFile1=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe DetectFile2=%LocalAppData%\PC Manager Store FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe\LocalCache\Windows Master Store\IconCache|* FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftPCManager_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey6=%LocalAppData%\PC Manager Store\webview2\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey7=%LocalAppData%\PC Manager Store\webview2\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey8=%LocalAppData%\PC Manager Store\webview2\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey9=%LocalAppData%\PC Manager Store\webview2\EBWebView\*Cache*|*|REMOVESELF FileKey10=%LocalAppData%\PC Manager Store\webview2\EBWebView\AutoFill*|*|REMOVESELF FileKey11=%LocalAppData%\PC Manager Store\webview2\EBWebView\Avatars|*|REMOVESELF FileKey12=%LocalAppData%\PC Manager Store\webview2\EBWebView\CertificateRevocation|*|REMOVESELF FileKey13=%LocalAppData%\PC Manager Store\webview2\EBWebView\CookieReadinessList|*|REMOVESELF FileKey14=%LocalAppData%\PC Manager Store\webview2\EBWebView\Crash Reports|*|REMOVESELF FileKey15=%LocalAppData%\PC Manager Store\webview2\EBWebView\Crashpad|*|REMOVESELF FileKey16=%LocalAppData%\PC Manager Store\webview2\EBWebView\Crowd Deny|*|REMOVESELF FileKey17=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;Login Data*;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey18=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\*Cache*|*|REMOVESELF FileKey19=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey20=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\blob_storage|*|REMOVESELF FileKey21=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey22=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey23=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey24=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey25=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\coupon_db|*|REMOVESELF FileKey26=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\DataSharing|*|REMOVESELF FileKey27=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\discount*_db|*|REMOVESELF FileKey28=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Download Service|*|REMOVESELF FileKey29=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Extension State|*|REMOVESELF FileKey30=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey31=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\File System|*|REMOVESELF FileKey32=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\GCM Store|*|REMOVESELF FileKey33=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey34=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey35=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey36=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\optimization*|*|REMOVESELF FileKey37=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey38=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey39=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey40=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey41=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Service Worker|*|REMOVESELF FileKey42=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Sessions|*|REMOVESELF FileKey43=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey44=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey45=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey46=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey47=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey48=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Sync Data|*|REMOVESELF FileKey49=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey50=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\Web Applications|*|REMOVESELF FileKey51=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey52=%LocalAppData%\PC Manager Store\webview2\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey53=%LocalAppData%\PC Manager Store\webview2\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey54=%LocalAppData%\PC Manager Store\webview2\EBWebView\Local Traces|*|REMOVESELF FileKey55=%LocalAppData%\PC Manager Store\webview2\EBWebView\MEIPreload|*|REMOVESELF FileKey56=%LocalAppData%\PC Manager Store\webview2\EBWebView\Optimization*|*|REMOVESELF FileKey57=%LocalAppData%\PC Manager Store\webview2\EBWebView\OriginTrials|*|REMOVESELF FileKey58=%LocalAppData%\PC Manager Store\webview2\EBWebView\PKIMetadata|*|REMOVESELF FileKey59=%LocalAppData%\PC Manager Store\webview2\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey60=%LocalAppData%\PC Manager Store\webview2\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey61=%LocalAppData%\PC Manager Store\webview2\EBWebView\Safe Browsing|*|REMOVESELF FileKey62=%LocalAppData%\PC Manager Store\webview2\EBWebView\SafetyTips|*|REMOVESELF FileKey63=%LocalAppData%\PC Manager Store\webview2\EBWebView\SmartScreen|*|REMOVESELF FileKey64=%LocalAppData%\PC Manager Store\webview2\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey65=%LocalAppData%\PC Manager Store\webview2\EBWebView\Stability|*|REMOVESELF FileKey66=%LocalAppData%\PC Manager Store\webview2\EBWebView\Subresource Filter|*|REMOVESELF FileKey67=%LocalAppData%\PC Manager Store\webview2\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey68=%LocalAppData%\PC Manager Store\webview2\EBWebView\WidevineCdm|*|REMOVESELF FileKey69=%LocalAppData%\PC Manager Store\webview2\EBWebView\ZxcvbnData|*|REMOVESELF FileKey70=%LocalAppData%\Windows Master Store\IconCache|* FileKey71=%ProgramData%\Windows Master Store\assets\image|* FileKey72=%ProgramData%\Windows Master Store\common|*.log FileKey73=%ProgramData%\Windows Master Store\common\crash|*|RECURSE Tags=ccutil ID=Microsoft PC Manager * Author=Winapp2.ini Project [Microsoft People *] DetectFile=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\LocalState\DiagOutputDir|*.etl FileKey5=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\Settings|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.People_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft People * Author=Winapp2.ini Project [Microsoft Phone Link *] DetectFile=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccinternet ID=Microsoft Phone Link * Author=Winapp2.ini Project [Microsoft PlayReady *] DetectFile1=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe DetectFile2=%ProgramData%\Microsoft\Windows\DRM FileKey1=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey7=%ProgramData%\Microsoft\PlayReady|*.hds FileKey8=%ProgramData%\Microsoft\PlayReady\Cache|* FileKey9=%ProgramData%\Microsoft\Windows\DRM|*.log FileKey10=%ProgramData%\Microsoft\Windows\DRM\Cache|*|RECURSE FileKey11=%ProgramData%\Microsoft\Windows\DRM\PreUpgrade|*.log Tags=ccwindows ID=Microsoft PlayReady * Author=Winapp2.ini Project [Microsoft Power Automate *] DetectFile1=%LocalAppData%\Microsoft\Power Automate Desktop DetectFile2=%LocalAppData%\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\Power Automate Desktop\DataCollection|* FileKey2=%LocalAppData%\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\AC|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccutil ID=Microsoft Power Automate * Author=Winapp2.ini Project [Microsoft PowerToys *] Detect=HKCU\Software\Microsoft\PowerToys DetectFile=%LocalAppData%\Packages\Microsoft.PowerToys.SparseApp_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\PowerToys\*Logs|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys-*.etl FileKey3=%LocalAppData%\Packages\Microsoft.PowerToys.SparseApp_8wekyb3d8bbwe\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.PowerToys.SparseApp_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.PowerToys.SparseApp_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.PowerToys.SparseApp_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys * Author=Winapp2.ini Project [Microsoft PowerToys Advanced Paste *] DetectFile=%LocalAppData%\Microsoft\PowerToys\AdvancedPaste FileKey1=%LocalAppData%\Microsoft\PowerToys\AdvancedPaste|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.AdvancedPaste*.etl Tags=ccapps ID=Microsoft PowerToys Advanced Paste * Author=Winapp2.ini Project [Microsoft PowerToys Always On Top *] DetectFile=%LocalAppData%\Microsoft\PowerToys\AlwaysOnTop FileKey1=%LocalAppData%\Microsoft\PowerToys\AlwaysOnTop|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Always On Top * Author=Winapp2.ini Project [Microsoft PowerToys Awake *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Awake FileKey1=%LocalAppData%\Microsoft\PowerToys\Awake|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.Awake*.etl Tags=ccapps ID=Microsoft PowerToys Awake * Author=Winapp2.ini Project [Microsoft PowerToys Color Picker *] DetectFile=%LocalAppData%\Microsoft\PowerToys\ColorPicker FileKey1=%LocalAppData%\Microsoft\PowerToys\ColorPicker|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.ColorPickerUI*.etl Tags=ccapps ID=Microsoft PowerToys Color Picker * Author=Winapp2.ini Project [Microsoft PowerToys Command Not Found *] DetectFile=%LocalAppData%\Microsoft\PowerToys\CmdNotFound FileKey1=%LocalAppData%\Microsoft\PowerToys\CmdNotFound|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Command Not Found * Author=Winapp2.ini Project [Microsoft PowerToys Command Palette *] DetectFile=%LocalAppData%\Microsoft\PowerToys\CmdPal FileKey1=%LocalAppData%\Microsoft\PowerToys\CmdPal|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|Microsoft.CmdPal*.etl Tags=ccapps ID=Microsoft PowerToys Command Palette * Author=Winapp2.ini Project [Microsoft PowerToys Crop And Lock *] DetectFile=%LocalAppData%\Microsoft\PowerToys\CropAndLock FileKey1=%LocalAppData%\Microsoft\PowerToys\CropAndLock|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Crop And Lock * Author=Winapp2.ini Project [Microsoft PowerToys Environment Variables *] DetectFile=%LocalAppData%\Microsoft\PowerToys\EnvironmentVariables FileKey1=%LocalAppData%\Microsoft\PowerToys\EnvironmentVariables|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Environment Variables * Author=Winapp2.ini Project [Microsoft PowerToys Fancy Zones *] DetectFile=%LocalAppData%\Microsoft\PowerToys\FancyZones FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys_FancyZones*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\FancyZones|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Fancy Zones * Author=Winapp2.ini Project [Microsoft PowerToys File Explorer Add-ons *] DetectFile=%LocalAppData%\Microsoft\PowerToys\File Explorer FileKey1=%LocalAppData%\Microsoft\PowerToys\File Explorer|*.log|REMOVESELF FileKey2=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\etw|PowerToys.MarkdownPreviewHandler*.etl;PowerToys.PdfPreviewHandler*.etl FileKey3=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\FileExplorer_localLow|*.log|REMOVESELF FileKey4=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\logs\FileExplorer_localLow|*.log|REMOVESELF FileKey5=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\MarkdownPreview-Temp\EBWebview|*|REMOVESELF FileKey6=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\MonacoPreview-Temp\EBWebview|*|REMOVESELF FileKey7=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\PdfThumbnail-Temp\EBWebview|*|REMOVESELF FileKey8=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\Svg*-Temp\EBWebview|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys File Explorer Add-ons * Author=Winapp2.ini Project [Microsoft PowerToys File Locksmith *] DetectFile1=%LocalAppData%\Microsoft\PowerToys\File Locksmith DetectFile2=%LocalAppData%\Packages\Microsoft.PowerToys.FileLocksmithContextMenu_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\PowerToys\File Locksmith|*.log|REMOVESELF FileKey2=%LocalAppData%\Packages\Microsoft.PowerToys.FileLocksmithContextMenu_8wekyb3d8bbwe\AC|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.PowerToys.FileLocksmithContextMenu_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.PowerToys.FileLocksmithContextMenu_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.PowerToys.FileLocksmithContextMenu_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys File Locksmith * Author=Winapp2.ini Project [Microsoft PowerToys Hosts File Editor *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Hosts FileKey1=%LocalAppData%\Microsoft\PowerToys\Hosts|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Hosts File Editor * Author=Winapp2.ini Project [Microsoft PowerToys Image Resizer *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Image Resizer FileKey1=%LocalAppData%\Microsoft\PowerToys\Image Resizer|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Image Resizer * Author=Winapp2.ini Project [Microsoft PowerToys Keyboard Manager *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Keyboard Manager FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys_KeyboardManagerEngine*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\Keyboard Manager|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Keyboard Manager * Author=Winapp2.ini Project [Microsoft PowerToys Light Switch *] DetectFile=%LocalAppData%\Microsoft\PowerToys\LightSwitch FileKey1=%LocalAppData%\Microsoft\PowerToys\LightSwitch|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Light Switch * Author=Winapp2.ini Project [Microsoft PowerToys Mouse Utilities *] DetectFile1=%LocalAppData%\Microsoft\PowerToys\FindMyMouse DetectFile2=%LocalAppData%\Microsoft\PowerToys\MouseHighlighter DetectFile3=%LocalAppData%\Microsoft\PowerToys\MouseJump DetectFile4=%LocalAppData%\Microsoft\PowerToys\MousePointerCrosshairs FileKey1=%LocalAppData%\Microsoft\PowerToys\FindMyMouse|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\MouseHighlighter|*.log|REMOVESELF FileKey3=%LocalAppData%\Microsoft\PowerToys\MouseJump|*.log|REMOVESELF FileKey4=%LocalAppData%\Microsoft\PowerToys\MousePointerCrosshairs|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Mouse Utilities * Author=Winapp2.ini Project [Microsoft PowerToys Mouse Without Borders *] DetectFile=%LocalAppData%\Microsoft\PowerToys\MouseWithoutBorders FileKey1=%LocalAppData%\Microsoft\PowerToys\MouseWithoutBorders|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Mouse Without Borders * Author=Winapp2.ini Project [Microsoft PowerToys New+ *] DetectFile=%LocalAppData%\Microsoft\PowerToys\NewPlus FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.Awake*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\NewPlus\NewPlus.ShellExtension|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys New+ * Author=Winapp2.ini Project [Microsoft PowerToys Peek *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Peek FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.Peek.UI*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\Peek|*.log|REMOVESELF FileKey3=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\Peek-Temp\EBWebview|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Peek * Author=Winapp2.ini Project [Microsoft PowerToys PowerRename *] DetectFile1=%LocalAppData%\Microsoft\PowerToys\PowerRename DetectFile2=%LocalAppData%\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\PowerToys\PowerRename|*.log;power-rename-last-run-data.json|REMOVESELF FileKey2=%LocalAppData%\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\AC|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys PowerRename * Author=Winapp2.ini Project [Microsoft PowerToys Quick Accent *] DetectFile=%LocalAppData%\Microsoft\PowerToys\QuickAccent FileKey1=%LocalAppData%\Microsoft\PowerToys\*Accent|*.log|REMOVESELF FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.PowerAccent*.etl Tags=ccapps ID=Microsoft PowerToys Quick Accent * Author=Winapp2.ini Project [Microsoft PowerToys Registry Preview *] DetectFile=%LocalAppData%\Microsoft\PowerToys\RegistryPreview FileKey1=%LocalAppData%\Microsoft\PowerToys\RegistryPreview|*.log|REMOVESELF FileKey2=%UserProfile%\AppData\LocalLow\Microsoft\PowerToys\RegistryPreview-Temp\EBWebview|*|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Registry Preview * Author=Winapp2.ini Project [Microsoft PowerToys Run *] DetectFile=%LocalAppData%\Microsoft\PowerToys\PowerToys Run FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.PowerLauncher*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\PowerToys Run\Logs*|*|REMOVESELF FileKey3=%LocalAppData%\Microsoft\PowerToys\PowerToys Run\Settings|ImageCache.json;QueryHistory.json Tags=ccapps ID=Microsoft PowerToys Run * Author=Winapp2.ini Project [Microsoft PowerToys Screen Ruler *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Measure Tool FileKey1=%LocalAppData%\Microsoft\PowerToys\Measure Tool|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Screen Ruler * Author=Winapp2.ini Project [Microsoft PowerToys Settings *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Settings FileKey1=%LocalAppData%\Microsoft\PowerToys|settings-telemetry.json;UpdateState.json FileKey2=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.Settings*.etl FileKey3=%LocalAppData%\Microsoft\PowerToys\Settings|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Settings * Author=Winapp2.ini Project [Microsoft PowerToys Shortcut Guide *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Shortcut Guide FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys_ShortcutGuide*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\Shortcut Guide|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Shortcut Guide * Author=Winapp2.ini Project [Microsoft PowerToys Text Extractor *] DetectFile=%LocalAppData%\Microsoft\PowerToys\TextExtractor FileKey1=%LocalAppData%\Microsoft\PowerToys\etw|PowerToys.PowerOCR*.etl FileKey2=%LocalAppData%\Microsoft\PowerToys\TextExtractor|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Text Extractor * Author=Winapp2.ini Project [Microsoft PowerToys Workspaces *] DetectFile=%LocalAppData%\Microsoft\PowerToys\Workspaces FileKey1=%LocalAppData%\Microsoft\PowerToys\Workspaces|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys Workspaces * Author=Winapp2.ini Project [Microsoft PowerToys ZoomIt *] DetectFile=%LocalAppData%\Microsoft\PowerToys\ZoomIt FileKey1=%LocalAppData%\Microsoft\PowerToys\ZoomIt|*.log|REMOVESELF Tags=ccapps ID=Microsoft PowerToys ZoomIt * Author=Winapp2.ini Project [Microsoft Print 3D *] DetectFile=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Print3D_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccmedia ID=Microsoft Print 3D * Author=Winapp2.ini Project [Microsoft Project 2010 *] Detect=HKCU\Software\Microsoft\Office\14.0\MS Project RegKey1=HKCU\Software\Microsoft\Office\14.0\MS Project\Recent File List RegKey2=HKCU\Software\Microsoft\Office\14.0\MS Project\Recent Templates Tags=ccapps ID=Microsoft Project 2010 * Author=Winapp2.ini Project [Microsoft Robocopy GUI *] Detect=HKCU\Software\Microsoft\Microsoft Robocopy GUI FileKey1=%AppData%\Microsoft Robocopy GUI\Logs|* FileKey2=%ProgramFiles%\Microsoft\Microsoft Robocopy GUI\Logs|* Tags=ccwindows ID=Microsoft Robocopy GUI * Author=Winapp2.ini Project [Microsoft Small Basic *] DetectFile=%LocalAppData%\SmallBasic\SB.exe.settings.catalog FileKey1=%LocalAppData%\SmallBasic|* Tags=ccapps ID=Microsoft Small Basic * Author=Winapp2.ini Project [Microsoft Solitaire Collection *] DetectFile=%LocalAppData%\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Solitaire Collection * Author=Winapp2.ini Project [Microsoft SQL Server *] Detect1=HKCU\Software\Microsoft\Microsoft SQL Server Detect2=HKLM\Software\Microsoft\Microsoft SQL Server FileKey1=%ProgramFiles%\Microsoft SQL Server\*\*\Log|*|RECURSE RegKey1=HKCU\Software\Microsoft\Microsoft SQL Server\80\Tools\Shell\FileMRUList RegKey2=HKCU\Software\Microsoft\Microsoft SQL Server\80\Tools\Shell\ProjectMRUList RegKey3=HKCU\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\FileMRUList RegKey4=HKCU\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\ProjectMRUList RegKey5=HKCU\Software\Microsoft\Microsoft SQL Server\100\Tools\Shell\FileMRUList RegKey6=HKCU\Software\Microsoft\Microsoft SQL Server\100\Tools\Shell\ProjectMRUList RegKey7=HKCU\Software\Microsoft\Microsoft SQL Server\110\Tools\Shell\FileMRUList RegKey8=HKCU\Software\Microsoft\Microsoft SQL Server\110\Tools\Shell\ProjectMRUList RegKey9=HKLM\Software\Microsoft\Microsoft SQL Server\80\Tools\Shell\FileMRUList RegKey10=HKLM\Software\Microsoft\Microsoft SQL Server\80\Tools\Shell\ProjectMRUList RegKey11=HKLM\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\FileMRUList RegKey12=HKLM\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\ProjectMRUList RegKey13=HKLM\Software\Microsoft\Microsoft SQL Server\100\Tools\Shell\FileMRUList RegKey14=HKLM\Software\Microsoft\Microsoft SQL Server\100\Tools\Shell\ProjectMRUList RegKey15=HKLM\Software\Microsoft\Microsoft SQL Server\110\Tools\Shell\FileMRUList RegKey16=HKLM\Software\Microsoft\Microsoft SQL Server\110\Tools\Shell\ProjectMRUList Tags=ccapps ID=Microsoft SQL Server * Author=Winapp2.ini Project [Microsoft Sticky Notes *] DetectFile=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState|log*.txt|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Microsoft Sticky Notes * Author=Winapp2.ini Project [Microsoft Store *] DetectFile1=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe DetectFile3=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey12=%LocalAppData%\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey13=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\AC|*|RECURSE FileKey14=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey15=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey16=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\LocalState\LiveTile|*|RECURSE FileKey17=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\Settings|*.log* FileKey18=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey19=%LocalAppData%\Packages\winstore_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey20=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\InstallService|*|RECURSE RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache RegKey2=HKLM\Software\Microsoft\Windows\CurrentVersion\InstallService\State\CategoryCache Tags=ccwindows ID=Microsoft Store * Author=Winapp2.ini Project [Microsoft Support and Recovery Assistant *] DetectFile=%LocalAppData%\SaRALogs FileKey1=%LocalAppData%\SaRALogs|*|RECURSE FileKey2=%LocalAppData%\SaraResults|SaraResult_*.xml Tags=ccutil ID=Microsoft Support and Recovery Assistant * Author=Winapp2.ini Project [Microsoft Surface *] DetectFile=%LocalAppData%\Packages\Microsoft.SurfaceHub_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.SurfaceHub_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.SurfaceHub_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.SurfaceHub_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.SurfaceHub_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey5=%ProgramData%\SurfaceExperienceService\Etl|* Tags=ccapps ID=Microsoft Surface * Author=Winapp2.ini Project [Microsoft Sway *] DetectFile=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Office.Sway_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Sway * Author=Winapp2.ini Project [Microsoft Teams *] DetectFile1=%LocalAppData%\Microsoft\Teams DetectFile2=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe FileKey1=%AppData%\Microsoft Teams\Logs|* FileKey2=%AppData%\Microsoft\Teams|*.log;*first_party_sets*;*logs*.txt;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache;watchdog.txt;watchdog_*.json FileKey3=%AppData%\Microsoft\Teams|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%AppData%\Microsoft\Teams\*BrowserMetrics|*|REMOVESELF FileKey5=%AppData%\Microsoft\Teams\*Cache*|*|REMOVESELF FileKey6=%AppData%\Microsoft\Teams\AutoFill*|*|REMOVESELF FileKey7=%AppData%\Microsoft\Teams\Avatars|*|REMOVESELF FileKey8=%AppData%\Microsoft\Teams\CertificateRevocation|*|REMOVESELF FileKey9=%AppData%\Microsoft\Teams\CookieReadinessList|*|REMOVESELF FileKey10=%AppData%\Microsoft\Teams\Crash Reports|*|REMOVESELF FileKey11=%AppData%\Microsoft\Teams\Crashpad|*|REMOVESELF FileKey12=%AppData%\Microsoft\Teams\Crowd Deny|*|REMOVESELF FileKey13=%AppData%\Microsoft\Teams\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%AppData%\Microsoft\Teams\Default\*Cache*|*|REMOVESELF FileKey15=%AppData%\Microsoft\Teams\Default\AutoFill*|*|REMOVESELF FileKey16=%AppData%\Microsoft\Teams\Default\blob_storage|*|REMOVESELF FileKey17=%AppData%\Microsoft\Teams\Default\BudgetDatabase|*|REMOVESELF FileKey18=%AppData%\Microsoft\Teams\Default\chrome_cart_db|*|REMOVESELF FileKey19=%AppData%\Microsoft\Teams\Default\ClientCertificates|*|REMOVESELF FileKey20=%AppData%\Microsoft\Teams\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%AppData%\Microsoft\Teams\Default\coupon_db|*|REMOVESELF FileKey22=%AppData%\Microsoft\Teams\Default\DataSharing|*|REMOVESELF FileKey23=%AppData%\Microsoft\Teams\Default\discount*_db|*|REMOVESELF FileKey24=%AppData%\Microsoft\Teams\Default\Download Service|*|REMOVESELF FileKey25=%AppData%\Microsoft\Teams\Default\Extension State|*|REMOVESELF FileKey26=%AppData%\Microsoft\Teams\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%AppData%\Microsoft\Teams\Default\File System|*|REMOVESELF FileKey28=%AppData%\Microsoft\Teams\Default\GCM Store|*|REMOVESELF FileKey29=%AppData%\Microsoft\Teams\Default\IndexedDB|*|REMOVESELF FileKey30=%AppData%\Microsoft\Teams\Default\JumpListIcons*|*|REMOVESELF FileKey31=%AppData%\Microsoft\Teams\Default\Local Storage\*\IndexedDB\https*|* FileKey32=%AppData%\Microsoft\Teams\Default\Local Storage\*\Session Storage|* FileKey33=%AppData%\Microsoft\Teams\Default\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey34=%AppData%\Microsoft\Teams\Default\Local Storage\*\WebStorage|*|RECURSE FileKey35=%AppData%\Microsoft\Teams\Default\Local Storage\leveldb|*|REMOVESELF FileKey36=%AppData%\Microsoft\Teams\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey37=%AppData%\Microsoft\Teams\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey38=%AppData%\Microsoft\Teams\Default\optimization*|*|REMOVESELF FileKey39=%AppData%\Microsoft\Teams\Default\parcel_tracking_db|*|REMOVESELF FileKey40=%AppData%\Microsoft\Teams\Default\PersistentOriginTrials|*|REMOVESELF FileKey41=%AppData%\Microsoft\Teams\Default\Platform Notifications|*|REMOVESELF FileKey42=%AppData%\Microsoft\Teams\Default\Safe Browsing Network|*|REMOVESELF FileKey43=%AppData%\Microsoft\Teams\Default\Service Worker|*|REMOVESELF FileKey44=%AppData%\Microsoft\Teams\Default\Session Storage|*|REMOVESELF FileKey45=%AppData%\Microsoft\Teams\Default\Sessions|*|REMOVESELF FileKey46=%AppData%\Microsoft\Teams\Default\Shared Dictionary\cache|*|REMOVESELF FileKey47=%AppData%\Microsoft\Teams\Default\shared_proto_db|*|REMOVESELF FileKey48=%AppData%\Microsoft\Teams\Default\Site Characteristics Database|*|REMOVESELF FileKey49=%AppData%\Microsoft\Teams\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey50=%AppData%\Microsoft\Teams\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey51=%AppData%\Microsoft\Teams\Default\Sync Data|*|REMOVESELF FileKey52=%AppData%\Microsoft\Teams\Default\VideoDecodeStats|*|REMOVESELF FileKey53=%AppData%\Microsoft\Teams\Default\Web Applications|*|REMOVESELF FileKey54=%AppData%\Microsoft\Teams\Default\WebRTC Logs|*|REMOVESELF FileKey55=%AppData%\Microsoft\Teams\Default\WebrtcVideoStats|*|REMOVESELF FileKey56=%AppData%\Microsoft\Teams\Default\WebStorage|*|REMOVESELF FileKey57=%AppData%\Microsoft\Teams\FirstPartySetsPreloaded|*|REMOVESELF FileKey58=%AppData%\Microsoft\Teams\Local Traces|*|REMOVESELF FileKey59=%AppData%\Microsoft\Teams\media-stack|*.bak;*.blog;*.etl FileKey60=%AppData%\Microsoft\Teams\MEIPreload|*|REMOVESELF FileKey61=%AppData%\Microsoft\Teams\Optimization*|*|REMOVESELF FileKey62=%AppData%\Microsoft\Teams\OriginTrials|*|REMOVESELF FileKey63=%AppData%\Microsoft\Teams\PKIMetadata|*|REMOVESELF FileKey64=%AppData%\Microsoft\Teams\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey65=%AppData%\Microsoft\Teams\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey66=%AppData%\Microsoft\Teams\Safe Browsing|*|REMOVESELF FileKey67=%AppData%\Microsoft\Teams\SafetyTips|*|REMOVESELF FileKey68=%AppData%\Microsoft\Teams\skylib|*.blog;*.data-shm;*.data-wal FileKey69=%AppData%\Microsoft\Teams\SmartScreen|*|REMOVESELF FileKey70=%AppData%\Microsoft\Teams\SSLErrorAssistant|*|REMOVESELF FileKey71=%AppData%\Microsoft\Teams\Stability|*|REMOVESELF FileKey72=%AppData%\Microsoft\Teams\Subresource Filter|*|REMOVESELF FileKey73=%AppData%\Microsoft\Teams\tmp|*|RECURSE FileKey74=%AppData%\Microsoft\Teams\TrustTokenKeyCommitments|*|REMOVESELF FileKey75=%AppData%\Microsoft\Teams\WidevineCdm|*|REMOVESELF FileKey76=%AppData%\Microsoft\Teams\ZxcvbnData|*|REMOVESELF FileKey77=%LocalAppData%\Microsoft\Teams|*.log FileKey78=%LocalAppData%\Microsoft\Teams*Addin|*-logs.txt FileKey79=%LocalAppData%\Microsoft\Teams\current|*.log FileKey80=%LocalAppData%\Microsoft\Teams\current\resources\tmp|*|REMOVESELF FileKey81=%LocalAppData%\Microsoft\Teams\packaqes\squirreltemp|* FileKey82=%LocalAppData%\Microsoft\Teams\previous|*|REMOVESELF FileKey83=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe\AC|*|RECURSE FileKey84=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey85=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe\Settings|*.log* FileKey86=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey87=%LocalAppData%\Packages\MicrosoftTeams_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Teams * Author=Winapp2.ini Project [Microsoft Tips *] DetectFile=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Microsoft Tips * Author=Winapp2.ini Project [Microsoft To Do *] DetectFile=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.Todos_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft To Do * Author=Winapp2.ini Project [Microsoft Ultimate Word Games *] DetectFile=%LocalAppData%\Packages\Microsoft.Studios.Wordament_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Studios.Wordament_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Studios.Wordament_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.Studios.Wordament_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.Studios.Wordament_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Microsoft Ultimate Word Games * Author=Winapp2.ini Project [Microsoft Visio *] Detect1=HKCU\Software\Microsoft\Office\14.0\Visio Detect2=HKCU\Software\Microsoft\Office\15.0\Visio Detect3=HKCU\Software\Microsoft\Office\16.0\Visio RegKey1=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile1 RegKey2=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile2 RegKey3=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile3 RegKey4=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile4 RegKey5=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile5 RegKey6=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile6 RegKey7=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile7 RegKey8=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile8 RegKey9=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile9 RegKey10=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile10 RegKey11=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile11 RegKey12=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile12 RegKey13=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly1 RegKey14=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly2 RegKey15=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly3 RegKey16=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly4 RegKey17=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template1 RegKey18=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template2 RegKey19=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template3 RegKey20=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template4 RegKey21=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile1 RegKey22=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile2 RegKey23=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile3 RegKey24=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile4 RegKey25=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile5 RegKey26=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile6 RegKey27=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile7 RegKey28=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile8 RegKey29=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile9 RegKey30=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile10 RegKey31=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile11 RegKey32=HKCU\Software\Microsoft\Office\15.0\Visio\Application|LastFile12 RegKey33=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Friendly1 RegKey34=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Friendly2 RegKey35=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Friendly3 RegKey36=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Friendly4 RegKey37=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Template1 RegKey38=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Template2 RegKey39=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Template3 RegKey40=HKCU\Software\Microsoft\Office\15.0\Visio\Recent Templates|Template4 RegKey41=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile1 RegKey42=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile2 RegKey43=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile3 RegKey44=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile4 RegKey45=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile5 RegKey46=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile6 RegKey47=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile7 RegKey48=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile8 RegKey49=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile9 RegKey50=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile10 RegKey51=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile11 RegKey52=HKCU\Software\Microsoft\Office\16.0\Visio\Application|LastFile12 RegKey53=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Friendly1 RegKey54=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Friendly2 RegKey55=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Friendly3 RegKey56=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Friendly4 RegKey57=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Template1 RegKey58=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Template2 RegKey59=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Template3 RegKey60=HKCU\Software\Microsoft\Office\16.0\Visio\Recent Templates|Template4 Tags=ccapps ID=Microsoft Visio * Author=Winapp2.ini Project [Microsoft Visual Studio *] Detect=HKCU\Software\Microsoft\VisualStudio FileKey1=%AppData%\Visual Studio Setup\*Cache|* FileKey2=%LocalAppData%\Microsoft\VisualStudio\*\ComponentModelCache|* FileKey3=%LocalAppData%\Microsoft\VisualStudio\*\Extensions|*.cache FileKey4=%LocalAppData%\Microsoft\VisualStudio\*\ImageLibrary|*.cache FileKey5=%LocalAppData%\Microsoft\VisualStudio\*\MEFCacheBackup|* FileKey6=%LocalAppData%\Microsoft\VisualStudio\*\Notifications|*.cache FileKey7=%LocalAppData%\Microsoft\VisualStudio\*\ProjectAssemblies|* FileKey8=%LocalAppData%\Microsoft\VisualStudio\*\TextMateCache|* FileKey9=%LocalAppData%\Microsoft\VisualStudio\SettingsLogs|*|RECURSE FileKey10=%LocalAppData%\Microsoft\VisualStudio\WebView2Cache|*.pma|RECURSE FileKey11=%LocalAppData%\Microsoft\VisualStudio\WebView2Cache\*\EBWebView\*cache*|* FileKey12=%LocalAppData%\Microsoft\VisualStudio\WebView2Cache\*\EBWebView\Crashpad\Reports|* FileKey13=%LocalAppData%\Microsoft\VisualStudio\WebView2Cache\*\EBWebView\default\*cache*|* FileKey14=%LocalAppData%\Microsoft\websiteCache|*|RECURSE FileKey15=%LocalAppData%\PerfWatson|* FileKey16=%ProgramFiles%\Microsoft Visual Studio*\*\Logs|*|RECURSE FileKey17=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\VisualStudio\17.*|*.log* FileKey18=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\VisualStudio\SettingsLogs|* FileKey19=%WinDir%\System32\config\systemprofile\AppData\Roaming\Microsoft\VisualStudio\17.*|ActivityLog.Setup.xml FileKey20=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\VisualStudio\17.*|*.log* Tags=ccapps ID=Microsoft Visual Studio * Author=Winapp2.ini Project [Microsoft Visual Studio Backups *] Detect=HKCU\Software\Microsoft\VisualStudio FileKey1=%UserProfile%\Documents\Visual Studio*\Backup Files|*|RECURSE Tags=ccapps ID=Microsoft Visual Studio Backups * Author=Winapp2.ini Project [Microsoft Visual Studio Installation Packages *] Detect=HKCU\Software\Microsoft\VisualStudio FileKey1=%ProgramData%\Microsoft\VisualStudio\Packages|*|RECURSE ExcludeKey1=PATH|%ProgramData%\Microsoft\VisualStudio\Packages\_Instances\|* Tags=ccapps ID=Microsoft Visual Studio Installation Packages * Author=Winapp2.ini Project [Microsoft VS Code *] DetectFile=%AppData%\Code FileKey1=%AppData%\Code|cookies* FileKey2=%AppData%\Code\GPUCache|* FileKey3=%AppData%\Code\Local Storage|* Tags=ccapps ID=Microsoft VS Code * Author=Winapp2.ini Project [Microsoft Web Platform Installer *] DetectFile=%LocalAppData%\Microsoft\Web Platform Installer\logs\webpi FileKey1=%LocalAppData%\Microsoft\Web Platform Installer\logs\webpi|*.txt Tags=ccwindows ID=Microsoft Web Platform Installer * Author=Winapp2.ini Project [Microsoft Whiteboard *] DetectFile=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey4=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey6=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey9=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey10=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey11=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey12=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey14=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey15=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey18=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey19=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey20=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey21=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey24=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey25=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey26=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey27=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey28=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey29=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey30=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey32=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey33=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey34=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey35=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey36=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey38=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey39=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey40=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey41=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey42=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey44=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey45=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey46=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey47=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey48=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey49=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey50=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey51=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey52=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey53=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey54=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey55=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey56=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey57=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey58=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey59=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey60=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey61=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey62=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Stability|*|REMOVESELF FileKey63=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey64=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey65=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey66=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey67=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalState\SURFACE*|*|REMOVESELF FileKey68=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\Settings|*.log* FileKey69=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey70=%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\TempState|*|REMOVESELF ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.Whiteboard_8wekyb3d8bbwe\LocalCache\|.msalcache.bin3 Tags=ccmedia ID=Microsoft Whiteboard * Author=Winapp2.ini Project [Microsoft Works Suite 2006 *] Detect=HKCU\Software\Microsoft\Works\8.0 RegKey1=HKCU\Software\Microsoft\Works\8.0\Recent File List Tags=ccapps ID=Microsoft Works Suite 2006 * Author=Winapp2.ini Project [Microsoft Xbox *] DetectFile1=%LocalAppData%\Packages\Microsoft.GamingApp_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.GamingServices_8wekyb3d8bbwe DetectFile3=%LocalAppData%\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe DetectFile4=%LocalAppData%\Packages\Microsoft.XboxDevices_8wekyb3d8bbwe DetectFile5=%LocalAppData%\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe DetectFile6=%LocalAppData%\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe DetectFile7=%LocalAppData%\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe FileKey1=%LocalAppData%\EAConnect_microsoft\Cache|*|RECURSE FileKey2=%LocalAppData%\EAConnect_microsoft\QtWebEngine\Default|Network Persistent State;Visited Links FileKey3=%LocalAppData%\EAConnect_microsoft\QtWebEngine\Default\GPUCache|* FileKey4=%LocalAppData%\EAConnect_microsoft\QtWebEngine\Default\Platform Notifications|* FileKey5=%LocalAppData%\EAConnect_microsoft\QtWebEngine\Default\Session Storage|*.old;LOG FileKey6=%LocalAppData%\Packages\Microsoft.Gaming*\AC|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.Gaming*\LocalCache|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.Gaming*\LocalState|*.etl;*log*;asyncache.db|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.Gaming*\Settings|*.log* FileKey10=%LocalAppData%\Packages\Microsoft.Gaming*\TempState|*|RECURSE FileKey11=%LocalAppData%\Packages\Microsoft.Xbox*\AC|*|RECURSE FileKey12=%LocalAppData%\Packages\Microsoft.Xbox*\LocalCache|*|RECURSE FileKey13=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState|*.etl;*.log*|RECURSE FileKey14=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState|*gamestreaming_log*.txt;Async*.db FileKey15=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState\*Cache|*|RECURSE FileKey16=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState\DiagOutputDir|*.txt FileKey17=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState\navigationHistory|*|RECURSE FileKey18=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState\PlayReady|*|RECURSE FileKey19=%LocalAppData%\Packages\Microsoft.Xbox*\LocalState\SmartGlass|*.log FileKey20=%LocalAppData%\Packages\Microsoft.Xbox*\Settings|*.log* FileKey21=%LocalAppData%\Packages\Microsoft.Xbox*\TempState|*|RECURSE FileKey22=%ProgramData%\Microsoft\Windows\WindowsApps\Microsoft.GamingServices*\Cache|*|REMOVESELF FileKey23=%WinDir%\System32\config\systemprofile\AppData\Local\Packages\Microsoft.GamingServices_8wekyb3d8bbwe\LocalState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.XboxLIVEGames_8wekyb3d8bbwe\SearchHistory Tags=ccapps ID=Microsoft Xbox * Author=Winapp2.ini Project [Microsoft XML Notepad *] Detect=HKCU\Software\Microsoft\XML Notepad RegKey1=HKCU\Software\Microsoft\XML Notepad\Recent File List Tags=ccutil ID=Microsoft XML Notepad * Author=Winapp2.ini Project [Microsoft XNA Game Studio *] DetectFile=%ProgramFiles%\Microsoft XNA\XNA Game Studio FileKey1=%ProgramFiles%\Microsoft XNA\XNA Game Studio\*\Redist|*|REMOVESELF Tags=ccapps ID=Microsoft XNA Game Studio * Author=Winapp2.ini Project [Microsys Backgammon Classic *] DetectFile=%UserProfile%\Documents\Microsys\Backgammon Classic* FileKey1=%UserProfile%\Documents\Microsys\Backgammon Classic*|bc.gam;history.csv;history.txt;last*.gam;users.txt FileKey2=%UserProfile%\Documents\Microsys\Backgammon Classic*\Games|bcp.gam;bcp.txt;last*.gam;last*.txt Tags=ccapps ID=Microsys Backgammon Classic * Author=Winapp2.ini Project [Microsys Gammonet *] DetectFile=%UserProfile%\Documents\Microsys\Gammonet FileKey1=%UserProfile%\Documents\Microsys\Gammonet|users.csv Tags=ccapps ID=Microsys Gammonet * Author=Winapp2.ini Project [Midori Autocomplete History *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|formhistory* Tags=ccapps ID=Midori Autocomplete History * Author=Winapp2.ini Project [Midori Autofill Data *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|autofill-profiles.json Tags=ccapps ID=Midori Autofill Data * Author=Winapp2.ini Project [Midori Bookmark Backups *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Midori Bookmark Backups * Author=Winapp2.ini Project [Midori Bookmark Favicons *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|favicons* Tags=ccapps ID=Midori Bookmark Favicons * Author=Winapp2.ini Project [Midori Caches *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Midori\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Midori\Profiles\*\notificationstore|* FileKey4=%AppData%\Midori\Profiles\*\security_state|* FileKey5=%AppData%\Midori\Profiles\*\shader-cache|* FileKey6=%AppData%\Midori\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Midori\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Midori\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Midori\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Midori Caches * Author=Winapp2.ini Project [Midori Privacy Sandbox *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Midori Privacy Sandbox * Author=Winapp2.ini Project [Midori Saved Usernames & Passwords *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|key4.db;logins.json Tags=ccapps ID=Midori Saved Usernames & Passwords * Author=Winapp2.ini Project [Midori Synced Tabs *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|synced-tabs.db* Tags=ccapps ID=Midori Synced Tabs * Author=Winapp2.ini Project [Midori Telemetry *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori|*.log|RECURSE FileKey2=%AppData%\Midori\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Midori\Profiles\*\crashes|* FileKey4=%AppData%\Midori\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Midori\Profiles\*\minidumps|* FileKey6=%AppData%\Midori\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Midori\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Midori\Profiles\*\weave\logs|* Tags=ccapps ID=Midori Telemetry * Author=Winapp2.ini Project [Midori Web Browsing Cookies *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|cookies* Tags=ccapps ID=Midori Web Browsing Cookies * Author=Winapp2.ini Project [Midori Web Browsing Session *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|session*.json* Tags=ccapps ID=Midori Web Browsing Session * Author=Winapp2.ini Project [Midori Web Browsing Session Backups *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Midori Web Browsing Session Backups * Author=Winapp2.ini Project [Midori Web Storage *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Midori Web Storage * Author=Winapp2.ini Project [Midori Website Permissions *] DetectFile=%AppData%\Midori\Profiles FileKey1=%AppData%\Midori\Profiles\*|permissions.sqlite Tags=ccapps ID=Midori Website Permissions * Author=Winapp2.ini Project [MiKTeX *] Detect=HKCU\Software\MiKTeX.org\MiKTeX FileKey1=%LocalAppData%\MiKTeX\*\miktex\log|*.log FileKey2=%ProgramData%\MiKTeX\*\miktex\log|*.log FileKey3=%ProgramFiles%\MiKTeX\miktex\config|*.log Tags=ccapps ID=MiKTeX * Author=Winapp2.ini Project [MindGems Audio Dedupe *] Detect=HKCU\Software\MindGems\Audio Dedupe FileKey1=%LocalAppData%\MindGems\Audio Dedupe|*.dat;*.idx RegKey1=HKCU\Software\MindGems\Audio Dedupe|MRU1 RegKey2=HKCU\Software\MindGems\Audio Dedupe|MRU2 RegKey3=HKCU\Software\MindGems\Audio Dedupe|MRU3 RegKey4=HKCU\Software\MindGems\Audio Dedupe|MRU4 RegKey5=HKCU\Software\MindGems\Audio Dedupe|MRU5 RegKey6=HKCU\Software\MindGems\Audio Dedupe\Settings|ExcludeExt RegKey7=HKCU\Software\MindGems\Audio Dedupe\Settings|ExcludeFileNameWords RegKey8=HKCU\Software\MindGems\Audio Dedupe\Settings|FiltExcludeExt RegKey9=HKCU\Software\MindGems\Audio Dedupe\Settings|FiltExcludeFileNameWords RegKey10=HKCU\Software\MindGems\Audio Dedupe\Settings|FiltExcludeFolderNameWords RegKey11=HKCU\Software\MindGems\Audio Dedupe\Settings|LastFolder RegKey12=HKCU\Software\MindGems\Audio Dedupe\Settings|MoveToFolder RegKey13=HKCU\Software\MindGems\Audio Dedupe\Settings|QuickCheckExt RegKey14=HKCU\Software\MindGems\Audio Dedupe\Settings|QuickCheckFileNameWords Tags=ccmedia ID=MindGems Audio Dedupe * Author=Winapp2.ini Project [MindGems Easy Web Gallery Builder *] Detect=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2 RegKey1=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2|MRU1 RegKey2=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2|MRU2 RegKey3=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2|MRU3 RegKey4=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2|MRU4 RegKey5=HKCU\Software\MindGems\Easy Web Gallery Builder\2.2|MRU5 Tags=ccmedia ID=MindGems Easy Web Gallery Builder * Author=Winapp2.ini Project [MindGems Fast Duplicate File Finder *] Detect=HKCU\Software\MindGems\Fast Duplicate File Finder RegKey1=HKCU\Software\MindGems\Fast Duplicate File Finder|MRU1 RegKey2=HKCU\Software\MindGems\Fast Duplicate File Finder|MRU2 RegKey3=HKCU\Software\MindGems\Fast Duplicate File Finder|MRU3 RegKey4=HKCU\Software\MindGems\Fast Duplicate File Finder|MRU4 RegKey5=HKCU\Software\MindGems\Fast Duplicate File Finder|MRU5 RegKey6=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|ExcludeExt RegKey7=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|ExcludeFileNameWords RegKey8=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|FiltExcludeExt RegKey9=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|FiltExcludeFileNameWords RegKey10=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|FiltExcludeFolderNameWords RegKey11=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|LastFolder RegKey12=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|MoveToFolder RegKey13=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|QuickCheckExt RegKey14=HKCU\Software\MindGems\Fast Duplicate File Finder\Settings|QuickCheckFileNameWords Tags=ccmedia ID=MindGems Fast Duplicate File Finder * Author=Winapp2.ini Project [MindGems Folder Size *] DetectFile=%ProgramFiles%\Folder Size FileKey1=%ProgramData%\MindGems\FolderSize|FolderSizeLog.txt Tags=ccutil ID=MindGems Folder Size * Author=Winapp2.ini Project [MindGems Visual Similarity Duplicate Image Finder *] Detect=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder FileKey1=%LocalAppData%\MindGems\VSDIF|*.dat;*.idx RegKey1=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder|MRU1 RegKey2=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder|MRU2 RegKey3=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder|MRU3 RegKey4=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder|MRU4 RegKey5=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder|MRU5 RegKey6=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|ExcludeExt RegKey7=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|ExcludeFileNameWords RegKey8=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|FiltExcludeExt RegKey9=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|FiltExcludeFileNameWords RegKey10=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|FiltExcludeFolderNameWords RegKey11=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|LastFolder RegKey12=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|MoveToFolder RegKey13=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|QuickCheckExt RegKey14=HKCU\Software\MindGems\Visual Similarity Duplicate Image Finder\Settings|QuickCheckFileNameWords Tags=ccmedia ID=MindGems Visual Similarity Duplicate Image Finder * Author=Winapp2.ini Project [MindManager *] DetectFile=%LocalAppData%\Mindjet\MindManager FileKey1=%LocalAppData%\Mindjet\MindManager\*\Connect\*Cache|*|RECURSE FileKey2=%LocalAppData%\Mindjet\MindManager\*\MindManager Explorer for SharePoint\Logs|* FileKey3=%LocalAppData%\Mindjet\MindManager\*\Temp|*|RECURSE Tags=ccapps ID=MindManager * Author=Winapp2.ini Project [Minecraft *] DetectFile1=%AppData%\.minecraft DetectFile2=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe DetectFile3=%ProgramFiles%\Minecraft DetectFile4=%UserProfile%\curseforge\minecraft\install DetectFile5=%UserProfile%\Twitch\Minecraft FileKey1=%AppData%\.minecraft|*.log*;*.old;*log*.txt;command_history.txt|RECURSE FileKey2=%AppData%\.minecraft\crash-reports|* FileKey3=%AppData%\.minecraft\debug|* FileKey4=%AppData%\.minecraft\logs|*|REMOVESELF FileKey5=%AppData%\.minecraft\stats|*.old FileKey6=%AppData%\.minecraft\webcache2|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\Settings|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey12=%LocalAppData%\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey13=%ProgramFiles%\Minecraft|*.log FileKey14=%UserProfile%\curseforge\minecraft\install|*.log*;*.old;*log*.txt;command_history.txt|RECURSE FileKey15=%UserProfile%\curseforge\minecraft\install\crash-reports|* FileKey16=%UserProfile%\curseforge\minecraft\install\debug|* FileKey17=%UserProfile%\curseforge\minecraft\install\logs|*|REMOVESELF FileKey18=%UserProfile%\curseforge\minecraft\install\stats|*.old FileKey19=%UserProfile%\curseforge\minecraft\install\webcache2|visited* FileKey20=%UserProfile%\curseforge\minecraft\install\webcache2\*cache|*|RECURSE FileKey21=%UserProfile%\curseforge\minecraft\install\webcache2\*Storage|*.old;LOG|RECURSE FileKey22=%UserProfile%\curseforge\minecraft\install\webcache2\blob_storage|*|REMOVESELF FileKey23=%UserProfile%\Twitch\Minecraft\Install|launcher_log.txt FileKey24=%UserProfile%\Twitch\Minecraft\Install\logs|* FileKey25=%UserProfile%\Twitch\Minecraft\Instances\*|*.log FileKey26=%UserProfile%\Twitch\Minecraft\Instances\*\crash-reports|* FileKey27=%UserProfile%\Twitch\Minecraft\Instances\*\logs|* Tags=ccapps ID=Minecraft * Author=Winapp2.ini Project [MiniTool Partition Wizard *] Detect=HKCU\Software\MiniTool Software Limited\MiniTool Partition Wizard FileKey1=%ProgramFiles%\MiniTool Partition Wizard *|log.txt Tags=ccutil ID=MiniTool Partition Wizard * Author=Winapp2.ini Project [MiniTool ShadowMaker *] DetectFile=%ProgramFiles%\MiniTool ShadowMaker FileKey1=%ProgramFiles%\MiniTool ShadowMaker|*log.txt FileKey2=%ProgramFiles%\MiniTool ShadowMaker\dump|*.dmp FileKey3=%ProgramFiles%\MiniTool ShadowMaker\log|* Tags=ccutil ID=MiniTool ShadowMaker * Author=Winapp2.ini Project [Miranda IM *] DetectFile=%ProgramFiles%\Miranda IM FileKey1=%AppData%\Miranda IM\Profiles|*|REMOVESELF Tags=ccinternet ID=Miranda IM * Author=Winapp2.ini Project [Miranda IM Chat Logs *] DetectFile=%ProgramFiles%\Miranda IM FileKey1=%AppData%\Miranda IM\Profiles\*\Logs\Chat|*|REMOVESELF Tags=ccinternet ID=Miranda IM Chat Logs * Author=Winapp2.ini Project [mIRC Chat Logs *] Detect=HKCU\Software\mIRC FileKey1=%AppData%\mIRC\Logs|* FileKey2=%ProgramFiles%\mIRC\logs|* Tags=ccinternet ID=mIRC Chat Logs * Author=Winapp2.ini Project [Mirkes.De Tiny Hexer *] Detect=HKCU\Software\mirkes.de\Tiny Hexer FileKey1=%AppData%\mirkes.de\Tiny Hexer\*|*.bak Tags=ccapps ID=Mirkes.De Tiny Hexer * Author=Winapp2.ini Project [MirrorFolder *] DetectFile=%ProgramData%\Techsoft\MirrorFolder FileKey1=%ProgramData%\Techsoft\MirrorFolder\Log|* Tags=ccutil ID=MirrorFolder * Author=Winapp2.ini Project [Mirrors Edge Catalyst Backup *] Detect=HKLM\Software\EA Games\1026480 FileKey1=%UserProfile%\Documents\Mirrors Edge Catalyst\settings|PROF_SAVE_backup* Tags=ccapps ID=Mirrors Edge Catalyst Backup * Author=Winapp2.ini Project [MiTeC DFM Editor *] Detect=HKCU\Software\MiTeC\DFM Editor RegKey1=HKCU\Software\MiTeC\DFM Editor\5.x\Main\MRUHistory RegKey2=HKCU\Software\MiTeC\DFM Editor\6.x\wnd_dfm_Main\Twnd_dfm_Main.MRUMan Tags=ccapps ID=MiTeC DFM Editor * Author=Winapp2.ini Project [MiTeC HexEditor *] Detect=HKCU\Software\MiTeC\HexEditor RegKey1=HKCU\Software\MiTeC\HexEditor\4.x\wnd_hex_Main|od_InitialDir RegKey2=HKCU\Software\MiTeC\HexEditor\4.x\wnd_hex_Main|sd_InitialDir Tags=ccutil ID=MiTeC HexEditor * Author=Winapp2.ini Project [MiTeC Icon Explorer *] Detect=HKCU\Software\MiTeC\Icon Explorer RegKey1=HKCU\Software\MiTeC\Icon Explorer\4.x\wnd_icoexp_Main|de_Text RegKey2=HKCU\Software\MiTeC\Icon Explorer\4.x\wnd_icoexp_Main|ShellTree_StartInFolder Tags=ccutil ID=MiTeC Icon Explorer * Author=Winapp2.ini Project [MiTeC INI Editor *] Detect=HKCU\Software\MiTeC\INI Editor RegKey1=HKCU\Software\MiTeC\INI Editor\1.0|od_InitialDir Tags=ccutil ID=MiTeC INI Editor * Author=Winapp2.ini Project [MiTeC SQLite Query *] DetectFile=%AppData%\MiTeC\SQLite Query FileKey1=%AppData%\MiTeC\SQLite Query|*|REMOVESELF Tags=ccutil ID=MiTeC SQLite Query * Author=Winapp2.ini Project [MiTeC Structured Storage Viewer *] Detect=HKCU\Software\MiTeC\SSViewer RegKey1=HKCU\Software\MiTeC\SSViewer\3.x\MRU RegKey2=HKCU\Software\MiTeC\SSViewer\3.x\wnd_re_Main\MRUHistory RegKey3=HKCU\Software\MiTeC\SSViewer\4.x\MRU Tags=ccutil ID=MiTeC Structured Storage Viewer * Author=Winapp2.ini Project [MiTeC Windows Registry Analyzer *] Detect=HKCU\Software\MiTeC\WRA RegKey1=HKCU\Software\MiTeC\WRA\1.x\Main\MRUHistory Tags=ccutil ID=MiTeC Windows Registry Analyzer * Author=Winapp2.ini Project [MiTeC Windows Registry File Viewer *] Detect=HKCU\Software\MiTeC\RFV RegKey1=HKCU\Software\MiTeC\RFV\2.x\Recent Files Tags=ccutil ID=MiTeC Windows Registry File Viewer * Author=Winapp2.ini Project [MiTeC Windows Registry Recovery *] Detect=HKCU\Software\MiTeC\WRR RegKey1=HKCU\Software\MiTeC\WRR\1.x\dlg_wrr_Find|eFind_Text RegKey2=HKCU\Software\MiTeC\WRR\1.x\dlg_wrr_Find\eFind_Items RegKey3=HKCU\Software\MiTeC\WRR\1.x\Main\MRUHistory RegKey4=HKCU\Software\MiTeC\WRR\1.x\wnd_wrr_Main\Twnd_wrr_Main.MRUMan RegKey5=HKCU\Software\MiTeC\WRR\3.x\MRU Tags=ccutil ID=MiTeC Windows Registry Recovery * Author=Winapp2.ini Project [MiTeC XMLViewer *] Detect=HKCU\Software\MiTeC\XMLViewer RegKey1=HKCU\Software\MiTeC\XMLViewer\4.x\wnd_xmlv_Main\Twnd_xmlv_Main.MRUManager Tags=ccutil ID=MiTeC XMLViewer * Author=Winapp2.ini Project [Mixed In Key *] DetectFile=%LocalAppData%\Mixed In Key\Mixed In Key FileKey1=%LocalAppData%\Mixed In Key\Mixed In Key\*|*.log FileKey2=%LocalAppData%\Mixed In Key\Mixed In Key\*\AudioAnalysisCache*|* FileKey3=%LocalAppData%\Mixed In Key\Mixed In Key\*\QueryLogs|* FileKey4=%LocalAppData%\Mixed In Key\Mixed In Key\*\Temp|* FileKey5=%LocalAppData%\Mixed In Key\Mixed In Key\*\Updates|update.exe Tags=ccmedia ID=Mixed In Key * Author=Winapp2.ini Project [Mixilab Animotica *] DetectFile=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80 FileKey1=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey3=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\LocalState\AppCenter\Errors|* FileKey4=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\LocalState\Logs|* FileKey5=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\Settings|*.log* FileKey6=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\24711Mixilab.Animotica_c39s816dkej80\TempState|*|REMOVESELF Tags=ccmedia ID=Mixilab Animotica * Author=Winapp2.ini Project [MixMeister *] DetectFile=%ProgramFiles%\MixMeister* FileKey1=%ProgramFiles%\MixMeister*|*.dmp Tags=ccmedia ID=MixMeister * Author=Winapp2.ini Project [Mixxx *] DetectFile=%LocalAppData%\Mixxx FileKey1=%LocalAppData%\Mixxx|*.log* Tags=ccmedia ID=Mixxx * Author=Winapp2.ini Project [MKJogo MKLOL *] DetectFile=%ProgramFiles%\MKJogo\MKLOL FileKey1=%ProgramFiles%\MKJogo\MKLOL|*.log Tags=ccapps ID=MKJogo MKLOL * Author=Winapp2.ini Project [MKS_Vir Skaner Online *] DetectFile=%ProgramFiles%\SkanerOnline FileKey1=%ProgramFiles%\SkanerOnline\Raporty|* FileKey2=%ProgramFiles%\SkanerOnline\tmp|* FileKey3=%SystemDrive%|*.cpp.log Tags=ccutil ID=MKS_Vir Skaner Online * Author=Winapp2.ini Project [MKVToolNix GUI *] DetectFile=%LocalAppData%\bunkus.org\MKVToolNix-Gui FileKey1=%LocalAppData%\bunkus.org\MKVToolNix-Gui\Cache|*|RECURSE Tags=ccmedia ID=MKVToolNix GUI * Author=Winapp2.ini Project [MMOUI Minion *] DetectFile=%AppData%\MMOUI\Minion FileKey1=%AppData%\MMOUI\Minion|log.* Tags=ccapps ID=MMOUI Minion * Author=Winapp2.ini Project [Mobogenie *] DetectFile=%LocalAppData%\Mobogenie FileKey1=%LocalAppData%\Mobogenie|*.log FileKey2=%LocalAppData%\Mobogenie\Version\OldVersion\Mobogenie\log|*.log Tags=ccapps ID=Mobogenie * Author=Winapp2.ini Project [ModelPort Object Importer for ArchiCAD *] DetectFile=%UserProfile%\Documents\ModelPort FileKey1=%UserProfile%\Documents\ModelPort|*.log Tags=ccapps ID=ModelPort Object Importer for ArchiCAD * Author=Winapp2.ini Project [Molotov.tv *] DetectFile=%AppData%\Molotov FileKey1=%AppData%\Molotov|Cookies*;QuotaManager* FileKey2=%AppData%\Molotov\*Cache|* FileKey3=%AppData%\Molotov\databases|* FileKey4=%AppData%\Molotov\IndexedDB|*|RECURSE FileKey5=%LocalAppData%\Molotov|SquirrelSetup.log Tags=ccmedia ID=Molotov.tv * Author=Winapp2.ini Project [MonAlbumPhoto *] DetectFile=%LocalAppData%\MonAlbumPhoto FileKey1=%LocalAppData%\MonAlbumPhoto\Logs|*.log FileKey2=%LocalAppData%\MonAlbumPhoto\non enregistr*|*.log FileKey3=%UserProfile%\Documents\MonAlbumPhoto|*.log|RECURSE Tags=ccmedia ID=MonAlbumPhoto * Author=Winapp2.ini Project [Monkey's Audio *] Detect=HKCU\Software\Monkey's Audio RegKey1=HKCU\Software\Monkey's Audio\Settings|Add Files MRU List RegKey2=HKCU\Software\Monkey's Audio\Settings|Add Folder MRU List RegKey3=HKCU\Software\Monkey's Audio\Settings|Output Location Directory Tags=ccmedia ID=Monkey's Audio * Author=Winapp2.ini Project [MonoSnap *] DetectFile=%LocalAppData%\MonoSnap FileKey1=%LocalAppData%\MonoSnap\lastscreenshot|* FileKey2=%LocalAppData%\MonoSnap\logs|*.xml FileKey3=%LocalAppData%\MonoSnap\recent|* FileKey4=%LocalAppData%\MonoSnap\temp|* Tags=ccmedia ID=MonoSnap * Author=Winapp2.ini Project [Monster Prom *] DetectFile=%UserProfile%\AppData\LocalLow\Beautiful Glitch\Monster Prom FileKey1=%UserProfile%\AppData\LocalLow\Beautiful Glitch\Monster Prom|*txt FileKey2=%UserProfile%\AppData\LocalLow\Beautiful Glitch\Monster Prom\Crashes|* FileKey3=%UserProfile%\AppData\LocalLow\Beautiful Glitch\Monster Prom\Unity|*|REMOVESELF Tags=ccapps ID=Monster Prom * Author=Winapp2.ini Project [Moon Hunters *] Detect=HKCU\Software\Valve\Steam\Apps\320040 FileKey1=%ProgramFiles%\Steam\steamapps\common\Moon Hunters|log*.txt Tags=ccapps ID=Moon Hunters * Author=Winapp2.ini Project [Moonlight Game Streaming *] Detect=HKCU\Software\Moonlight Game Streaming Project\Moonlight DetectFile1=%LocalAppData%\Moonlight Game Streaming Project\Moonlight DetectFile2=%ProgramFiles%\Moonlight Game Streaming FileKey1=%LocalAppData%\Moonlight Game Streaming Project\Moonlight|Moonlight-*.log FileKey2=%LocalAppData%\Moonlight Game Streaming Project\Moonlight\cache|gamecontrollerdb.txt FileKey3=%LocalAppData%\Moonlight Game Streaming Project\Moonlight\cache\boxart\*|* FileKey4=%ProgramFiles%\Moonlight Game Streaming|Moonlight-*.log FileKey5=%ProgramFiles%\Moonlight Game Streaming\boxart\*|* FileKey6=%ProgramFiles%\Moonlight Game Streaming\cache|gamecontrollerdb.txt Tags=ccinternet ID=Moonlight Game Streaming * Author=Winapp2.ini Project [Moonlighter *] DetectFile=%UserProfile%\AppData%\LocalLow\11BitStudios\Moonlighter FileKey1=%UserProfile%\AppData%\LocalLow\11BitStudios\Moonlighter|*.log FileKey2=%UserProfile%\AppData%\LocalLow\11BitStudios\Moonlighter\Unity|*|REMOVESELF Tags=ccapps ID=Moonlighter * Author=Winapp2.ini Project [MoreTerra *] DetectFile=%AppData%\MoreTerra FileKey1=%AppData%\MoreTerra\Logs|*|RECURSE Tags=ccapps ID=MoreTerra * Author=Winapp2.ini Project [Mortal Kombat Arcade Kollection *] Detect=HKCU\Software\Valve\Steam\Apps\205350 FileKey1=%ProgramFiles%\Steam\steamapps\common\Mortal Kombat Arcade Kollection\Engine\EditorResources\FaceFX\Logs|* FileKey2=%ProgramFiles%\Steam\steamapps\common\Mortal Kombat Arcade Kollection\MKHDGame\Logs|* Tags=ccapps ID=Mortal Kombat Arcade Kollection * Author=Winapp2.ini Project [Motherboard Monitor 5 *] Detect=HKCU\Software\Alexander van Kaam\MBM 5 FileKey1=%ProgramFiles%\Motherboard Monitor 5\Log|*|REMOVESELF Tags=ccmedia ID=Motherboard Monitor 5 * Author=Winapp2.ini Project [Motorola Device Manager *] Detect=HKLM\Software\Motorola FileKey1=%AppData%\Motorola\MotoHelper|*.log FileKey2=%ProgramData%\Motorola\SUE|*.log FileKey3=%ProgramData%\Motorola\SUE\Firmwares|* FileKey4=%ProgramFiles%\Motorola|*.log|RECURSE FileKey5=%ProgramFiles%\Motorola Mobility\DeviceSoftwareUpdate|*.log FileKey6=%ProgramFiles%\Motorola Mobility\Motorola Device Manager|*.log Tags=ccutil ID=Motorola Device Manager * Author=Winapp2.ini Project [Mount & Blade *] DetectFile1=%ProgramFiles%\Mount&Blade* DetectFile2=%ProgramFiles%\Napoleonic Wars DetectFile3=%ProgramFiles%\Steam\steamapps\common\Mount&Blade* FileKey1=%ProgramFiles%\Mount&Blade*|rgl_log.txt|RECURSE FileKey2=%ProgramFiles%\Napoleonic Wars|rgl_log.txt|RECURSE FileKey3=%ProgramFiles%\Steam\steamapps\common\Mount&Blade*|rgl_log.txt|RECURSE Tags=ccapps ID=Mount & Blade * Author=Winapp2.ini Project [Mousotron *] DetectFile=%ProgramFiles%\Mousotron FileKey1=%ProgramFiles%\Mousotron|*.log Tags=ccapps ID=Mousotron * Author=Winapp2.ini Project [Movavi *] DetectFile=%AppData%\Movavi* FileKey1=%LocalAppData%\Movavi\Logs|*|RECURSE Tags=ccmedia ID=Movavi * Author=Winapp2.ini Project [Movavi Photo Editor *] DetectFile=%AppData%\Movavi Photo Editor* FileKey1=%LocalAppData%\Movavi\Photo Editor\*\Cache|*|RECURSE Tags=ccinternet ID=Movavi Photo Editor * Author=Winapp2.ini Project [Movavi Screen Recorder *] DetectFile=%AppData%\Movavi Screen Recorder* FileKey1=%LocalAppData%\Movavi Screen Recorder\Cache|*|RECURSE FileKey2=%LocalAppData%\Movavi\Screen Recorder\Cache|*|RECURSE Tags=ccmedia ID=Movavi Screen Recorder * Author=Winapp2.ini Project [Movavi Video Converter *] Detect=HKCU\Software\MOVAVI FileKey1=%LocalAppData%\Movavi\*Video Converter*|Log.txt FileKey2=%LocalAppData%\Movavi\*Video Converter*\Cache|*|RECURSE FileKey3=%LocalAppData%\Movavi\*Video Converter*\TranscoderTemp|*|RECURSE ExcludeKey1=PATH|%LocalAppData%\Movavi\*Video Converter*\Cache\videoconverter*\MSparkle\*\|MovaviVideoConverterSetup*.exe Tags=ccmedia ID=Movavi Video Converter * Author=Winapp2.ini Project [Movavi Video Editor *] DetectFile=%AppData%\Movavi Video Editor* FileKey1=%AppData%\Movavi Video Editor*|debug.log FileKey2=%LocalAppData%\Movavi\SharedData\VideoEditor\waveforms\cache|* FileKey3=%LocalAppData%\Movavi\Video Editor\Cache|*|RECURSE Tags=ccinternet ID=Movavi Video Editor * Author=Winapp2.ini Project [Movavi Video Suite *] DetectFile=%AppData%\Movavi Video Suite* FileKey1=%LocalAppData%\Movavi\Video Suite|Log.txt FileKey2=%LocalAppData%\Movavi\Video Suite\Cache|*|RECURSE FileKey3=%LocalAppData%\Movavi\Video Suite\QtWebEngine\Default\*Cache|* Tags=ccinternet ID=Movavi Video Suite * Author=Winapp2.ini Project [Mozilla Firefox Autocomplete History *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|formhistory* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|formhistory* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Autocomplete History * Author=Winapp2.ini Project [Mozilla Firefox Autofill Data *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|autofill-profiles.json FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|autofill-profiles.json Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Autofill Data * Author=Winapp2.ini Project [Mozilla Firefox Bookmark Backups *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*\bookmarkbackups|* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\bookmarkbackups|* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Bookmark Backups * Author=Winapp2.ini Project [Mozilla Firefox Bookmark Favicons *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|favicons* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|favicons* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Bookmark Favicons * Author=Winapp2.ini Project [Mozilla Firefox Caches *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Mozilla\Firefox\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Mozilla\Firefox\Profiles\*\notificationstore|* FileKey4=%AppData%\Mozilla\Firefox\Profiles\*\security_state|* FileKey5=%AppData%\Mozilla\Firefox\Profiles\*\shader-cache|* FileKey6=%AppData%\Mozilla\Firefox\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Mozilla\Firefox\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Mozilla\Firefox\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Mozilla\Firefox\Profiles\*\thumbnails|*|REMOVESELF FileKey10=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|*.corrupt|RECURSE FileKey11=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey12=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\*cache*|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey14=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\notificationstore|* FileKey15=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\security_state|* FileKey16=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\shader-cache|* FileKey17=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\storage\temporary|*|RECURSE FileKey18=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\thumbnails|*|REMOVESELF Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Caches * Author=Winapp2.ini Project [Mozilla Firefox Privacy Sandbox *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|credentialstate.sqlite FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|credentialstate.sqlite Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Privacy Sandbox * Author=Winapp2.ini Project [Mozilla Firefox Saved Usernames & Passwords *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|key4.db;logins.json FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|key4.db;logins.json Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Saved Usernames & Passwords * Author=Winapp2.ini Project [Mozilla Firefox Synced Tabs *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|synced-tabs.db* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|synced-tabs.db* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Synced Tabs * Author=Winapp2.ini Project [Mozilla Firefox Telemetry *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox|*.log|RECURSE FileKey2=%AppData%\Mozilla\Firefox\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Mozilla\Firefox\Profiles\*\crashes|* FileKey4=%AppData%\Mozilla\Firefox\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Mozilla\Firefox\Profiles\*\minidumps|* FileKey6=%AppData%\Mozilla\Firefox\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Mozilla\Firefox\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Mozilla\Firefox\Profiles\*\weave\logs|* FileKey9=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox|*.log|RECURSE FileKey10=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey11=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\crashes|* FileKey12=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\datareporting|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\minidumps|* FileKey14=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\saved-telemetry-pings|* FileKey15=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\sessionstore-logs|* FileKey16=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\weave\logs|* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Telemetry * Author=Winapp2.ini Project [Mozilla Firefox Web Browsing Cookies *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|cookies* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|cookies* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Web Browsing Cookies * Author=Winapp2.ini Project [Mozilla Firefox Web Browsing Session *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|session*.json* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|session*.json* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Web Browsing Session * Author=Winapp2.ini Project [Mozilla Firefox Web Browsing Session Backups *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*\sessionstore-backups|* FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*\sessionstore-backups|* Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Web Browsing Session Backups * Author=Winapp2.ini Project [Mozilla Firefox Web Storage *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\storage\default\http*|*|REMOVESELF FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\storage\default\http*|*|REMOVESELF Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Web Storage * Author=Winapp2.ini Project [Mozilla Firefox Website Permissions *] DetectFile1=%AppData%\Mozilla\Firefox\Profiles DetectFile2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|permissions.sqlite FileKey2=%LocalAppData%\Packages\Mozilla.Firefox_n80bbvh6b1yt2\LocalCache\Roaming\Mozilla\Firefox\Profiles\*|permissions.sqlite Tags=Mozilla,FireFox,Browser ID=Mozilla Firefox Website Permissions * Author=Winapp2.ini Project [MP3Gain *] Detect=HKCU\Software\VB and VBA Program Settings\MP3GainAnalysis FileKey1=%ProgramFiles%\MP3Gain|*.log Tags=ccmedia ID=MP3Gain * Author=Winapp2.ini Project [MP3Gain StartUp *] Detect=HKCU\Software\VB and VBA Program Settings\MP3GainAnalysis RegKey1=HKCU\Software\VB and VBA Program Settings\MP3GainAnalysis\StartUp|AddFilesPath RegKey2=HKCU\Software\VB and VBA Program Settings\MP3GainAnalysis\StartUp|AddFolderPath Tags=ccmedia ID=MP3Gain StartUp * Author=Winapp2.ini Project [MP3jam *] DetectFile=%AppData%\MP3jam FileKey1=%AppData%\MP3jam|DownloadsHistory.xml Tags=ccmedia ID=MP3jam * Author=Winapp2.ini Project [Mp3Rocket *] DetectFile=%AppData%\Mp3Rocket FileKey1=%AppData%\Mp3Rocket|*.cache Tags=ccmedia ID=Mp3Rocket * Author=Winapp2.ini Project [Mp3tag *] Detect=HKLM\Software\Florian Heidenreich\Mp3tag FileKey1=%AppData%\Mp3tag|Mp3tagError.log Tags=ccapps ID=Mp3tag * Author=Winapp2.ini Project [MPEG Audio Collection *] Detect=HKCU\Software\MPEG Audio Collection RegKey1=HKCU\Software\MPEG Audio Collection|LastNameText1 RegKey2=HKCU\Software\MPEG Audio Collection|LastNameText2 RegKey3=HKCU\Software\MPEG Audio Collection|LastNameText3 RegKey4=HKCU\Software\MPEG Audio Collection|LastNameText4 RegKey5=HKCU\Software\MPEG Audio Collection|LastNameText5 RegKey6=HKCU\Software\MPEG Audio Collection|LastNameText6 Tags=ccmedia ID=MPEG Audio Collection * Author=Winapp2.ini Project [MPK mini Software Manager *] DetectFile=%AppData%\MPK-mini-Software-Manager FileKey1=%AppData%\MPK-mini-Software-Manager|*.old;LOG|RECURSE FileKey2=%AppData%\MPK-mini-Software-Manager\*Cache|*|RECURSE FileKey3=%AppData%\MPK-mini-Software-Manager\*Storage|*|RECURSE FileKey4=%AppData%\MPK-mini-Software-Manager\blob_storage|*|RECURSE FileKey5=%AppData%\MPK-mini-Software-Manager\Logs|* FileKey6=%AppData%\MPK-mini-Software-Manager\MPK mini Software Manager\Logs|* FileKey7=%LocalAppData%\MPK-mini-Software-Manager-Updater|*|RECURSE Tags=ccmedia ID=MPK mini Software Manager * Author=Winapp2.ini Project [MPlayer *] DetectFile=%LocalAppData%\MPlayer FileKey1=%LocalAppData%\MPlayer|*.cache-3 Tags=ccmedia ID=MPlayer * Author=Winapp2.ini Project [mpv *] DetectFile=%LocalAppData%\mpv FileKey1=%LocalAppData%\mpv\cache|* Tags=ccmedia ID=mpv * Author=Winapp2.ini Project [mRemoteNG *] Detect=HKLM\Software\mRemoteNG FileKey1=%AppData%\mRemoteNG|*.log;confCons.xml.*.backup Tags=ccapps ID=mRemoteNG * Author=Winapp2.ini Project [MrSafe *] DetectFile=%ProgramFiles%\MrSafe FileKey1=%ProgramFiles%\MrSafe|ClientLog.db;Supplier.db Tags=ccapps ID=MrSafe * Author=Winapp2.ini Project [MSI Afterburner *] Detect=HKCU\Software\MSI FileKey1=%ProgramFiles%\Geeks3D\MSI Kombustor*\logs|* FileKey2=%ProgramFiles%\MSI Afterburner|HardwareMonitoring.hml Tags=ccutil ID=MSI Afterburner * Author=Winapp2.ini Project [MTA: San Andreas *] Detect=HKLM\Software\Multi Theft Auto: San Andreas All FileKey1=%ProgramData%\MTA San Andreas All\1.*|report.log FileKey2=%ProgramData%\MTA San Andreas All\1.*\temp|*|RECURSE FileKey3=%ProgramData%\MTA San Andreas All\1.*\upcache|*|RECURSE FileKey4=%ProgramData%\MTA San Andreas All\Common\Installer|nsis.log FileKey5=%ProgramFiles%\MTA San Andreas 1.*\mods\deathmatch\resources|*|RECURSE FileKey6=%ProgramFiles%\MTA San Andreas 1.*\MTA|core.dmp;core.log FileKey7=%ProgramFiles%\MTA San Andreas 1.*\MTA\CEF|cefdebug.txt FileKey8=%ProgramFiles%\MTA San Andreas 1.*\MTA\CEF\Cache|*|RECURSE FileKey9=%ProgramFiles%\MTA San Andreas 1.*\MTA\config|servercache.xml FileKey10=%ProgramFiles%\MTA San Andreas 1.*\MTA\dumps|*.dmp|RECURSE FileKey11=%ProgramFiles%\MTA San Andreas 1.*\MTA\logs|*|RECURSE Tags=ccapps ID=MTA: San Andreas * Author=Winapp2.ini Project [MTA: San Andreas Config/Login Data *] Detect=HKLM\Software\Multi Theft Auto: San Andreas All FileKey1=%ProgramFiles%\MTA San Andreas 1.*\mods\deathmatch\priv|*|RECURSE Tags=ccapps ID=MTA: San Andreas Config/Login Data * Author=Winapp2.ini Project [MTA: San Andreas Dedicated Server *] Detect=HKLM\Software\Multi Theft Auto: San Andreas All FileKey1=%ProgramFiles%\MTA San Andreas 1.*\server\mods\deathmatch\logs|*.log FileKey2=%ProgramFiles%\MTA San Andreas 1.*\server\mods\deathmatch\resource-cache|*|RECURSE Tags=ccapps ID=MTA: San Andreas Dedicated Server * Author=Winapp2.ini Project [Mth Degree Samsung TV Discovery Tool *] DetectFile=%LocalAppData%\Packages\MthDegree.SamsungTVConfigurator_eym3e5s6pgfvg FileKey1=%LocalAppData%\Packages\MthDegree.SamsungTVConfigurator_eym3e5s6pgfvg\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\MthDegree.SamsungTVConfigurator_eym3e5s6pgfvg\Settings|*.log* FileKey3=%LocalAppData%\Packages\MthDegree.SamsungTVConfigurator_eym3e5s6pgfvg\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\MthDegree.SamsungTVConfigurator_eym3e5s6pgfvg\TempState|*|REMOVESELF Tags=ccapps ID=Mth Degree Samsung TV Discovery Tool * Author=Winapp2.ini Project [Mullvad Autocomplete History *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|formhistory* Tags=ccapps ID=Mullvad Autocomplete History * Author=Winapp2.ini Project [Mullvad Autofill Data *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|autofill-profiles.json Tags=ccapps ID=Mullvad Autofill Data * Author=Winapp2.ini Project [Mullvad Bookmark Backups *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Mullvad Bookmark Backups * Author=Winapp2.ini Project [Mullvad Bookmark Favicons *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|favicons* Tags=ccapps ID=Mullvad Bookmark Favicons * Author=Winapp2.ini Project [Mullvad Caches *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Mullvad\MullvadBrowser\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Mullvad\MullvadBrowser\Profiles\*\notificationstore|* FileKey4=%AppData%\Mullvad\MullvadBrowser\Profiles\*\security_state|* FileKey5=%AppData%\Mullvad\MullvadBrowser\Profiles\*\shader-cache|* FileKey6=%AppData%\Mullvad\MullvadBrowser\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Mullvad\MullvadBrowser\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Mullvad\MullvadBrowser\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Mullvad\MullvadBrowser\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Mullvad Caches * Author=Winapp2.ini Project [Mullvad Privacy Sandbox *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Mullvad Privacy Sandbox * Author=Winapp2.ini Project [Mullvad Saved Usernames & Passwords *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|key4.db;logins.json Tags=ccapps ID=Mullvad Saved Usernames & Passwords * Author=Winapp2.ini Project [Mullvad Synced Tabs *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|synced-tabs.db* Tags=ccapps ID=Mullvad Synced Tabs * Author=Winapp2.ini Project [Mullvad Telemetry *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser|*.log|RECURSE FileKey2=%AppData%\Mullvad\MullvadBrowser\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Mullvad\MullvadBrowser\Profiles\*\crashes|* FileKey4=%AppData%\Mullvad\MullvadBrowser\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Mullvad\MullvadBrowser\Profiles\*\minidumps|* FileKey6=%AppData%\Mullvad\MullvadBrowser\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Mullvad\MullvadBrowser\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Mullvad\MullvadBrowser\Profiles\*\weave\logs|* Tags=ccapps ID=Mullvad Telemetry * Author=Winapp2.ini Project [Mullvad VPN *] Detect=HKLM\Software\Mullvad VPN FileKey1=%LocalAppData%\Mullvad VPN|Network Persistent State FileKey2=%LocalAppData%\Mullvad VPN\*Cache|*|RECURSE FileKey3=%LocalAppData%\Mullvad VPN\Local Storage|*|RECURSE FileKey4=%LocalAppData%\Mullvad VPN\logs|* FileKey5=%LocalAppData%\Mullvad VPN\Session Storage|* FileKey6=%ProgramData%\Mullvad VPN|*.log FileKey7=%ProgramData%\Mullvad VPN\cache|* FileKey8=%WinDir%\System32\config\systemprofile\AppData\Local\Mullvad VPN|account-history.json Tags=ccinternet ID=Mullvad VPN * Author=Winapp2.ini Project [Mullvad Web Browsing Cookies *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|cookies* Tags=ccapps ID=Mullvad Web Browsing Cookies * Author=Winapp2.ini Project [Mullvad Web Browsing Session *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|session*.json* Tags=ccapps ID=Mullvad Web Browsing Session * Author=Winapp2.ini Project [Mullvad Web Browsing Session Backups *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Mullvad Web Browsing Session Backups * Author=Winapp2.ini Project [Mullvad Web Storage *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Mullvad Web Storage * Author=Winapp2.ini Project [Mullvad Website Permissions *] DetectFile=%AppData%\Mullvad\MullvadBrowser\Profiles FileKey1=%AppData%\Mullvad\MullvadBrowser\Profiles\*|permissions.sqlite Tags=ccapps ID=Mullvad Website Permissions * Author=Winapp2.ini Project [Multi-Edit 2008 *] Detect=HKCU\Software\Multi Edit Software\Multi-Edit\11.0 FileKey1=%AppData%\Multi Edit Software|*.log|RECURSE FileKey2=%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\Tmp|*.TMP ExcludeKey1=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|EVOLVE.LOG ExcludeKey2=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|FILEPANE.LOG ExcludeKey3=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|INSTALL.LOG ExcludeKey4=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|POLYSTYLE.LOG ExcludeKey5=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|TMPLPANE.LOG ExcludeKey6=FILE|%AppData%\Multi Edit Software\Multi-Edit\11\Config.04\|WINLIST.LOG Tags=ccutil ID=Multi-Edit 2008 * Author=Winapp2.ini Project [Multi Commander *] Detect=HKCU\Software\MultiCommander FileKey1=%AppData%\MultiCommander\Logs|*.log FileKey2=%ProgramFiles%\MultiCommander*|*Log.txt Tags=ccutil ID=Multi Commander * Author=Winapp2.ini Project [Multi Password Recovery *] Detect=HKLM\System\CurrentControlSet\enum\root\legacy_block_reader RegKey1=HKLM\Software\Classes\.mpf RegKey2=HKLM\Software\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF} RegKey3=HKLM\Software\Classes\MPR.DocHostUIHandler RegKey4=HKLM\System\CurrentControlSet\enum\root\legacy_block_reader RegKey5=HKLM\System\CurrentControlSet\Services\block_reader Tags=ccapps ID=Multi Password Recovery * Author=Winapp2.ini Project [MultiHasher *] Detect=HKLM\Software\abelhadigital.com\MultiHasher FileKey1=%ProgramFiles%\MultiHasher|*.txt;*.zip|RECURSE Tags=ccutil ID=MultiHasher * Author=Winapp2.ini Project [MultiView Inpaint *] Detect=HKCU\Software\Teorex\MultiViewInpaint RegKey1=HKCU\Software\Teorex\MultiViewInpaint\Recent File List RegKey2=HKCU\Software\Teorex\MultiViewInpaint\RecentFileList Tags=ccapps ID=MultiView Inpaint * Author=Winapp2.ini Project [Mumble *] Detect=HKCU\Software\Mumble FileKey1=%AppData%\Mumble|console.txt Tags=ccinternet ID=Mumble * Author=Winapp2.ini Project [Murder, She Wrote *] DetectFile=%AppData%\MysteryStudio\MSW FileKey1=%AppData%\MysteryStudio\MFW|*.log Tags=ccapps ID=Murder, She Wrote * Author=Winapp2.ini Project [Muse Group Muse Hub *] DetectFile=%LocalAppData%\Muse Hub FileKey1=%LocalAppData%\Muse Hub|.*cache FileKey2=%LocalAppData%\Muse Hub\Images|* FileKey3=%LocalAppData%\Muse Hub\Logs|* FileKey4=%LocalAppData%\Muse Hub\Sentry|*|RECURSE FileKey5=%ProgramData%\MuseAuthService\Logs|*|RECURSE Tags=ccapps ID=Muse Group Muse Hub * Author=Winapp2.ini Project [MuseScore *] DetectFile=%LocalAppData%\MusE\MuseScore FileKey1=%LocalAppData%\MusE\MuseScore|cookies.txt Tags=ccmedia ID=MuseScore * Author=Winapp2.ini Project [MusicBee *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MusicBee FileKey1=%AppData%\MusicBee|*.dat FileKey2=%AppData%\MusicBee\InternalCache|*|REMOVESELF Tags=ccmedia ID=MusicBee * Author=Winapp2.ini Project [My Family Tree *] DetectFile=%LocalAppData%\My Family Tree FileKey1=%LocalAppData%\My Family Tree\MapCache|*|RECURSE FileKey2=%LocalAppData%\My Family Tree\Temp|*|RECURSE Tags=ccapps ID=My Family Tree * Author=Winapp2.ini Project [My Horse and Me *] Detect=HKLM\Software\My Horse and Me 2 FileKey1=%ProgramFiles%\Atari\Mein Pferd und ich*\System|*.log;*log.txt|RECURSE FileKey2=%ProgramFiles%\Atari\My Horse and Me|*.log;*log.txt|RECURSE FileKey3=%ProgramFiles%\Atari\W!Games\My Horse and Me|*.log;*log.txt|RECURSE Tags=ccapps ID=My Horse and Me * Author=Winapp2.ini Project [My Movies Collection *] DetectFile=%ProgramData%\My Movies FileKey1=%ProgramData%\My Movies|*log.txt;vc*redist*.* FileKey2=%ProgramData%\My Movies\File Storage\Temp|*|RECURSE FileKey3=%ProgramData%\My Movies\Temp|*|RECURSE Tags=ccmedia ID=My Movies Collection * Author=Winapp2.ini Project [My Riding Stables *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyRidingStables FileKey1=%ProgramFiles%\My Riding Stables*|*.txt;*.url Tags=ccapps ID=My Riding Stables * Author=Winapp2.ini Project [My Singing Monsters *] DetectFile=%ProgramFiles%\My Singing Monsters FileKey1=%ProgramFiles%\My Singing Monsters|*.log;*.txt;dotnetfx35setup.exe;vc*redist*.exe|RECURSE Tags=ccapps ID=My Singing Monsters * Author=Winapp2.ini Project [My ViewPad *] DetectFile=%ProgramFiles%\My ViewPad FileKey1=%ProgramFiles%\My ViewPad|ICP_MyViewPad.ini Tags=ccmedia ID=My ViewPad * Author=Winapp2.ini Project [MyCraft *] DetectFile=%UserProfile%\Desktop\MyCraft FileKey1=%UserProfile%\Desktop\MyCraft|MyCraft Log.* Tags=ccapps ID=MyCraft * Author=Winapp2.ini Project [MyDefrag *] Detect=HKCU\Software\MyDefrag FileKey1=%ProgramFiles%\MyDefrag *|*.log FileKey2=%ProgramFiles%\MyDefrag *\LOGs|* Tags=ccapps ID=MyDefrag * Author=Winapp2.ini Project [MyLanViewer *] DetectFile=%ProgramFiles%\MyLanViewer FileKey1=%LocalAppData%\MyLanViewer\Config|FriendlyNamesByMac.dat FileKey2=%LocalAppData%\MyLanViewer\Data\History|history_auto.dat FileKey3=%LocalAppData%\MyLanViewer\Data\Scanner|scanner_auto.dat FileKey4=%LocalAppData%\MyLanViewer\Data\SubnetMonitor|devices_auto.dat FileKey5=%LocalAppData%\MyLanViewer\Logs|*|RECURSE FileKey6=%ProgramFiles%\MyLanViewer\Data\History|history_auto.dat FileKey7=%ProgramFiles%\MyLanViewer\Data\Scanner|scanner_auto.dat FileKey8=%ProgramFiles%\MyLanViewer\Data\SubnetMonitor|devices_auto.dat FileKey9=%ProgramFiles%\MyLanViewer\Logs|*|RECURSE Tags=ccinternet ID=MyLanViewer * Author=Winapp2.ini Project [MyNextbase Player *] DetectFile=%AppData%\MyNextbase Player FileKey1=%AppData%\MyNextbase Player|*-journal;*.old;LOG;QuotaManager|RECURSE FileKey2=%AppData%\MyNextbase Player\*Cache|*|RECURSE FileKey3=%AppData%\MyNextbase Player\Logs|* Tags=ccmedia ID=MyNextbase Player * Author=Winapp2.ini Project [Mypal Autocomplete History *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|formhistory* Tags=ccapps ID=Mypal Autocomplete History * Author=Winapp2.ini Project [Mypal Autofill Data *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|autofill-profiles.json Tags=ccapps ID=Mypal Autofill Data * Author=Winapp2.ini Project [Mypal Bookmark Backups *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Mypal Bookmark Backups * Author=Winapp2.ini Project [Mypal Bookmark Favicons *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|favicons* Tags=ccapps ID=Mypal Bookmark Favicons * Author=Winapp2.ini Project [Mypal Caches *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Mypal68\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Mypal68\Profiles\*\notificationstore|* FileKey4=%AppData%\Mypal68\Profiles\*\security_state|* FileKey5=%AppData%\Mypal68\Profiles\*\shader-cache|* FileKey6=%AppData%\Mypal68\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Mypal68\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Mypal68\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Mypal68\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Mypal Caches * Author=Winapp2.ini Project [Mypal Privacy Sandbox *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Mypal Privacy Sandbox * Author=Winapp2.ini Project [Mypal Saved Usernames & Passwords *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|key4.db;logins.json Tags=ccapps ID=Mypal Saved Usernames & Passwords * Author=Winapp2.ini Project [Mypal Synced Tabs *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|synced-tabs.db* Tags=ccapps ID=Mypal Synced Tabs * Author=Winapp2.ini Project [Mypal Telemetry *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68|*.log|RECURSE FileKey2=%AppData%\Mypal68\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Mypal68\Profiles\*\crashes|* FileKey4=%AppData%\Mypal68\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Mypal68\Profiles\*\minidumps|* FileKey6=%AppData%\Mypal68\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Mypal68\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Mypal68\Profiles\*\weave\logs|* Tags=ccapps ID=Mypal Telemetry * Author=Winapp2.ini Project [Mypal Web Browsing Cookies *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|cookies* Tags=ccapps ID=Mypal Web Browsing Cookies * Author=Winapp2.ini Project [Mypal Web Browsing Session *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|session*.json* Tags=ccapps ID=Mypal Web Browsing Session * Author=Winapp2.ini Project [Mypal Web Browsing Session Backups *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Mypal Web Browsing Session Backups * Author=Winapp2.ini Project [Mypal Web Storage *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Mypal Web Storage * Author=Winapp2.ini Project [Mypal Website Permissions *] DetectFile=%AppData%\Mypal68\Profiles FileKey1=%AppData%\Mypal68\Profiles\*|permissions.sqlite Tags=ccapps ID=Mypal Website Permissions * Author=Winapp2.ini Project [MyPC Backup *] DetectFile=%ProgramFiles%\MyPC Backup FileKey1=%ProgramFiles%\MyPC Backup\log|* Tags=ccinternet ID=MyPC Backup * Author=Winapp2.ini Project [MyPhoneExplorer *] Detect=HKCU\Software\MyPhoneExplorer FileKey1=%AppData%\MyPhoneExplorer|Debug.txt Tags=ccutil ID=MyPhoneExplorer * Author=Winapp2.ini Project [MySMS *] Detect=HKCU\Software\sms.at\mysms FileKey1=%LocalAppData%\sms.at\mysms\LocalStorage|* RegKey1=HKCU\Software\sms.at\mysms\cookies Tags=ccinternet ID=MySMS * Author=Winapp2.ini Project [MySQL Workbench *] DetectFile=%AppData%\MySQL\Workbench FileKey1=%AppData%\MySQL\Workbench\cache|* FileKey2=%AppData%\MySQL\Workbench\log|*.log FileKey3=%AppData%\MySQL\Workbench\sql_history|* Tags=ccapps ID=MySQL Workbench * Author=Winapp2.ini Project [Myst *] DetectFile=%LocalAppData%\Myst FileKey1=%LocalAppData%\Myst\Saved\Logs|* Tags=ccapps ID=Myst * Author=Winapp2.ini Project [MyToolkit *] Detect=HKCU\Software\FutureFog\MyToolkit\Options RegKey1=HKCU\Software\FutureFog\MyToolkit\Options|LastUsedFolder Tags=ccutil ID=MyToolkit * Author=Winapp2.ini Project [MyWinLocker *] DetectFile=%ProgramFiles%\EgisTec\MyWinLocker* FileKey1=%LocalAppData%|MyWinLockerInstaller.* FileKey2=%ProgramFiles%\EgisTec\MyWinLocker*\log|* Tags=ccutil ID=MyWinLocker * Author=Winapp2.ini Project [Nahimic Companion *] DetectFile=%LocalAppData%\NhNotifSys\nahimic FileKey1=%LocalAppData%\NhNotifSys\shared|notif_history Tags=ccmedia ID=Nahimic Companion * Author=Winapp2.ini Project [Nancy Drew: The Secret of Shadow Ranch *] DetectFile=%ProgramFiles%\Nancy Drew* FileKey1=%ProgramFiles%\Nancy Drew*|*.html;dxwebsetup.exe Tags=ccapps ID=Nancy Drew: The Secret of Shadow Ranch * Author=Winapp2.ini Project [Nanjing Swansoft SSCNC Simulator *] DetectFile=%ProgramFiles%\Nanjing Swansoft\SSCNC FileKey1=%ProgramFiles%\Nanjing Swansoft\SSCNC|*.log|RECURSE Tags=ccapps ID=Nanjing Swansoft SSCNC Simulator * Author=Winapp2.ini Project [Napoleon *] DetectFile=%AppData%\The Creative Assembly\Napoleon FileKey1=%AppData%\The Creative Assembly\Napoleon\*_cache|* FileKey2=%AppData%\The Creative Assembly\Napoleon\Logs|* Tags=ccapps ID=Napoleon * Author=Winapp2.ini Project [Native Instruments Software *] DetectFile1=%LocalAppData%\Native Instruments DetectFile2=%UserProfile%\Documents\Native Instruments FileKey1=%LocalAppData%\Cache\Native Instruments\Native Access|*.log FileKey2=%LocalAppData%\Cache\Native Instruments\Native Access\Cache|*|RECURSE FileKey3=%LocalAppData%\Native Instruments\Guitar Rig*\Temp|* FileKey4=%LocalAppData%\Native Instruments\Kontakt*\Kconvert Logs|* FileKey5=%LocalAppData%\Native Instruments\Kontakt*\Kconvert Temp|* FileKey6=%LocalAppData%\Native Instruments\Kontakt*\LibrariesCache|*.cache FileKey7=%LocalAppData%\Native Instruments\Native Access*\Cache|*|RECURSE FileKey8=%LocalAppData%\Native Instruments\Reaktor*\Cache|* FileKey9=%UserProfile%\Documents\Native Instruments\*\CrashLogs|* FileKey10=%UserProfile%\Documents\Native Instruments\Traktor*|*.log FileKey11=%UserProfile%\Documents\Native Instruments\Traktor*\History|* FileKey12=%UserProfile%\Documents\Native Instruments\Traktor*\Logs|* Tags=ccmedia ID=Native Instruments Software * Author=Winapp2.ini Project [Natural Selection 2 *] Detect=HKCU\Software\Valve\Steam\Apps\4920 DetectFile=%ProgramFiles%\Steam\steamapps\common\Natural Selection 2 FileKey1=%AppData%\Natural Selection 2|log.txt FileKey2=%AppData%\Natural Selection 2\cache|*|RECURSE Tags=ccapps ID=Natural Selection 2 * Author=Winapp2.ini Project [NaturalReader Free 12 *] Detect=HKLM\Software\Naturalreaderfree FileKey1=%ProgramFiles%\Naturalsoft\Free12\log|* FileKey2=%UserProfile%\Documents\Naturalsoft|*.msi;nrtemp.txt|RECURSE FileKey3=%UserProfile%\Documents\Naturalsoft\log|*|RECURSE Tags=ccapps ID=NaturalReader Free 12 * Author=Winapp2.ini Project [NAVER Whale Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|*Web Data FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=NAVER Whale Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [NAVER Whale Autoplay Preferences *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=NAVER Whale Autoplay Preferences * Author=Winapp2.ini Project [NAVER Whale Bookmark Backups *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|Bookmarks.bak Tags=ccapps ID=NAVER Whale Bookmark Backups * Author=Winapp2.ini Project [NAVER Whale Bookmark Favicons *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|favicons* Tags=ccapps ID=NAVER Whale Bookmark Favicons * Author=Winapp2.ini Project [NAVER Whale Caches *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Naver\Naver Whale\User Data|Module Info Cache FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Naver\Naver Whale\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Naver\Naver Whale\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Naver\Naver Whale\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Naver\Naver Whale\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Naver\Naver Whale\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Naver\Naver Whale\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Naver\Naver Whale\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Naver\Naver Whale\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Naver\Naver Whale\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Naver\Naver Whale\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Naver\Naver Whale\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Naver\Naver Whale\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Naver\Naver Whale\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Naver\Naver Whale\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Naver\Naver Whale\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=NAVER Whale Caches * Author=Winapp2.ini Project [NAVER Whale Default App Handlers *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|PreferredApps Tags=ccapps ID=NAVER Whale Default App Handlers * Author=Winapp2.ini Project [NAVER Whale Download History *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=NAVER Whale Download History * Author=Winapp2.ini Project [NAVER Whale DRM Data *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=NAVER Whale DRM Data * Author=Winapp2.ini Project [NAVER Whale Extension Cookies *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|Extension Cookies Tags=ccapps ID=NAVER Whale Extension Cookies * Author=Winapp2.ini Project [NAVER Whale Pinned Tabs *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data RegKey1=HKCU\Software\Naver\Naver Whale\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=NAVER Whale Pinned Tabs * Author=Winapp2.ini Project [NAVER Whale Privacy Sandbox *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data|*first_party_sets* FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Naver\Naver Whale\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Naver\Naver Whale\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Naver\Naver Whale\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Naver\Naver Whale\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=NAVER Whale Privacy Sandbox * Author=Winapp2.ini Project [NAVER Whale Progressive Web Apps *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=NAVER Whale Progressive Web Apps * Author=Winapp2.ini Project [NAVER Whale Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|Login Data* Tags=ccapps ID=NAVER Whale Saved Usernames & Passwords * Author=Winapp2.ini Project [NAVER Whale Security & Threat Detection *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data|Safe Browsing Prefix Set FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*|DIPS* FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\*\ClientCertificates|*|REMOVESELF FileKey4=%LocalAppData%\Naver\Naver Whale\User Data\*\Network|TransportSecurity* FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey6=%LocalAppData%\Naver\Naver Whale\User Data\CertificateRevocation|*|REMOVESELF FileKey7=%LocalAppData%\Naver\Naver Whale\User Data\Crowd Deny|*|REMOVESELF FileKey8=%LocalAppData%\Naver\Naver Whale\User Data\PKIMetadata|*|REMOVESELF FileKey9=%LocalAppData%\Naver\Naver Whale\User Data\Safe Browsing|*|REMOVESELF FileKey10=%LocalAppData%\Naver\Naver Whale\User Data\SafetyTips|*|REMOVESELF FileKey11=%LocalAppData%\Naver\Naver Whale\User Data\SSLErrorAssistant|*|REMOVESELF FileKey12=%LocalAppData%\Naver\Naver Whale\User Data\Subresource Filter|*|REMOVESELF FileKey13=%LocalAppData%\Naver\Naver Whale\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=NAVER Whale Security & Threat Detection * Author=Winapp2.ini Project [NAVER Whale Shopping Insights *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Naver\Naver Whale\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=NAVER Whale Shopping Insights * Author=Winapp2.ini Project [NAVER Whale Storage Quota Manager *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|QuotaManager Tags=ccapps ID=NAVER Whale Storage Quota Manager * Author=Winapp2.ini Project [NAVER Whale Sync Data *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=NAVER Whale Sync Data * Author=Winapp2.ini Project [NAVER Whale Telemetry *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\Application|debug.log FileKey2=%LocalAppData%\Naver\Naver Whale\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Naver\Naver Whale\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Naver\Naver Whale\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\*|*.log FileKey6=%LocalAppData%\Naver\Naver Whale\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Naver\Naver Whale\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Naver\Naver Whale\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Naver\Naver Whale\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Naver\Naver Whale\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Naver\Naver Whale\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Naver\Naver Whale\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Naver\Naver Whale\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Naver\Naver Whale\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Naver\Naver Whale\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Naver\Naver Whale\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Naver\Naver Whale\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Naver\Naver Whale\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Naver\Naver Whale\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Naver\Naver Whale\Application|debug.log FileKey21=%ProgramFiles%\Naver\Naver Whale\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Naver\Naver Whale\BlBeacon|failed_count RegKey2=HKCU\Software\Naver\Naver Whale\BlBeacon|state RegKey3=HKCU\Software\Naver\Naver Whale\Installer|LastChecked RegKey4=HKCU\Software\Naver\Naver Whale\StabilityMetrics Tags=ccapps ID=NAVER Whale Telemetry * Author=Winapp2.ini Project [NAVER Whale Web Browsing Cookies *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=NAVER Whale Web Browsing Cookies * Author=Winapp2.ini Project [NAVER Whale Web Browsing History *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=NAVER Whale Web Browsing History * Author=Winapp2.ini Project [NAVER Whale Web Browsing Session *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=NAVER Whale Web Browsing Session * Author=Winapp2.ini Project [NAVER Whale Web Storage *] DetectFile=%LocalAppData%\Naver\Naver Whale\User Data FileKey1=%LocalAppData%\Naver\Naver Whale\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Naver\Naver Whale\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Naver\Naver Whale\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Naver\Naver Whale\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Naver\Naver Whale\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Naver\Naver Whale\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Naver\Naver Whale\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Naver\Naver Whale\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=NAVER Whale Web Storage * Author=Winapp2.ini Project [NCH Software BroadWave Streaming Audio *] DetectFile=%ProgramData%\NCH Software\BroadWave FileKey1=%ProgramData%\NCH Software\BroadWave\Logs|* Tags=ccinternet ID=NCH Software BroadWave Streaming Audio * Author=Winapp2.ini Project [NCH Software Express Burn *] Detect=HKCU\Software\NCH Software\ExpressBurn FileKey1=%ProgramFiles%\NCH Software\ExpressBurn|expressburnsetup_*.exe RegKey1=HKCU\Software\NCH Software\ExpressBurn\Settings|InstallDate RegKey2=HKCU\Software\NCH Software\ExpressBurn\Settings|InstallDateFirst RegKey3=HKCU\Software\NCH Software\ExpressBurn\Settings|LoadFromFolder RegKey4=HKCU\Software\NCH Software\ExpressBurn\Settings|MinutesRunSinceLastInstall RegKey5=HKCU\Software\NCH Software\ExpressBurn\Settings|Runs RegKey6=HKCU\Software\NCH Software\ExpressBurn\Settings|RunsSinceLastInstall RegKey7=HKLM\Software\NCH Software\ExpressBurn\Software|Installer Tags=ccapps ID=NCH Software Express Burn * Author=Winapp2.ini Project [NCH Software Express Points *] Detect=HKCU\Software\NCH Software\ExpressPoints RegKey1=HKCU\Software\NCH Software\ExpressPoints\RecentFileList Tags=ccmedia ID=NCH Software Express Points * Author=Winapp2.ini Project [NCH Software Express Rip CD Ripper *] DetectFile=%ProgramFiles%\NCH Software\ExpressRip FileKey1=%ProgramFiles%\NCH Software\ExpressRip|expressripsetup_*.exe Tags=ccmedia ID=NCH Software Express Rip CD Ripper * Author=Winapp2.ini Project [NCH Software Express Zip *] DetectFile=%AppData%\NCH Software\ExpressZip FileKey1=%AppData%\NCH Software\ExpressZip\Logs|* Tags=ccutil ID=NCH Software Express Zip * Author=Winapp2.ini Project [NCH Software Golden Records *] DetectFile=%AppData%\NCH Software\Golden FileKey1=%AppData%\NCH Software\Golden\Logs|* Tags=ccmedia ID=NCH Software Golden Records * Author=Winapp2.ini Project [NCH Software MixPad Multitrack Mixer *] DetectFile=%ProgramFiles%\NCH Software\MixPad FileKey1=%ProgramFiles%\NCH Software\MixPad|mixpadsetup_*.exe Tags=ccmedia ID=NCH Software MixPad Multitrack Mixer * Author=Winapp2.ini Project [NCH Software PhotoPad Photo Editor *] Detect=HKCU\Software\NCH Software\PhotoPad FileKey1=%ProgramFiles%\NCH Software\PhotoPad|photopadsetup_*.exe RegKey1=HKCU\Software\NCH Software\PhotoPad\RecentFileList RegKey2=HKCU\Software\NCH Software\PhotoPad\Settings|DefaultExt RegKey3=HKCU\Software\NCH Software\PhotoPad\Settings|MinutesRunSinceLastInstall RegKey4=HKCU\Software\NCH Software\PhotoPad\Settings|ProjectFolder RegKey5=HKCU\Software\NCH Software\PhotoPad\UsageStats Tags=ccmedia ID=NCH Software PhotoPad Photo Editor * Author=Winapp2.ini Project [NCH Software PicoPDF PDF Editor *] Detect=HKCU\Software\NCH Software\PicoPDF FileKey1=%ProgramFiles%\NCH Software\PicoPDF|picopdfsetup_*.exe RegKey1=HKCU\Software\NCH Software\PicoPDF\General|lastfile RegKey2=HKCU\Software\NCH Software\PicoPDF\General|lastimagefolder RegKey3=HKCU\Software\NCH Software\PicoPDF\RecentFileList RegKey4=HKLM\Software\NCH Software\PicoPDF\Settings|InstallerName RegKey5=HKLM\Software\NCH Software\PicoPDF\Software|Installer Tags=ccapps ID=NCH Software PicoPDF PDF Editor * Author=Winapp2.ini Project [NCH Software Pixillion Image Converter *] Detect=HKCU\Software\NCH Software\Pixillion FileKey1=%ProgramFiles%\NCH Software\Pixillion|pixsetup_*.exe RegKey1=HKCU\Software\NCH Software\Pixillion\Options|Image path RegKey2=HKCU\Software\NCH Software\Pixillion\Options|Input folder RegKey3=HKCU\Software\NCH Software\Pixillion\Options|Output folder RegKey4=HKCU\Software\NCH Software\Pixillion\Options|Output format Tags=ccmedia ID=NCH Software Pixillion Image Converter * Author=Winapp2.ini Project [NCH Software RecordPad Sound Recorder *] DetectFile1=%ProgramFiles%\NCH Software\Recordpad DetectFile2=%ProgramFiles%\NCH Swift Sound\Recordpad FileKey1=%AppData%\NCH Software\RecordPad\logs|*.txt Tags=ccmedia ID=NCH Software RecordPad Sound Recorder * Author=Winapp2.ini Project [NCH Software Scribe *] Detect=HKCU\Software\NCH Software\Scribe FileKey1=%AppData%\NCH Software\Scribe\Done|* FileKey2=%AppData%\NCH Software\Scribe\Logs|* Tags=ccapps ID=NCH Software Scribe * Author=Winapp2.ini Project [NCH Software SoundTap Streaming Audio Recorder *] DetectFile=%AppData%\NCH Software\SoundTap FileKey1=%AppData%\NCH Software\SoundTap\Logs|* Tags=ccmedia ID=NCH Software SoundTap Streaming Audio Recorder * Author=Winapp2.ini Project [NCH Software Switch Audio-Converter *] Detect=HKCU\Software\NCH Software\Switch FileKey1=%AppData%\NCH Software\Switch\Logs|*|RECURSE Tags=ccmedia ID=NCH Software Switch Audio-Converter * Author=Winapp2.ini Project [NCH Software VideoPad Video Editor *] DetectFile=%ProgramFiles%\NCH Software\VideoPad FileKey1=%ProgramFiles%\NCH Software\VideoPad|videopadsetup_*.exe Tags=ccmedia ID=NCH Software VideoPad Video Editor * Author=Winapp2.ini Project [NCH Software Warp Registry Cleaner *] DetectFile=%ProgramFiles%\NCH Software\Warp FileKey1=%AppData%\NCH Software\Warp\Logs|*.csv Tags=ccutil ID=NCH Software Warp Registry Cleaner * Author=Winapp2.ini Project [NCH Software WavePad Sound Editor *] Detect=HKCU\Software\NCH Software\WavePad DetectFile=%AppData%\NCH Software\WavePad FileKey1=%AppData%\NCH Software\WavePad\Logs|* FileKey2=%AppData%\NCH Software\WavePad\SoundCache|* FileKey3=%ProgramFiles%\NCH Software\WavePad|wavepadsetup_*.exe RegKey1=HKCU\Software\NCH Software\WavePad\Recent Tags=ccmedia ID=NCH Software WavePad Sound Editor * Author=Winapp2.ini Project [NCSOFT Game Launcher *] DetectFile=%AppData%\NCSoft\ncDownloader FileKey1=%AppData%\NCSoft\ncDownloader\config|*.log FileKey2=%AppData%\NCSoft\ncDownloader\config\Log|* FileKey3=%LocalAppData%\NCStreaming\Cef_Cache|*-journal;Visited Links FileKey4=%LocalAppData%\NCStreaming\Cef_Cache\GPUCache|* Tags=ccapps ID=NCSOFT Game Launcher * Author=Winapp2.ini Project [Neon Abyss *] DetectFile=%UserProfile%\AppData\LocalLow\Veewo\Neon Abyss FileKey1=%UserProfile%\AppData\LocalLow\Veewo\Neon Abyss\Unity|*|REMOVESELF Tags=ccapps ID=Neon Abyss * Author=Winapp2.ini Project [Neostar CMS Station Client *] Detect=HKLM\Software\company\Neostar CMS FileKey1=%ProgramFiles%\Neostar CMS Station\Neostar CMS\Neostar CMS Client\log|* FileKey2=%ProgramFiles%\Neostar CMS Station\Neostar CMS\Neostar CMS Client\StreamServer|*.log FileKey3=%ProgramFiles%\Neostar CMS Station\Neostar CMS\Neostar CMS Client\StreamServer\log|* Tags=ccutil ID=Neostar CMS Station Client * Author=Winapp2.ini Project [Nero *] Detect1=HKCU\Software\Ahead Detect2=HKCU\Software\Nero FileKey1=%AppData%\Nero|*.log|RECURSE FileKey2=%AppData%\Nero\Nero ControlCenter\Logs|* FileKey3=%AppData%\Nero\Nero Start\CefCache*|*.ldb;Cookies*;CURRENT;LOCK;LOG;LOG.old;MANIFEST-*;QuotaManager*;Visited Links FileKey4=%AppData%\Nero\Nero Start\CefCache*\*Cache|*|RECURSE FileKey5=%AppData%\Nero\Nero Start\CefCache*\IndexedDB|*|RECURSE FileKey6=%AppData%\Nero\Nero Start\CefCache*\Local Storage\leveldb|* FileKey7=%AppData%\Nero\Nero Start\CefCache*\Session Storage|*|RECURSE FileKey8=%AppData%\Nero\Nero Start\Logs|*|RECURSE FileKey9=%AppData%\Nero\Nero Start\temp|*|RECURSE FileKey10=%AppData%\Nero\Nero*\Nero BackItUp\Cache|* FileKey11=%AppData%\Nero\Nero*\Nero Recode\AnalysisData|*.dat FileKey12=%AppData%\Nero\Nero*\Nero Recode\Thumbs|* FileKey13=%AppData%\Nero\Nero*\Nero Vision|*.bin;*.txt FileKey14=%AppData%\Nero\Nero*\Nero Vision\NVFACache|* FileKey15=%LocalAppData%\Nero\Nero*\Nero Vision\Cache|* FileKey16=%LocalAppData%\Nero\Nero*\Nero Vision\Cache\GraphicObjectCache|* FileKey17=%LocalAppData%\Nero\NeroKnowHowPLUS|*.log FileKey18=%LocalAppData%\Nero\NeroKnowHowPLUS\*|*.cache FileKey19=%LocalAppData%\Nero\Transfer|*.log FileKey20=%ProgramData%\Ahead\Nero BackItUp*\Cache|* FileKey21=%ProgramData%\Nero|*.log|RECURSE FileKey22=%ProgramData%\Nero\Nero BackItUp*\Cache|* FileKey23=%ProgramData%\Nero\NeroUpdate\Logs|* FileKey24=%ProgramData%\Nero\PeakFiles|*.tmp RegKey1=HKCU\Software\ahead\Nero PhotoSnap\Recent File List RegKey2=HKCU\Software\Ahead\NeroSearch\NeroSavedSearches\SavedSearches RegKey3=HKCU\Software\ahead\NeroVision\2.0\RecentFiles RegKey4=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Compilation|VolumeLabelAutoTemplate RegKey5=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Compilation|VolumeLabelISOTemplate RegKey6=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Compilation|VolumelabelJolietTemplate RegKey7=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Compilation|VolumeLabelUDFTemplate RegKey8=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Recent File List RegKey9=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Settings|EncodingLastDir RegKey10=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Settings|NeroCompilation RegKey11=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Settings|TrackSaveDir RegKey12=HKCU\Software\Nero\Nero 11\Nero Burning ROM\Settings|WorkingDir RegKey13=HKCU\Software\Nero\Nero 11\Nero CoverDesigner\Recent File List RegKey14=HKCU\Software\Nero\Nero 11\Nero Express\Compilation|VolumeLabelAutoTemplate RegKey15=HKCU\Software\Nero\Nero 11\Nero Express\Compilation|VolumeLabelISOTemplate RegKey16=HKCU\Software\Nero\Nero 11\Nero Express\Compilation|VolumelabelJolietTemplate RegKey17=HKCU\Software\Nero\Nero 11\Nero Express\Compilation|VolumeLabelUDFTemplate RegKey18=HKCU\Software\Nero\Nero 11\Nero Express\General|OFDLastAudioDir RegKey19=HKCU\Software\Nero\Nero 11\Nero Express\General|OFDLastISODir RegKey20=HKCU\Software\Nero\Nero 11\Nero Express\General|OFDLastVideoDVDKey RegKey21=HKCU\Software\Nero\Nero 11\Nero Express\Recent File List RegKey22=HKCU\Software\Nero\Nero 11\Nero Express\Settings|BootImageDir RegKey23=HKCU\Software\Nero\Nero 11\Nero Express\Settings|BrowserDir RegKey24=HKCU\Software\Nero\Nero 11\Nero Express\Settings|ImageDir RegKey25=HKCU\Software\Nero\Nero 11\Nero Express\Settings|NeroCompilation RegKey26=HKCU\Software\Nero\Nero 11\Nero Express\Settings|TrackSaveDir RegKey27=HKCU\Software\Nero\Nero 11\Nero Express\Settings|WorkingDir RegKey28=HKCU\Software\Nero\Nero 11\Nero Toolkit\DiscSpeed\Capture|Folder RegKey29=HKCU\Software\Nero\Nero 11\Nero Toolkit\DiscSpeed\Save|Folder RegKey30=HKCU\Software\Nero\Nero 11\Nero Vision\Application|AudioDir RegKey31=HKCU\Software\Nero\Nero 11\Nero Vision\Application|CaptureDir RegKey32=HKCU\Software\Nero\Nero 11\Nero Vision\Application|DocDir RegKey33=HKCU\Software\Nero\Nero 11\Nero Vision\Application|ExportAudioDir RegKey34=HKCU\Software\Nero\Nero 11\Nero Vision\Application|ExportVideoDir RegKey35=HKCU\Software\Nero\Nero 11\Nero Vision\Application|ImportVideoDir RegKey36=HKCU\Software\Nero\Nero 11\Nero Vision\Application|MediaDir RegKey37=HKCU\Software\Nero\Nero 11\Nero Vision\Application|PicDir RegKey38=HKCU\Software\Nero\Nero 11\Nero Vision\Application|PicSaveDir RegKey39=HKCU\Software\Nero\Nero 11\Nero Vision\Application|TmpDir RegKey40=HKCU\Software\Nero\Nero 11\Nero Vision\Application|VideoDir RegKey41=HKCU\Software\Nero\Nero 11\Nero WaveEditor\Directories|Last RegKey42=HKCU\Software\Nero\Nero 11\Nero WaveEditor\Recent File List RegKey43=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelAutoTemplate RegKey44=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelISOTemplate RegKey45=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumelabelJolietTemplate RegKey46=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelUDFTemplate RegKey47=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List RegKey48=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|EncodingLastDir RegKey49=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation RegKey50=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|TrackSaveDir RegKey51=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|WorkingDir RegKey52=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List RegKey53=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelAutoTemplate RegKey54=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelISOTemplate RegKey55=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumelabelJolietTemplate RegKey56=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelUDFTemplate RegKey57=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir RegKey58=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir RegKey59=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey RegKey60=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List RegKey61=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BootImageDir RegKey62=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir RegKey63=HKCU\Software\Nero\Nero 12\Nero Express\Settings|ImageDir RegKey64=HKCU\Software\Nero\Nero 12\Nero Express\Settings|NeroCompilation RegKey65=HKCU\Software\Nero\Nero 12\Nero Express\Settings|TrackSaveDir RegKey66=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir RegKey67=HKCU\Software\Nero\Nero 12\Nero Toolkit\DiscSpeed\Capture|Folder RegKey68=HKCU\Software\Nero\Nero 12\Nero Toolkit\DiscSpeed\Save|Folder RegKey69=HKCU\Software\Nero\Nero 12\Nero Vision\Application|AudioDir RegKey70=HKCU\Software\Nero\Nero 12\Nero Vision\Application|CaptureDir RegKey71=HKCU\Software\Nero\Nero 12\Nero Vision\Application|DocDir RegKey72=HKCU\Software\Nero\Nero 12\Nero Vision\Application|ExportAudioDir RegKey73=HKCU\Software\Nero\Nero 12\Nero Vision\Application|ExportVideoDir RegKey74=HKCU\Software\Nero\Nero 12\Nero Vision\Application|ImportVideoDir RegKey75=HKCU\Software\Nero\Nero 12\Nero Vision\Application|MediaDir RegKey76=HKCU\Software\Nero\Nero 12\Nero Vision\Application|PicDir RegKey77=HKCU\Software\Nero\Nero 12\Nero Vision\Application|PicSaveDir RegKey78=HKCU\Software\Nero\Nero 12\Nero Vision\Application|TmpDir RegKey79=HKCU\Software\Nero\Nero 12\Nero Vision\Application|VideoDir RegKey80=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Directories|Last RegKey81=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List RegKey82=HKCU\Software\Nero\Nero Blu-ray Player\Settings|DefFolder RegKey83=HKCU\Software\Nero\Nero8\Cover Designer\Recent File List RegKey84=HKCU\Software\Nero\Nero8\Nero - Burning Rom\Recent File List RegKey85=HKU\.DEFAULT\Software\Ahead\Cover Designer\Recent File List RegKey86=HKU\.DEFAULT\Software\Ahead\Nero - Burning Rom\Recent File List RegKey87=HKU\.DEFAULT\Software\Ahead\Nero Wave Editor\Recent File List Tags=ccapps ID=Nero * Author=Winapp2.ini Project [Nero TuneItUp *] DetectFile=%ProgramData%\Nero\Nero TuneItUp FileKey1=%ProgramData%\Nero\Nero TuneItUp|Setup Log*.log FileKey2=%ProgramData%\Nero\Nero TuneItUp\cache|*|RECURSE FileKey3=%ProgramData%\Nero\Nero TuneItUp\DriverUpdate|*.log FileKey4=%ProgramData%\Nero\Nero TuneItUp\ExceptionHandlerDll|*.*log;*.dmp FileKey5=%ProgramData%\Nero\Nero TuneItUp\RegCleanerDll\Log|*.log FileKey6=%ProgramData%\Nero\Nero TuneItUp\RegDefragDll\Log|*.log FileKey7=%ProgramData%\Nero\Nero TuneItUp\Reports|*.html|RECURSE FileKey8=%ProgramData%\Nero\Nero TuneItUp\Services|*.log FileKey9=%ProgramData%\Nero\Nero TuneItUp\SoftwareProducts|*.log FileKey10=%ProgramData%\Nero\Nero TuneItUp\Startup|*.log FileKey11=%ProgramData%\Nero\Nero TuneItUp\TemperatureMonitoringModule|*.log Tags=ccutil ID=Nero TuneItUp * Author=Winapp2.ini Project [NesterJ *] Detect=HKCU\Software\nesterJ RegKey1=HKCU\Software\nesterJ\Recent Tags=ccutil ID=NesterJ * Author=Winapp2.ini Project [Net-Peeker *] Detect=HKLM\Software\eMingSoftware\NetPeeker FileKey1=%ProgramData%\eMingSoftware\NetPeeker\Log|* RegKey1=HKCU\Software\eMingSoftware\Net-Peeker Group Console\Recent File List RegKey2=HKLM\Software\eMingSoftware\NetPeeker|ConsoleName Tags=ccutil ID=Net-Peeker * Author=Winapp2.ini Project [Net2Printer RDP *] DetectFile=%AppData%\Net2Printer RDP Client FileKey1=%AppData%\Net2Printer RDP Client|* Tags=ccapps ID=Net2Printer RDP * Author=Winapp2.ini Project [NetBeans IDE *] DetectFile1=%AppData%\NetBeans DetectFile2=%UserProfile%\.nbi\log FileKey1=%AppData%\NetBeans\*\var\log|*|RECURSE FileKey2=%UserProfile%\.nbi\log|*.log|RECURSE Tags=ccutil ID=NetBeans IDE * Author=Winapp2.ini Project [Netflix *] DetectFile=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8 FileKey1=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\AppData\Indexed DB|*.log FileKey3=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\LocalCache|*|RECURSE FileKey4=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\LocalState|*.tmp FileKey5=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\LocalState\LiveTile|*|RECURSE FileKey6=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\Settings|*.log* FileKey7=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\SystemAppData\Helium|*.log* FileKey8=%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\4DF9E0F8.Netflix_mcm4njqhnhss8\SearchHistory ExcludeKey1=FILE|%LocalAppData%\Packages\4DF9E0F8.Netflix_mcm4njqhnhss8\AC\Microsoft\Internet Explorer\DOMStore\*\|www.netflix[1].xml Tags=ccmedia ID=Netflix * Author=Winapp2.ini Project [NETGEAR Genie *] Detect=HKLM\Software\NETGEAR Genie FileKey1=%LocalAppData%\NETGEARGenie|*.txt FileKey2=%LocalAppData%\NETGEARGenie\log|*.log FileKey3=%LocalAppData%\NETGEARGenie\update_temp|* Tags=ccutil ID=NETGEAR Genie * Author=Winapp2.ini Project [NetLimiter *] Detect=HKCU\Software\LockTime\NetLimiter RegKey1=HKCU\Software\LockTime\NetLimiter\Recent File List Tags=ccinternet ID=NetLimiter * Author=Winapp2.ini Project [NetSurf Browser *] DetectFile=%AppData%\NetSurf FileKey1=%AppData%\NetSurf|Cookies;URLs Tags=ccinternet ID=NetSurf Browser * Author=Winapp2.ini Project [NetUtils WNetStat *] Detect=HKCU\Software\NetUtils\WNetStat RegKey1=HKCU\Software\NetUtils\WNetStat|LastFile Tags=ccutil ID=NetUtils WNetStat * Author=Winapp2.ini Project [NetworkActiv AUTAPF *] DetectFile=%ProgramFiles%\NetworkActiv AUTAPF* FileKey1=%ProgramFiles%\NetworkActiv AUTAPF*|*log.txt Tags=ccutil ID=NetworkActiv AUTAPF * Author=Winapp2.ini Project [Neverwinter *] Detect=HKCU\Software\Cryptic\Neverwinter FileKey1=%ProgramFiles%\Steam\SteamApps\common\Cryptic Studios|*.log|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Cryptic Studios\localdata|_SWMWindowPosList.txt FileKey3=%Public%\Games\Cryptic Studios|*.log|RECURSE FileKey4=%Public%\Games\Cryptic Studios\localdata|_SWMWindowPosList.txt Tags=ccapps ID=Neverwinter * Author=Winapp2.ini Project [New Yankee in Santa's Service *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\New Yankee 3 - In Santas ServiceFinal FileKey1=%AppData%\AlawarEntertainment|*_log.html|RECURSE FileKey2=%ProgramFiles%\New Yankee 3 - In Santas Service|*.nfo Tags=ccapps ID=New Yankee in Santa's Service * Author=Winapp2.ini Project [Newsbin Pro *] Detect1=HKCU\Software\DJI Interprises\Newsbin Pro Detect2=HKCU\Software\DJI Interprises\Newsbin50 DetectFile=%LocalAppData%\Newsbin FileKey1=%LocalAppData%\Newsbin|Download*.db3*;Logfile.txt FileKey2=%LocalAppData%\Newsbin\Logging|*.log FileKey3=%LocalAppData%\Newsbin\Nzbs\Temp|*.nzb FileKey4=%LocalAppData%\Newsbin\SPOOL_V6|* FileKey5=%LocalAppData%\Newsbin\temp|* RegKey1=HKCU\Software\DJI Interprises\Newsbin Pro\FilterHistory RegKey2=HKCU\Software\DJI Interprises\Newsbin Pro\Recent File List Tags=ccapps ID=Newsbin Pro * Author=Winapp2.ini Project [Newsleecher *] DetectFile=%AppData%\Newsleecher\Backups FileKey1=%AppData%\Newsleecher\Backups|* Tags=ccapps ID=Newsleecher * Author=Winapp2.ini Project [neXBC *] DetectFile=%ProgramFiles%\neXBC FileKey1=%ProgramFiles%\neXBC|messages.txt FileKey2=%ProgramFiles%\neXBC\Logs\Hosted|* FileKey3=%ProgramFiles%\neXBC\Logs\Joined|* Tags=ccinternet ID=neXBC * Author=Winapp2.ini Project [Nexon Launcher *] DetectFile=%AppData%\NexonLauncher* FileKey1=%AppData%\NexonLauncher|*-journal;*.old;LOG|RECURSE FileKey2=%AppData%\NexonLauncher\*Cache|* FileKey3=%AppData%\NexonLauncherSwapApp\GPUCache|* Tags=ccapps ID=Nexon Launcher * Author=Winapp2.ini Project [Nextcloud *] DetectFile=%AppData%\Nextcloud FileKey1=%AppData%\Nextcloud|*.log;*.msi;nextcloud.cfg.backup_* FileKey2=%AppData%\Nextcloud\Logs|* FileKey3=%LocalAppData%\Nextcloud\Cache\qmlcache|*|RECURSE Tags=ccinternet ID=Nextcloud * Author=Winapp2.ini Project [NextSecurity GetKey *] Detect=HKCU\Software\NextSecurity\GetKey RegKey1=HKCU\Software\NextSecurity\GetKey\Recent File List Tags=ccutil ID=NextSecurity GetKey * Author=Winapp2.ini Project [Nextup TextAloud *] Detect=HKCU\Software\NextUpTech\TextAloud3 FileKey1=%LocalAppData%\NextUp\TextAloud|*.adl;*.adu;*.dbg FileKey2=%LocalAppData%\NextUp\TextAloud\Articles|*|RECURSE RegKey1=HKCU\Software\NextUpTech\TextAloud3|AudioClipFileOpenDirectory RegKey2=HKCU\Software\NextUpTech\TextAloud3|DocFileOpenDirectory Tags=ccapps ID=Nextup TextAloud * Author=Winapp2.ini Project [Nexus Mod Manager *] DetectFile=%UserProfile%\Documents\Nexus Mod Manager FileKey1=%UserProfile%\Documents\Nexus Mod Manager|*.txt Tags=ccapps ID=Nexus Mod Manager * Author=Winapp2.ini Project [Nicotine+ *] DetectFile=%ProgramFiles%\Nicotine+ FileKey1=%AppData%\nicotine|*.backup;*.bak;*.old|RECURSE FileKey2=%AppData%\nicotine\logs|*|RECURSE FileKey3=%LocalAppData%|recently-used.xbel Tags=ccinternet ID=Nicotine+ * Author=Winapp2.ini Project [Nidhogg *] DetectFile=%AppData%\Nidhogg FileKey1=%AppData%\Nidhogg|*.log Tags=ccapps ID=Nidhogg * Author=Winapp2.ini Project [Nikon Capture NX2 *] Detect=HKLM\Software\Nikon\Capture NX 2 FileKey1=%LocalAppData%\Nikon\Capture NX\ThumbnailCache|*|RECURSE Tags=ccmedia ID=Nikon Capture NX2 * Author=Winapp2.ini Project [Nikon ViewNX 2 Pic Viewer *] Detect=HKLM\Software\Nikon\MCA2\ViewNX 2 FileKey1=%LocalAppData%\Nikon\mPT\*\CacheData\Original|* FileKey2=%LocalAppData%\Nikon\mPT\*\CacheData\Others|* FileKey3=%LocalAppData%\Nikon\mPT\*\CacheData\Screen|* FileKey4=%LocalAppData%\Nikon\mPT\*\CacheData\Thumbnail|* FileKey5=%LocalAppData%\Nikon\ViewNX 2\Cache|* Tags=ccmedia ID=Nikon ViewNX 2 Pic Viewer * Author=Winapp2.ini Project [NirSoft AddrView *] Detect=HKCU\Software\NirSoft\AddrView RegKey1=HKCU\Software\NirSoft\AddrView|LastUrlAddr Tags=ccutil ID=NirSoft AddrView * Author=Winapp2.ini Project [NirSoft RegistryChangesView *] DetectFile=%ProgramFiles%\NirSoft\RegistryChangesView.exe FileKey1=%ProgramFiles%\NirSoft\RegSnapshot*|*|REMOVESELF FileKey2=%ProgramFiles%\NirSoft\x64\RegSnapshot*|*|REMOVESELF Tags=ccutil ID=NirSoft RegistryChangesView * Author=Winapp2.ini Project [NirSoft RegScanner *] Detect=HKCU\Software\NirSoft\RegScanner FileKey1=%ProgramFiles%\NirSoft|report.html FileKey2=%ProgramFiles%\NirSoft\x64|report.html RegKey1=HKCU\Software\NirSoft\RegScanner|BaseKey RegKey2=HKCU\Software\NirSoft\RegScanner|ExcludeList RegKey3=HKCU\Software\NirSoft\RegScanner|Find RegKey4=HKCU\Software\NirSoft\RegScanner|RemoteComputer RegKey5=HKCU\Software\NirSoft\RegScanner|TimeFrom RegKey6=HKCU\Software\NirSoft\RegScanner|TimeTo Tags=ccutil ID=NirSoft RegScanner * Author=Winapp2.ini Project [Nitro PDF Reader *] Detect=HKCU\Software\Nitro PDF\Reader DetectFile=%AppData%\Nitro\Reader FileKey1=%AppData%\Nitro\Reader\*|*Log.txt;NitroPDFHistory.dat RegKey1=HKCU\Software\Nitro PDF\Reader\1.0\Recent File List RegKey2=HKCU\Software\Nitro PDF\Reader\2.0\Recent File List Tags=ccapps ID=Nitro PDF Reader * Author=Winapp2.ini Project [Nitrous Backups *] DetectFile=%AppData%\.nitrous FileKey1=%AppData%\.nitrous\backups|*|REMOVESELF Tags=ccapps ID=Nitrous Backups * Author=Winapp2.ini Project [nLite *] DetectFile=%ProgramFiles%\nLite FileKey1=%ProgramFiles%\nLite\Presets|* Tags=ccutil ID=nLite * Author=Winapp2.ini Project [No-IP DUC *] Detect=HKCU\Software\Vitalwerks\DUC FileKey1=%LocalAppData%\Vitalwerks\DUC|*.log FileKey2=%ProgramData%\Vitalwerks\DUC|*.log Tags=ccinternet ID=No-IP DUC * Author=Winapp2.ini Project [NoBot *] Detect=HKLM\Software\NoBot DetectFile=%SystemDrive%\NoBot FileKey1=%SystemDrive%\NoBot\Logs|* FileKey2=%SystemDrive%\NoBot\Quarantine|* Tags=ccutil ID=NoBot * Author=Winapp2.ini Project [NodeSoft FileVer *] Detect=HKLM\Software\NodeSoft\FileVer RegKey1=HKLM\Software\NodeSoft\FileVer|LatestApplicationRunFile RegKey2=HKLM\Software\NodeSoft\FileVer|LatestApplicationRunPath RegKey3=HKLM\Software\NodeSoft\FileVer|LatestApplicationRunTime Tags=ccutil ID=NodeSoft FileVer * Author=Winapp2.ini Project [Noise Blocker *] DetectFile=%AppData%\Noise Blocker FileKey1=%AppData%\Noise Blocker|info.log Tags=ccmedia ID=Noise Blocker * Author=Winapp2.ini Project [Noise Engineering *] DetectFile=%UserProfile%\Noise Engineering\NE products FileKey1=%UserProfile%\Noise Engineering\NE products|*.log Tags=ccmedia ID=Noise Engineering * Author=Winapp2.ini Project [NordVPN *] DetectFile=%LocalAppData%\NordVPN FileKey1=%LocalAppData%\NordVPN\logs|* Tags=ccinternet ID=NordVPN * Author=Winapp2.ini Project [Norman Malware Cleaner *] DetectFile=%UserProfile%\Desktop\NFix_*.log FileKey1=%UserProfile%\Desktop|NFix_*.log Tags=ccutil ID=Norman Malware Cleaner * Author=Winapp2.ini Project [Norman Security Suite *] DetectFile=%ProgramFiles%\Norman FileKey1=%ProgramFiles%\Norman|*.log FileKey2=%ProgramFiles%\Norman\Download|* FileKey3=%ProgramFiles%\Norman\Logs|* FileKey4=%ProgramFiles%\Norman\Temp|* Tags=ccapps ID=Norman Security Suite * Author=Winapp2.ini Project [Norton *] DetectFile=%AppData%\Norton FileKey1=%AppData%\Norton\logs|* FileKey2=%ProgramData%\Norton|*.log;*.txt FileKey3=%ProgramData%\Norton\LocalDumps|*.dmp FileKey4=%ProgramData%\NortonInstaller\Logs|*|RECURSE FileKey5=%ProgramData%\VPNService|*.log Tags=ccutil ID=Norton * Author=Winapp2.ini Project [Norton Neo Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|*Web Data FileKey2=%LocalAppData%\NEO\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\NEO\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Norton Neo Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Norton Neo Autoplay Preferences *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Norton Neo Autoplay Preferences * Author=Winapp2.ini Project [Norton Neo Bookmark Backups *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|Bookmarks.bak Tags=ccapps ID=Norton Neo Bookmark Backups * Author=Winapp2.ini Project [Norton Neo Bookmark Favicons *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|favicons* Tags=ccapps ID=Norton Neo Bookmark Favicons * Author=Winapp2.ini Project [Norton Neo Caches *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\NEO\User Data|Module Info Cache FileKey3=%LocalAppData%\NEO\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\NEO\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\NEO\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\NEO\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\NEO\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\NEO\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\NEO\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\NEO\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\NEO\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\NEO\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\NEO\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\NEO\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\NEO\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\NEO\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\NEO\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\NEO\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\NEO\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Norton Neo Caches * Author=Winapp2.ini Project [Norton Neo Default App Handlers *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|PreferredApps Tags=ccapps ID=Norton Neo Default App Handlers * Author=Winapp2.ini Project [Norton Neo Download History *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\NEO\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Norton Neo Download History * Author=Winapp2.ini Project [Norton Neo DRM Data *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\NEO\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Norton Neo DRM Data * Author=Winapp2.ini Project [Norton Neo Extension Cookies *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|Extension Cookies Tags=ccapps ID=Norton Neo Extension Cookies * Author=Winapp2.ini Project [Norton Neo Pinned Tabs *] DetectFile=%LocalAppData%\NEO\User Data RegKey1=HKCU\Software\NEO\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Norton Neo Pinned Tabs * Author=Winapp2.ini Project [Norton Neo Privacy Sandbox *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data|*first_party_sets* FileKey2=%LocalAppData%\NEO\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\NEO\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\NEO\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\NEO\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\NEO\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\NEO\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\NEO\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Norton Neo Privacy Sandbox * Author=Winapp2.ini Project [Norton Neo Progressive Web Apps *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Norton Neo Progressive Web Apps * Author=Winapp2.ini Project [Norton Neo Saved Usernames & Passwords *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|Login Data* Tags=ccapps ID=Norton Neo Saved Usernames & Passwords * Author=Winapp2.ini Project [Norton Neo Security & Threat Detection *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|DIPS* FileKey2=%LocalAppData%\NEO\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\NEO\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\NEO\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\NEO\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\NEO\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\NEO\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\NEO\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\NEO\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\NEO\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\NEO\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\NEO\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Norton Neo Security & Threat Detection * Author=Winapp2.ini Project [Norton Neo Shopping Insights *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\NEO\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\NEO\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\NEO\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\NEO\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Norton Neo Shopping Insights * Author=Winapp2.ini Project [Norton Neo Storage Quota Manager *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|QuotaManager Tags=ccapps ID=Norton Neo Storage Quota Manager * Author=Winapp2.ini Project [Norton Neo Sync Data *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Norton Neo Sync Data * Author=Winapp2.ini Project [Norton Neo Telemetry *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\Application|debug.log FileKey2=%LocalAppData%\NEO\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\NEO\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\NEO\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\NEO\User Data\*|*.log FileKey6=%LocalAppData%\NEO\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\NEO\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\NEO\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\NEO\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\NEO\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\NEO\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\NEO\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\NEO\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\NEO\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\NEO\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\NEO\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\NEO\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\NEO\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\NEO\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\NEO\Application|debug.log FileKey21=%ProgramFiles%\NEO\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\NEO\BlBeacon|failed_count RegKey2=HKCU\Software\NEO\BlBeacon|state RegKey3=HKCU\Software\NEO\Installer|LastChecked RegKey4=HKCU\Software\NEO\StabilityMetrics Tags=ccapps ID=Norton Neo Telemetry * Author=Winapp2.ini Project [Norton Neo Web Browsing Cookies *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Norton Neo Web Browsing Cookies * Author=Winapp2.ini Project [Norton Neo Web Browsing History *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Norton Neo Web Browsing History * Author=Winapp2.ini Project [Norton Neo Web Browsing Session *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\NEO\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Norton Neo Web Browsing Session * Author=Winapp2.ini Project [Norton Neo Web Storage *] DetectFile=%LocalAppData%\NEO\User Data FileKey1=%LocalAppData%\NEO\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\NEO\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\NEO\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\NEO\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\NEO\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\NEO\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\NEO\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\NEO\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Norton Neo Web Storage * Author=Winapp2.ini Project [Norton Online Backup *] DetectFile=%ProgramData%\Symantec\Norton Online Backup FileKey1=%ProgramData%\Symantec\Norton Online Backup|*.log*|RECURSE Tags=ccutil ID=Norton Online Backup * Author=Winapp2.ini Project [Norton Power Eraser *] DetectFile=%ProgramData%\Norton\NPE\NPEsettings.dat FileKey1=%LocalAppData%\NPE|*|REMOVESELF FileKey2=%ProgramData%\Norton\NPE|*|REMOVESELF FileKey3=%UserProfile%\Desktop|NPE.exe Tags=ccutil ID=Norton Power Eraser * Author=Winapp2.ini Project [Norton Secure Browser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|*Web Data FileKey2=%LocalAppData%\Norton\Browser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Norton\Browser\User Data\AutoFill*|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Norton Secure Browser Autoplay Preferences *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\MEIPreload|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Autoplay Preferences * Author=Winapp2.ini Project [Norton Secure Browser Bookmark Backups *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|Bookmarks.bak Tags=Norton,Browser ID=Norton Secure Browser Bookmark Backups * Author=Winapp2.ini Project [Norton Secure Browser Bookmark Favicons *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|favicons* Tags=Norton,Browser ID=Norton Secure Browser Bookmark Favicons * Author=Winapp2.ini Project [Norton Secure Browser Caches *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Norton\Browser\User Data|Module Info Cache FileKey3=%LocalAppData%\Norton\Browser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Norton\Browser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Norton\Browser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Norton\Browser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Norton\Browser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Norton\Browser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Norton\Browser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Norton\Browser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Norton\Browser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Norton\Browser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Norton\Browser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Norton\Browser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Norton\Browser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Norton\Browser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Norton\Browser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Norton\Browser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Norton\Browser\User Data\Optimization*|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Caches * Author=Winapp2.ini Project [Norton Secure Browser Default App Handlers *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|PreferredApps Tags=Norton,Browser ID=Norton Secure Browser Default App Handlers * Author=Winapp2.ini Project [Norton Secure Browser Download History *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Norton\Browser\User Data\*\shared_proto_db|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Download History * Author=Winapp2.ini Project [Norton Secure Browser DRM Data *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Norton\Browser\User Data\WidevineCdm|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser DRM Data * Author=Winapp2.ini Project [Norton Secure Browser Extension Cookies *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|Extension Cookies Tags=Norton,Browser ID=Norton Secure Browser Extension Cookies * Author=Winapp2.ini Project [Norton Secure Browser Pinned Tabs *] DetectFile=%LocalAppData%\Norton\Browser\User Data RegKey1=HKCU\Norton\Browser\PreferenceMACs\Default|pinned_tabs Tags=Norton,Browser ID=Norton Secure Browser Pinned Tabs * Author=Winapp2.ini Project [Norton Secure Browser Privacy Sandbox *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Norton\Browser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Norton\Browser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Norton\Browser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Norton\Browser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Norton\Browser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Norton\Browser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Norton\Browser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Privacy Sandbox * Author=Winapp2.ini Project [Norton Secure Browser Progressive Web Apps *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\Web Applications|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Progressive Web Apps * Author=Winapp2.ini Project [Norton Secure Browser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|Login Data* Tags=Norton,Browser ID=Norton Secure Browser Saved Usernames & Passwords * Author=Winapp2.ini Project [Norton Secure Browser Security & Threat Detection *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|DIPS* FileKey2=%LocalAppData%\Norton\Browser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Norton\Browser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Norton\Browser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Norton\Browser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Norton\Browser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Norton\Browser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Norton\Browser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Norton\Browser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Norton\Browser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Norton\Browser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Norton\Browser\User Data\ZxcvbnData|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Security & Threat Detection * Author=Winapp2.ini Project [Norton Secure Browser Shopping Insights *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Norton\Browser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Norton\Browser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Norton\Browser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Norton\Browser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Shopping Insights * Author=Winapp2.ini Project [Norton Secure Browser Storage Quota Manager *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|QuotaManager Tags=Norton,Browser ID=Norton Secure Browser Storage Quota Manager * Author=Winapp2.ini Project [Norton Secure Browser Sync Data *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\Sync Data|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Sync Data * Author=Winapp2.ini Project [Norton Secure Browser Telemetry *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\Application|debug.log FileKey2=%LocalAppData%\Norton\Browser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Norton\Browser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Norton\Browser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Norton\Browser\User Data\*|*.log FileKey6=%LocalAppData%\Norton\Browser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Norton\Browser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Norton\Browser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Norton\Browser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Norton\Browser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Norton\Browser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Norton\Browser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Norton\Browser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Norton\Browser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Norton\Browser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Norton\Browser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Norton\Browser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Norton\Browser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Norton\Browser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Norton\Browser\Application|debug.log FileKey21=%ProgramFiles%\Norton\Browser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Norton\Browser\BlBeacon|failed_count RegKey2=HKCU\Norton\Browser\BlBeacon|state RegKey3=HKCU\Norton\Browser\Installer|LastChecked RegKey4=HKCU\Norton\Browser\StabilityMetrics Tags=Norton,Browser ID=Norton Secure Browser Telemetry * Author=Winapp2.ini Project [Norton Secure Browser Web Browsing Cookies *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Norton,Browser ID=Norton Secure Browser Web Browsing Cookies * Author=Winapp2.ini Project [Norton Secure Browser Web Browsing History *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Norton,Browser ID=Norton Secure Browser Web Browsing History * Author=Winapp2.ini Project [Norton Secure Browser Web Browsing Session *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Norton\Browser\User Data\*\Sessions|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Web Browsing Session * Author=Winapp2.ini Project [Norton Secure Browser Web Storage *] DetectFile=%LocalAppData%\Norton\Browser\User Data FileKey1=%LocalAppData%\Norton\Browser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Norton\Browser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Norton\Browser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Norton\Browser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Norton\Browser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Norton\Browser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Norton\Browser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Norton\Browser\User Data\*\WebStorage|*|REMOVESELF Tags=Norton,Browser ID=Norton Secure Browser Web Storage * Author=Winapp2.ini Project [Norton Secure VPN *] DetectFile=%LocalAppData%\Norton Secure VPN FileKey1=%LocalAppData%\Norton Secure VPN|*.log FileKey2=%LocalAppData%\Norton Secure VPN\Cache\qmlcache|* Tags=ccinternet ID=Norton Secure VPN * Author=Winapp2.ini Project [Norton Utilities *] DetectFile1=%ProgramFiles%\Norton SystemWorks Premier Edition\Norton Utilities DetectFile2=%ProgramFiles%\Norton Utilities* FileKey1=%AppData%\Norton Utilities *\cleanreports|pgscan_*.html FileKey2=%AppData%\Norton Utilities\log|pgscan_*.html FileKey3=%ProgramData%\Norton\NortonUtility\logs|*.log FileKey4=%ProgramFiles%\Norton SystemWorks Premier Edition\Norton Utilities|*.log;*.tmp Tags=ccapps ID=Norton Utilities * Author=Winapp2.ini Project [Notepad++ - Backups & Unsaved Files *] Detect=HKLM\Software\Notepad++ FileKey1=%AppData%\Notepad++\backup*|* Tags=ccapps ID=Notepad++ - Backups & Unsaved Files * Author=Winapp2.ini Project [Notepad++ - Session *] Detect=HKLM\Software\Notepad++ FileKey1=%AppData%\Notepad++|session.xml Tags=ccapps ID=Notepad++ - Session * Author=Winapp2.ini Project [Notepad++ *] Detect=HKLM\Software\Notepad++ FileKey1=%AppData%\Notepad++|*.log FileKey2=%AppData%\Notepad++\plugins\config\plugin_install_temp|*|REMOVESELF Tags=ccapps ID=Notepad++ * Author=Winapp2.ini Project [Notion *] DetectFile=%AppData%\Notion FileKey1=%AppData%\Notion|DIPS* FileKey2=%AppData%\Notion\*Cache|*|RECURSE FileKey3=%AppData%\Notion\logs|* FileKey4=%AppData%\Notion\partitions|DIPS* FileKey5=%AppData%\Notion\partitions\*Cache|*|RECURSE FileKey6=%LocalAppData%\notion-updater|*|REMOVESELF Tags=ccapps ID=Notion * Author=Winapp2.ini Project [NowSmart Cut *] Detect=HKLM\Software\NowSmart\Cut FileKey1=%LocalAppData%\Cut|*.dmp;log.txt Tags=ccmedia ID=NowSmart Cut * Author=Winapp2.ini Project [Nox *] Detect=HKLM\Software\BigNox DetectFile=%UserProfile%\.BigNox FileKey1=%LocalAppData%\Nox|*.log* FileKey2=%UserProfile%\.BigNox|*.log* FileKey3=%UserProfile%\vmlogs|Nox.log* Tags=ccutil ID=Nox * Author=Winapp2.ini Project [Npcap Loopback Adapter *] DetectFile=%ProgramFiles%\Npcap FileKey1=%ProgramFiles%\NpCap|*.log|RECURSE Tags=ccutil ID=Npcap Loopback Adapter * Author=Winapp2.ini Project [nProtect Online Security *] DetectFile=%UserProfile%\AppData\LocalLow\nProtect FileKey1=%UserProfile%\AppData\LocalLow\nProtect\Log|* Tags=ccapps ID=nProtect Online Security * Author=Winapp2.ini Project [NSIS *] Detect=HKLM\Software\NSIS RegKey1=HKLM\Software\NSIS\MRU Tags=ccapps ID=NSIS * Author=Winapp2.ini Project [NT Registry Optimizer *] DetectFile=%ProgramFiles%\NT Registry Optimizer FileKey1=%LocalAppData%\Microsoft\Windows|UsrClass.bak FileKey2=%WinDir%\*\LocalService|NTUSER.bak FileKey3=%WinDir%\System32\config|COMPONENTS.bak;DEFAULT.bak;SAM.bak;SECURITY.bak;Software.bak;SYSTEM.bak Tags=ccutil ID=NT Registry Optimizer * Author=Winapp2.ini Project [NTI Backup Now *] DetectFile=%ProgramFiles%\New Tech Infosystems\NTI Backup Now 5 FileKey1=%ProgramFiles%\New Tech Infosystems\NTI Backup Now 5\logs|* Tags=ccutil ID=NTI Backup Now * Author=Winapp2.ini Project [Nuance Dragon Natually Speaking 12 *] Detect=HKCU\Software\ScanSoft\NaturallySpeaking12 FileKey1=%AppData%\Nuance\NaturallySpeaking12\RIA|*DragonNatuallySpeakingRIA_IE_Shim_log_*.txt Tags=ccapps ID=Nuance Dragon Natually Speaking 12 * Author=Winapp2.ini Project [Nuclear Dawn Cache *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\config\html|*|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\cache|*|RECURSE FileKey3=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\downloads|*|RECURSE FileKey4=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\materials\temp|*.vtf|RECURSE Tags=ccapps ID=Nuclear Dawn Cache * Author=Winapp2.ini Project [Nuclear Dawn Custom Content *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps|*corner*;*frost*;*mars*;*roadwork*;*rock*|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\materials\models|*|RECURSE FileKey3=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\materials\sprites|*|RECURSE FileKey4=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\models|*|RECURSE FileKey5=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\sound\quake|*|RECURSE Tags=ccapps ID=Nuclear Dawn Custom Content * Author=Winapp2.ini Project [Nuclear Dawn Developer Files *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\bin|*bsp*;*vtex*;modelbrowser.exe;SDKLauncher.exe|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps|*example*|RECURSE FileKey3=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps\ai_data|nd_codetest.nav|RECURSE FileKey4=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\scripts\scripted_props|*|REMOVESELF FileKey5=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\scripts\units|*|REMOVESELF FileKey6=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\scripts\vehicles|*|REMOVESELF FileKey7=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\platform\AddOns|*|RECURSE FileKey8=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\sdk_content|*|REMOVESELF FileKey9=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\sdk_tools|*|REMOVESELF Tags=ccapps ID=Nuclear Dawn Developer Files * Author=Winapp2.ini Project [Nuclear Dawn Mac/Linux Binaries *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\bin|client.dylib;client.so|RECURSE Tags=ccapps ID=Nuclear Dawn Mac/Linux Binaries * Author=Winapp2.ini Project [Nuclear Dawn SK Gamemode *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps|*sk_*|RECURSE Tags=ccapps ID=Nuclear Dawn SK Gamemode * Author=Winapp2.ini Project [Nuclear Dawn Tutorials *] Detect=HKCU\Software\Valve\Steam\Apps\17710 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps|*training*|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\maps\ai_data|*training*|RECURSE FileKey3=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\media|*tutorial*|RECURSE FileKey4=%ProgramFiles%\Steam\SteamApps\common\Nuclear Dawn\nucleardawn\sound\voices\tutorial|*|REMOVESELF Tags=ccapps ID=Nuclear Dawn Tutorials * Author=Winapp2.ini Project [NVIDIA App *] DetectFile=%LocalAppData%\NVIDIA Corporation\NVIDIA App FileKey1=%LocalAppData%|NVIDIA_App_Performance_Log_* FileKey2=%LocalAppData%\NVIDIA Corporation\NVIDIA App|*.log* FileKey3=%LocalAppData%\NVIDIA Corporation\NVIDIA App\assets|*.tmp FileKey4=%LocalAppData%\NVIDIA Corporation\NVIDIA App\CefCache|*.pma FileKey5=%LocalAppData%\NVIDIA Corporation\NVIDIA App\CefCache\*cache*|*|RECURSE FileKey6=%LocalAppData%\NVIDIA Corporation\NVIDIA App\CefCache\Default|Affiliation Database*;BrowsingTopicsState*;DIPS*;Favicons*;History*;LOCK;LOG;LOG.old;Network Action Predictor*;Top Sites*;Visited Links*;Web Data* FileKey7=%LocalAppData%\NVIDIA Corporation\NVIDIA App\CefCache\Default\*cache*|*|RECURSE FileKey8=%LocalAppData%\NVIDIA Corporation\NVIDIA App\gfe_backup\nvbackend\cefcache|*|RECURSE FileKey9=%LocalAppData%\NVIDIA Corporation\NVIDIA App\NvBackend|*.bak;*.log* FileKey10=%LocalAppData%\NVIDIA Corporation\NVIDIA App\UXD|*.log FileKey11=%ProgramData%\NVIDIA Corporation\NVIDIA App|*.log*|RECURSE Tags=ccutil ID=NVIDIA App * Author=Winapp2.ini Project [NVIDIA Broadcast *] DetectFile=%ProgramData%\NVIDIA Corporation\NVIDIA Broadcast FileKey1=%AppData%\nvidia-broadcast\*Cache*|*|REMOVESELF FileKey2=%AppData%\nvidia-broadcast\logs|*.log FileKey3=%ProgramData%\NVIDIA Corporation\NVIDIA Broadcast|*.log;*.txt FileKey4=%ProgramData%\NVIDIA Corporation\NVIDIA Broadcast\logs|* FileKey5=%ProgramData%\NVIDIA Corporation\NVIDIA Broadcast\NvBroadcastLogsZip|*.zip FileKey6=%ProgramData%\NVIDIA Corporation\NVIDIA Broadcast\temp|* Tags=ccutil ID=NVIDIA Broadcast * Author=Winapp2.ini Project [NVIDIA Control Panel *] DetectFile=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj FileKey1=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\Settings|*.log* FileKey4=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\TempState|*|REMOVESELF Tags=ccutil ID=NVIDIA Control Panel * Author=Winapp2.ini Project [NVIDIA ForceWare *] DetectFile=%ProgramFiles%\NVIDIA Corporation\NetworkAccessManager FileKey1=%ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs|* Tags=ccutil ID=NVIDIA ForceWare * Author=Winapp2.ini Project [NVIDIA FrameView *] DetectFile=%LocalAppData%\NVIDIA Corporation\FrameViewSDK FileKey1=%LocalAppData%\NVIDIA Corporation\FrameViewSDK|*.log FileKey2=%ProgramData%\NVIDIA Corporation\FrameView*|*.log*|RECURSE Tags=ccutil ID=NVIDIA FrameView * Author=Winapp2.ini Project [NVIDIA G-Assist *] DetectFile=%ProgramData%\NVIDIA Corporation\NVIDIA App\G-Assist FileKey1=%ProgramData%\NVIDIA Corporation\NVIDIA App\G-Assist|*.log Tags=ccutil ID=NVIDIA G-Assist * Author=Winapp2.ini Project [NVIDIA Geforce Experience *] DetectFile=%ProgramData%\NVIDIA Corporation\GeForce Experience FileKey1=%ProgramData%\NVIDIA Corporation\Downloader|*|RECURSE FileKey2=%ProgramData%\NVIDIA Corporation\GeForce Experience\Update|*|RECURSE FileKey3=%ProgramData%\NVIDIA\NvBackend\Updatus\DownloadManager|* FileKey4=%ProgramData%\NVIDIA\Updatus|*.bak;*.log FileKey5=%ProgramData%\NVIDIA\Updatus\DownloadManager|* FileKey6=%ProgramFiles%\NVIDIA Corporation\NVIDIA GeForce Experience|*.log FileKey7=%SystemDrive%\NvidiaLogging\GFExperience|GridClientLog.log*|RECURSE Tags=ccutil ID=NVIDIA Geforce Experience * Author=Winapp2.ini Project [NVIDIA Graphics Drivers *] DetectFile=%ProgramData%\NVIDIA Corporation FileKey1=%ProgramData%\NVIDIA|*.log* FileKey2=%ProgramData%\NVIDIA Corporation\CrashDumps|* FileKey3=%ProgramData%\NVIDIA Corporation\DisplayDriverRAS\NvTelemetry|events.dat FileKey4=%ProgramData%\NVIDIA Corporation\DisplayDriverRAS\NvTelemetry\feedbacks|*|REMOVESELF FileKey5=%ProgramData%\NVIDIA Corporation\GameSessionTelemetry|*.log* FileKey6=%ProgramData%\NVIDIA Corporation\NvFBCPlugin|log*.txt FileKey7=%ProgramData%\NVIDIA Corporation\NvProfileUpdaterPlugin|*.log* FileKey8=%ProgramData%\NVIDIA Corporation\NvTelemetry|*.log*;events* FileKey9=%ProgramData%\NVIDIA Corporation\NvTelemetry\feedbacks|*|REMOVESELF FileKey10=%ProgramData%\NVIDIA Corporation\nvtopps|*.log FileKey11=%ProgramData%\NVIDIA Corporation\nvtopps\nct|nvlog.nvlgstg FileKey12=%ProgramData%\NVIDIA Corporation\NvVAD|*.log FileKey13=%ProgramData%\NVIDIA Corporation\ShadowPlay|*.log FileKey14=%ProgramData%\NVIDIA Corporation\umdlogs|* Tags=ccutil ID=NVIDIA Graphics Drivers * Author=Winapp2.ini Project [NVIDIA Image Comparison Analysis Tool *] DetectFile=%AppData%\icat FileKey1=%AppData%\icat\*cache*|*|REMOVESELF FileKey2=%LocalAppData%\icat-updater|* FileKey3=%ProgramData%|DisplaySessionContainer*.log*;NvcDispCorePlugin.log*;NVDisplay.Container*.log* Tags=ccutil ID=NVIDIA Image Comparison Analysis Tool * Author=Winapp2.ini Project [NVIDIA Omniverse *] DetectFile=%UserProfile%\.nvidia-omniverse FileKey1=%LocalAppData%\ov\cache|*|RECURSE FileKey2=%UserProfile%\.nvidia-omniverse\logs|*.log|RECURSE Tags=ccutil ID=NVIDIA Omniverse * Author=Winapp2.ini Project [NVIDIA Overlay *] DetectFile=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay FileKey1=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay|*.log* FileKey2=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay\CefCache|*.pma FileKey3=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay\CefCache\*cache*|*|RECURSE FileKey4=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay\CefCache\BrowserMetrics|* FileKey5=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay\CefCache\Default|Affiliation Database*;BrowsingTopicsState*;DIPS*;Favicons*;History*;LOCK;LOG;LOG.old;Network Action Predictor*;Top Sites*;Visited Links*;Web Data* FileKey6=%LocalAppData%\NVIDIA Corporation\NVIDIA Overlay\CefCache\Default\*cache*|*|RECURSE Tags=ccutil ID=NVIDIA Overlay * Author=Winapp2.ini Project [NVIDIA Shader Cache *] Detect=HKLM\Software\NVIDIA Corporation FileKey1=%AppData%\NVIDIA\ComputeCache|*|RECURSE FileKey2=%LocalAppData%\NVIDIA Corporation\NV_Cache|*|RECURSE FileKey3=%LocalAppData%\NVIDIA\*Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\*\AC\*\NVIDIA Corporation\NV_Cache|*|RECURSE FileKey5=%LocalAppData%\Packages\*\AC\NVIDIA Corporation\NV_Cache|*|RECURSE FileKey6=%LocalAppData%\Packages\*\AC\NVIDIA\DXCache|*|RECURSE FileKey7=%ProgramData%\NVIDIA Corporation\NV_Cache|*|RECURSE FileKey8=%UserProfile%\AppData\LocalLow\NVIDIA\DXCache|*|RECURSE FileKey9=%UserProfile%\AppData\LocalLow\NVIDIA\PerDriverVersion\DXCache|*|RECURSE FileKey10=%WinDir%\ServiceProfiles\LocalService\AppData\Local\NVIDIA\*Cache|*|RECURSE FileKey11=%WinDir%\System32\config\systemprofile\AppData\Local\NVIDIA\*Cache|*|RECURSE FileKey12=%WinDir%\System32\config\systemprofile\AppData\LocalLow\NVIDIA\PerDriverVersion\*Cache|*|RECURSE FileKey13=%WinDir%\System32\config\systemprofile\AppData\Roaming\NVIDIA\ComputeCache|*|RECURSE Tags=ccutil ID=NVIDIA Shader Cache * Author=Winapp2.ini Project [NVIDIA Update Files *] DetectFile=%ProgramData%\NVIDIA Corporation\NVIDIA App\UpdateFramework FileKey1=%ProgramData%\NVIDIA Corporation\NVIDIA App\UpdateFramework\ota-artifacts|*|RECURSE Tags=ccutil ID=NVIDIA Update Files * Author=Winapp2.ini Project [O&O Defrag *] Detect=HKCU\Software\O&O\O&O Defrag FileKey1=%UserProfile%\Documents\O&O\O&O Defrag\data\reports|*|RECURSE Tags=ccutil ID=O&O Defrag * Author=Winapp2.ini Project [O&O SafeErase *] Detect=HKCU\Software\O&O\O&O SafeErase\7 FileKey1=%UserProfile%\Documents\O&O\O&O SafeErase\7\Reports|*.html RegKey1=HKCU\Software\O&O\O&O SafeErase\7|LastAnalysisAdditionalErrorMessage RegKey2=HKCU\Software\O&O\O&O SafeErase\7|LastAnalysisDateTime RegKey3=HKCU\Software\O&O\O&O SafeErase\7|LastAnalysisReportPath RegKey4=HKCU\Software\O&O\O&O SafeErase\7|LastAnalysisResultString Tags=ccutil ID=O&O SafeErase * Author=Winapp2.ini Project [OBS Studio *] DetectFile1=%AppData%\OBS DetectFile2=%AppData%\obs-studio DetectFile3=%AppData%\obs-studio-node-server DetectFile4=%ProgramData%\obs-studio FileKey1=%AppData%\OBS|*.log|RECURSE FileKey2=%AppData%\OBS\crashDumps|* FileKey3=%AppData%\obs-studio\crashes|* FileKey4=%AppData%\obs-studio\logs|* FileKey5=%AppData%\obs-studio\plugin_config\obs-browser|*|REMOVESELF FileKey6=%AppData%\obs-studio\profiler_data|* FileKey7=%AppData%\obs-studio-node-server\attachments|* FileKey8=%AppData%\obs-studio-node-server\reports|* FileKey9=%ProgramData%\obs-studio\shader-cache|* ExcludeKey1=FILE|%AppData%\obs-studio\plugin_config\obs-browser\|LocalPrefs.json Tags=ccmedia ID=OBS Studio * Author=Winapp2.ini Project [Observer *] Detect=HKCU\Software\Valve\Steam\Apps\514900 FileKey1=%AppData%\Aspyr Media\Game Guide 3\Cache|*|RECURSE FileKey2=%LocalAppData%\TheObserver\Saved\Logs|* Tags=ccapps ID=Observer * Author=Winapp2.ini Project [OcenAudio *] DetectFile=%LocalAppData%\OcenAudio FileKey1=%LocalAppData%\OcenAudio|ocen.database Tags=ccmedia ID=OcenAudio * Author=Winapp2.ini Project [Oculus *] DetectFile=%AppData%\Oculus FileKey1=%AppData%\Oculus\Logs|* FileKey2=%AppData%\OculusClient|*-journal;*.old;LOG;Network Persistent State|RECURSE FileKey3=%AppData%\OculusClient\*Cache|*|RECURSE FileKey4=%AppData%\OculusClient\webrtc_event_logs|* FileKey5=%LocalAppData%\Oculus|*.log;*.txt;PerfLog_*.json Tags=ccapps ID=Oculus * Author=Winapp2.ini Project [OE Classic *] Detect=HKCU\Software\OEClassic FileKey1=%LocalAppData%\OEClassic\Prg\Res|*|RECURSE FileKey2=%LocalAppData%\OEClassic\Prg\T|*|RECURSE ExcludeKey1=PATH|%LocalAppData%\OEClassic\Prg\Res\|dict-*.aff ExcludeKey2=PATH|%LocalAppData%\OEClassic\Prg\Res\|dict-*.dic ExcludeKey3=PATH|%LocalAppData%\OEClassic\Prg\Res\|dict-*.license Tags=ccinternet ID=OE Classic * Author=Winapp2.ini Project [OEM Logs *] DetectFile1=%ProgramData%\oem DetectFile2=%SystemDrive%\OEM DetectFile3=%WinDir%\System32\OEM DetectFile4=%WinDir%\SysWOW64\OEM FileKey1=%ProgramData%\oem|*.log|RECURSE FileKey2=%SystemDrive%\OEM|*.log|RECURSE FileKey3=%WinDir%\oem|*.log;*.log.txt|RECURSE FileKey4=%WinDir%\System32\OEM|*.log FileKey5=%WinDir%\SysWOW64\OEM|*.log Tags=ccapps ID=OEM Logs * Author=Winapp2.ini Project [Off-Road Drive *] Detect=HKCU\Software\Valve\Steam\Apps\200230 FileKey1=%UserProfile%\Documents\My Games\PP3\PP3WorkGame\Logs|* Tags=ccapps ID=Off-Road Drive * Author=Winapp2.ini Project [Office Password Recovery *] Detect=HKCU\Software\Intelore\Office Password Recovery FileKey1=%AppData%\Intelore\Password Recovery\logs|* Tags=ccutil ID=Office Password Recovery * Author=Winapp2.ini Project [Okular *] DetectFile=%LocalAppData%\okular FileKey1=%LocalAppData%\okular\docdata|*.xml Tags=ccapps ID=Okular * Author=Winapp2.ini Project [OmniTracker *] Detect=HKCU\Software\OmniNet\OmniTracker FileKey1=%LocalAppData%\OMNINET GmbH\OMNITRACKER\Temp|*|RECURSE RegKey1=HKCU\Software\OmniNet\OmniTracker\MRU RegKey2=HKCU\Software\OmniNet\OmniTracker\SearchTextHistory Tags=ccapps ID=OmniTracker * Author=Winapp2.ini Project [One More Multiverse *] DetectFile=%AppData%\OneMoreMultiverse FileKey1=%AppData%\OneMoreMultiverse|*State;Cookies*;Quota* FileKey2=%AppData%\OneMoreMultiverse\*cache|*|RECURSE FileKey3=%AppData%\OneMoreMultiverse\blob_storage|*|REMOVESELF FileKey4=%AppData%\OneMoreMultiverse\logs|* FileKey5=%AppData%\OneMoreMultiverse\One More Multiverse\logs|* FileKey6=%LocalAppData%\onemoremultiverse-updater|* FileKey7=%LocalAppData%\onemoremultiverse-updater\*|*|REMOVESELF Tags=ccapps ID=One More Multiverse * Author=Winapp2.ini Project [OneSafe PC Cleaner *] Detect=HKCU\Software\OneSafe PC Cleaner FileKey1=%AppData%\OneSafe PC Cleaner\Log|*.xml RegKey1=HKCU\Software\OneSafe PC Cleaner|InstallationDate RegKey2=HKCU\Software\OneSafe PC Cleaner|InstallerName RegKey3=HKCU\Software\OneSafe PC Cleaner|LastScanDate RegKey4=HKCU\Software\OneSafe PC Cleaner|LastUpdCheck Tags=ccutil ID=OneSafe PC Cleaner * Author=Winapp2.ini Project [Ontrack EasyRecovery *] DetectFile=%ProgramFiles%\Kroll Ontrack\Ontrack EasyRecovery* FileKey1=%ProgramFiles%\Kroll Ontrack\Ontrack EasyRecovery*|*er*_log.txt FileKey2=%ProgramFiles%\Kroll Ontrack\Ontrack EasyRecovery*\licman|*.tmp;*_log.txt Tags=ccutil ID=Ontrack EasyRecovery * Author=Winapp2.ini Project [Ookla Speed Test *] DetectFile1=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6 DetectFile2=%UserProfile%\AppData\LocalLow\Ookla\Speedtest FileKey1=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\LocalState|*.tmp|RECURSE FileKey3=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\LocalState\Unity\Local.*\Analytics\ArchivedEvents\*|*|REMOVESELF FileKey4=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\Settings|*.log* FileKey5=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Ookla.SpeedtestbyOokla_43tkc6nmykmb6\TempState|*|REMOVESELF FileKey7=%UserProfile%\AppData\LocalLow\Ookla\Speedtest|*log.txt Tags=ccinternet ID=Ookla Speed Test * Author=Winapp2.ini Project [OpalCalc *] DetectFile1=%AppData%\OpalCalc_prefs DetectFile2=%ProgramFiles%\OpalCalc FileKey1=%AppData%\OpalCalc_prefs|lastSession.txt Tags=ccapps ID=OpalCalc * Author=Winapp2.ini Project [Open-Shell *] DetectFile=%LocalAppData%\OpenShell FileKey1=%LocalAppData%\OpenShell|DataCache.db Tags=ccapps ID=Open-Shell * Author=Winapp2.ini Project [Open Blu-ray to DVD *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Blu-ray to DVD Pro_is1 FileKey1=%ProgramFiles%\Blu-ray to DVD*|*.log;*.txt FileKey2=%ProgramFiles%\Blu-ray to DVD*\ReadCache|* Tags=ccmedia ID=Open Blu-ray to DVD * Author=Winapp2.ini Project [Open Blu-ray/DVD Ripper *] Detect1=HKCU\Software\OpenCloner\BDRipper Detect2=HKCU\Software\OpenCloner\DVDRipper FileKey1=%AppData%\Open * Ripper|O*R_LOG_FILE.txt FileKey2=%AppData%\Open * Ripper\ReadCache|*|REMOVESELF Tags=ccmedia ID=Open Blu-ray/DVD Ripper * Author=Winapp2.ini Project [Open Freely *] DetectFile=%ProgramFiles%\Open Freely FileKey1=%ProgramFiles%\Open Freely|mostRecentFiles.ini FileKey2=%ProgramFiles%\Open Freely\NGEN|*.log|RECURSE Tags=ccapps ID=Open Freely * Author=Winapp2.ini Project [Open With Arguments *] Detect=HKCU\Software\OpenArgs RegKey1=HKCU\Software\OpenArgs\History Tags=ccutil ID=Open With Arguments * Author=Winapp2.ini Project [OpenCloner Blue-Cloner *] Detect=HKCU\Software\Blue-cloner FileKey1=%AppData%\Blue-Cloner|*.log FileKey2=%AppData%\Blue-Cloner\ReadCache|*|REMOVESELF FileKey3=%ProgramFiles%\Blue-Cloner|*.log;*.txt Tags=ccmedia ID=OpenCloner Blue-Cloner * Author=Winapp2.ini Project [OpenDNS Updater *] Detect=HKCU\Software\OpenDNS Updater FileKey1=%AppData%\OpenDNS Updater|*.txt Tags=ccapps ID=OpenDNS Updater * Author=Winapp2.ini Project [OpenFire *] DetectFile=%ProgramFiles%\Openfire FileKey1=%ProgramFiles%\Openfire\Logs|* Tags=ccinternet ID=OpenFire * Author=Winapp2.ini Project [OpenOffice.org *] Detect1=HKLM\Software\OpenOffice Detect2=HKLM\Software\OpenOffice.org FileKey1=%AppData%\OpenOffice*\*\user|*.log*;*.tmp;registration.xml;registrymodifications.xcu|RECURSE FileKey2=%AppData%\OpenOffice*\*\user\config\imagecache|* FileKey3=%AppData%\OpenOffice*\*\user\registry\cache|* FileKey4=%AppData%\OpenOffice*\*\user\registry\data\org\openoffice\Office|Common.xcu;Histories.xcu;Views.xcu;Writer.xcu FileKey5=%AppData%\OpenOffice*\*\user\registry\data\org\openoffice\ucb|Hierarchy.xcu;Store.xcu FileKey6=%ProgramFiles%\OpenOffice*\program|*.log|RECURSE FileKey7=%ProgramFiles%\OpenOffice*\program_old*|*|REMOVESELF FileKey8=%ProgramFiles%\OpenOffice*\share\uno_packages\cache\uno_packages|*.log;*.tmp;log.txt FileKey9=%UserProfile%\Desktop\OpenOffice.org * Installation Files|*|REMOVESELF Tags=ccapps ID=OpenOffice.org * Author=Winapp2.ini Project [OpenRA *] DetectFile=%UserProfile%\Documents\OpenRA FileKey1=%UserProfile%\Documents\OpenRA\Logs|* Tags=ccapps ID=OpenRA * Author=Winapp2.ini Project [OpenRGB *] DetectFile=%AppData%\OpenRGB FileKey1=%AppData%\OpenRGB\logs|*.log Tags=ccutil ID=OpenRGB * Author=Winapp2.ini Project [OpenShot *] DetectFile1=%ProgramFiles%\OpenShot Video Editor DetectFile2=%UserProfile%\.openshot_qt FileKey1=%ProgramFiles%\OpenShot Video Editor\settings|*.log FileKey2=%UserProfile%\.openshot_qt|*.log FileKey3=%UserProfile%\.openshot_qt\*cache|* FileKey4=%UserProfile%\.openshot_qt\thumbnail|*.png Tags=ccmedia ID=OpenShot * Author=Winapp2.ini Project [OpenVPN *] Detect=HKLM\Software\OpenVPN FileKey1=%ProgramFiles%\OpenVPN\Log|*.log FileKey2=%UserProfile%\OpenVPN\log|*|RECURSE Tags=ccinternet ID=OpenVPN * Author=Winapp2.ini Project [Opera Autofill Data & Search Engine Preferences *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|*Web Data FileKey2=%AppData%\Opera Software\Opera*\*\AutoFill*|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera*\AutoFill*|*|REMOVESELF Tags=Opera,Browser ID=Opera Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Opera Autoplay Preferences *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\MEIPreload|*|REMOVESELF Tags=Opera,Browser ID=Opera Autoplay Preferences * Author=Winapp2.ini Project [Opera Bookmark Backups *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|Bookmarks.bak Tags=Opera,Browser ID=Opera Bookmark Backups * Author=Winapp2.ini Project [Opera Bookmark Favicons *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|favicons* Tags=Opera,Browser ID=Opera Bookmark Favicons * Author=Winapp2.ini Project [Opera Caches *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*|*-journal|RECURSE FileKey2=%AppData%\Opera Software\Opera*|Module Info Cache FileKey3=%AppData%\Opera Software\Opera*\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate;suggestions_cache.json FileKey4=%AppData%\Opera Software\Opera*\*\*Cache*|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera*\*\blob_storage|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera*\*\BudgetDatabase|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera*\*\Download Service|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera*\*\File System|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera*\*\GCM Store|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera*\*\Jump List Icons*|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera*\*\JumpListIcons*|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera*\*\optimization*|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera*\*\Platform Notifications|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera*\*\Service Worker|*|REMOVESELF FileKey15=%AppData%\Opera Software\Opera*\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera*\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%AppData%\Opera Software\Opera*\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%AppData%\Opera Software\Opera*\*Cache*|*|REMOVESELF FileKey19=%AppData%\Opera Software\Opera*\Avatars|*|REMOVESELF FileKey20=%AppData%\Opera Software\Opera*\Optimization*|*|REMOVESELF FileKey21=%LocalAppData%\Opera Software\Opera*\*\*Cache*|*|REMOVESELF FileKey22=%LocalAppData%\Opera Software\Opera*\*Cache*|*|REMOVESELF Tags=Opera,Browser ID=Opera Caches * Author=Winapp2.ini Project [Opera Default App Handlers *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|PreferredApps Tags=Opera,Browser ID=Opera Default App Handlers * Author=Winapp2.ini Project [Opera Download History *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|DownloadMetadata FileKey2=%AppData%\Opera Software\Opera*\*\shared_proto_db|*|REMOVESELF Tags=Opera,Browser ID=Opera Download History * Author=Winapp2.ini Project [Opera DRM Data *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera*\WidevineCdm|*|REMOVESELF Tags=Opera,Browser ID=Opera DRM Data * Author=Winapp2.ini Project [Opera Extension Cookies *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|Extension Cookies Tags=Opera,Browser ID=Opera Extension Cookies * Author=Winapp2.ini Project [Opera GX Autofill Data & Search Engine Preferences *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|*Web Data FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*Web Data FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\AutoFill*|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\AutoFill*|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Opera GX Autoplay Preferences *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\MEIPreload|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\MEIPreload|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Autoplay Preferences * Author=Winapp2.ini Project [Opera GX Bookmark Backups *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|Bookmarks.bak FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|Bookmarks.bak Tags=OperaGX,Browser ID=Opera GX Bookmark Backups * Author=Winapp2.ini Project [Opera GX Bookmark Favicons *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|favicons* FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|favicons* Tags=OperaGX,Browser ID=Opera GX Bookmark Favicons * Author=Winapp2.ini Project [Opera GX Caches *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|*.ldb;CURRENT;LOCK;MANIFEST-*;Module Info Cache;ServerCertificate;suggestions_cache.json FileKey2=%AppData%\Opera Software\Opera GX*|*-journal|RECURSE FileKey3=%AppData%\Opera Software\Opera GX*\*Cache*|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*.ldb;CURRENT;LOCK;MANIFEST-*;Module Info Cache;ServerCertificate;suggestions_cache.json FileKey5=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*-journal|RECURSE FileKey6=%AppData%\Opera Software\Opera GX*\_side_profiles\*\*Cache*|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Avatars|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera GX*\_side_profiles\*\blob_storage|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\_side_profiles\*\BudgetDatabase|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Download Service|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera GX*\_side_profiles\*\File System|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera GX*\_side_profiles\*\GCM Store|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Jump List Icons*|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera GX*\_side_profiles\*\JumpListIcons*|*|REMOVESELF FileKey15=%AppData%\Opera Software\Opera GX*\_side_profiles\*\optimization*|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Platform Notifications|*|REMOVESELF FileKey17=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Service Worker|*|REMOVESELF FileKey18=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Shared Dictionary\cache|*|REMOVESELF FileKey19=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey20=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey21=%AppData%\Opera Software\Opera GX*\Avatars|*|REMOVESELF FileKey22=%AppData%\Opera Software\Opera GX*\blob_storage|*|REMOVESELF FileKey23=%AppData%\Opera Software\Opera GX*\BudgetDatabase|*|REMOVESELF FileKey24=%AppData%\Opera Software\Opera GX*\Download Service|*|REMOVESELF FileKey25=%AppData%\Opera Software\Opera GX*\File System|*|REMOVESELF FileKey26=%AppData%\Opera Software\Opera GX*\GCM Store|*|REMOVESELF FileKey27=%AppData%\Opera Software\Opera GX*\Jump List Icons*|*|REMOVESELF FileKey28=%AppData%\Opera Software\Opera GX*\JumpListIcons*|*|REMOVESELF FileKey29=%AppData%\Opera Software\Opera GX*\optimization*|*|REMOVESELF FileKey30=%AppData%\Opera Software\Opera GX*\Platform Notifications|*|REMOVESELF FileKey31=%AppData%\Opera Software\Opera GX*\Service Worker|*|REMOVESELF FileKey32=%AppData%\Opera Software\Opera GX*\Shared Dictionary\cache|*|REMOVESELF FileKey33=%AppData%\Opera Software\Opera GX*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey34=%AppData%\Opera Software\Opera GX*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey35=%LocalAppData%\Opera Software\Opera*\*\*Cache*|*|REMOVESELF FileKey36=%LocalAppData%\Opera Software\Opera*\*Cache*|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Caches * Author=Winapp2.ini Project [Opera GX Default App Handlers *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|PreferredApps FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|PreferredApps Tags=OperaGX,Browser ID=Opera GX Default App Handlers * Author=Winapp2.ini Project [Opera GX Download History *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|DownloadMetadata FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|DownloadMetadata FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\shared_proto_db|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\shared_proto_db|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Download History * Author=Winapp2.ini Project [Opera GX DRM Data *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*\WidevineCdm|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera GX*\MediaFoundationCdmStore|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\WidevineCdm|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX DRM Data * Author=Winapp2.ini Project [Opera GX Extension Cookies *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|Extension Cookies FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|Extension Cookies Tags=OperaGX,Browser ID=Opera GX Extension Cookies * Author=Winapp2.ini Project [Opera GX Preferences Backups *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|*preferences.backup FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*preferences.backup Tags=OperaGX,Browser ID=Opera GX Preferences Backups * Author=Winapp2.ini Project [Opera GX Privacy Sandbox *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|*first_party_sets*;BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*first_party_sets*;BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\CookieReadinessList|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\_side_profiles\*\FirstPartySetsPreloaded|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Network|Trust Tokens* FileKey6=%AppData%\Opera Software\Opera GX*\_side_profiles\*\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera GX*\_side_profiles\*\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera GX*\_side_profiles\*\TrustTokenKeyCommitments|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\CookieReadinessList|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\FirstPartySetsPreloaded|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera GX*\Network|Trust Tokens* FileKey12=%AppData%\Opera Software\Opera GX*\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera GX*\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera GX*\TrustTokenKeyCommitments|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Privacy Sandbox * Author=Winapp2.ini Project [Opera GX Progressive Web Apps *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Web Applications|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\Web Applications|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Progressive Web Apps * Author=Winapp2.ini Project [Opera GX Saved Usernames & Passwords *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|Login Data* FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|Login Data* Tags=OperaGX,Browser ID=Opera GX Saved Usernames & Passwords * Author=Winapp2.ini Project [Opera GX Security & Threat Detection *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|DIPS* FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|DIPS* FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\CertificateRevocation|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\_side_profiles\*\ClientCertificates|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Crowd Deny|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Network|TransportSecurity* FileKey7=%AppData%\Opera Software\Opera GX*\_side_profiles\*\PKIMetadata|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Safe Browsing|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Safe Browsing Network|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\_side_profiles\*\SafetyTips|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera GX*\_side_profiles\*\SSLErrorAssistant|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Subresource Filter|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera GX*\_side_profiles\*\ZxcvbnData|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera GX*\CertificateRevocation|*|REMOVESELF FileKey15=%AppData%\Opera Software\Opera GX*\ClientCertificates|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera GX*\Crowd Deny|*|REMOVESELF FileKey17=%AppData%\Opera Software\Opera GX*\Network|TransportSecurity* FileKey18=%AppData%\Opera Software\Opera GX*\PKIMetadata|*|REMOVESELF FileKey19=%AppData%\Opera Software\Opera GX*\Safe Browsing|*|REMOVESELF FileKey20=%AppData%\Opera Software\Opera GX*\Safe Browsing Network|*|REMOVESELF FileKey21=%AppData%\Opera Software\Opera GX*\SafetyTips|*|REMOVESELF FileKey22=%AppData%\Opera Software\Opera GX*\SSLErrorAssistant|*|REMOVESELF FileKey23=%AppData%\Opera Software\Opera GX*\Subresource Filter|*|REMOVESELF FileKey24=%AppData%\Opera Software\Opera GX*\ZxcvbnData|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Security & Threat Detection * Author=Winapp2.ini Project [Opera GX Shopping Insights *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\chrome_cart_db|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*\commerce_subscription_db|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\coupon_db|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\_side_profiles\*\discount*_db|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera GX*\_side_profiles\*\parcel_tracking_db|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera GX*\chrome_cart_db|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera GX*\commerce_subscription_db|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera GX*\coupon_db|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\discount*_db|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\parcel_tracking_db|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Shopping Insights * Author=Winapp2.ini Project [Opera GX Storage Quota Manager *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|QuotaManager FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|QuotaManager Tags=OperaGX,Browser ID=Opera GX Storage Quota Manager * Author=Winapp2.ini Project [Opera GX Sync Data *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Sync Data|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\Sync Data|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Sync Data * Author=Winapp2.ini Project [Opera GX Telemetry *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Application|debug.log FileKey2=%AppData%\Opera Software\Application\SetupMetrics|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera GX*|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%AppData%\Opera Software\Opera GX*|*.pma;LOG;LOG.old|RECURSE FileKey5=%AppData%\Opera Software\Opera GX*\*BrowserMetrics|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey7=%AppData%\Opera Software\Opera GX*\_side_profiles\*|*.pma;LOG;LOG.old|RECURSE FileKey8=%AppData%\Opera Software\Opera GX*\_side_profiles\*\*BrowserMetrics|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Crash Reports|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Crashpad|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera GX*\_side_profiles\*\DataSharing|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Feature Engagement Tracker|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Traces|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey15=%AppData%\Opera Software\Opera GX*\_side_profiles\*\OriginTrials|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera GX*\_side_profiles\*\PersistentOriginTrials|*|REMOVESELF FileKey17=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Site Characteristics Database|*|REMOVESELF FileKey18=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Stability|*|REMOVESELF FileKey19=%AppData%\Opera Software\Opera GX*\_side_profiles\*\VideoDecodeStats|*|REMOVESELF FileKey20=%AppData%\Opera Software\Opera GX*\_side_profiles\*\WebRTC Logs|*|REMOVESELF FileKey21=%AppData%\Opera Software\Opera GX*\_side_profiles\*\WebrtcVideoStats|*|REMOVESELF FileKey22=%AppData%\Opera Software\Opera GX*\Crash Reports|*|REMOVESELF FileKey23=%AppData%\Opera Software\Opera GX*\Crashpad|*|REMOVESELF FileKey24=%AppData%\Opera Software\Opera GX*\DataSharing|*|REMOVESELF FileKey25=%AppData%\Opera Software\Opera GX*\Feature Engagement Tracker|*|REMOVESELF FileKey26=%AppData%\Opera Software\Opera GX*\Local Traces|*|REMOVESELF FileKey27=%AppData%\Opera Software\Opera GX*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey28=%AppData%\Opera Software\Opera GX*\OriginTrials|*|REMOVESELF FileKey29=%AppData%\Opera Software\Opera GX*\PersistentOriginTrials|*|REMOVESELF FileKey30=%AppData%\Opera Software\Opera GX*\Site Characteristics Database|*|REMOVESELF FileKey31=%AppData%\Opera Software\Opera GX*\Stability|*|REMOVESELF FileKey32=%AppData%\Opera Software\Opera GX*\VideoDecodeStats|*|REMOVESELF FileKey33=%AppData%\Opera Software\Opera GX*\WebRTC Logs|*|REMOVESELF FileKey34=%AppData%\Opera Software\Opera GX*\WebrtcVideoStats|*|REMOVESELF FileKey35=%ProgramFiles%\Opera Software\Application|debug.log FileKey36=%ProgramFiles%\Opera Software\Application\SetupMetrics|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Telemetry * Author=Winapp2.ini Project [Opera GX Web Browsing Cookies *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Network|Cookies*;Device Bound Sessions* FileKey2=%AppData%\Opera Software\Opera GX*\Network|Cookies*;Device Bound Sessions* Tags=OperaGX,Browser ID=Opera GX Web Browsing Cookies * Author=Winapp2.ini Project [Opera GX Web Browsing History *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=OperaGX,Browser ID=Opera GX Web Browsing History * Author=Winapp2.ini Project [Opera GX Web Browsing Session *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Extension State|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Sessions|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera GX*\Extension State|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera GX*\Sessions|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Web Browsing Session * Author=Winapp2.ini Project [Opera GX Web Storage *] DetectFile=%AppData%\Opera Software\Opera GX* FileKey1=%AppData%\Opera Software\Opera GX*\_side_profiles\*\IndexedDB|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Storage\*\IndexedDB\https*|* FileKey3=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Storage\*\Session Storage|* FileKey4=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera GX*\_side_profiles\*\Session Storage|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera GX*\_side_profiles\*\WebStorage|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera GX*\IndexedDB|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera GX*\Local Storage\*\IndexedDB\https*|* FileKey11=%AppData%\Opera Software\Opera GX*\Local Storage\*\Session Storage|* FileKey12=%AppData%\Opera Software\Opera GX*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey13=%AppData%\Opera Software\Opera GX*\Local Storage\*\WebStorage|*|RECURSE FileKey14=%AppData%\Opera Software\Opera GX*\Local Storage\leveldb|*|REMOVESELF FileKey15=%AppData%\Opera Software\Opera GX*\Session Storage|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera GX*\WebStorage|*|REMOVESELF Tags=OperaGX,Browser ID=Opera GX Web Storage * Author=Winapp2.ini Project [Opera Preferences Backups *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*|assistant_prefs.json.backup FileKey2=%AppData%\Opera Software\Opera*\*|*Preferences.backup Tags=Opera,Browser ID=Opera Preferences Backups * Author=Winapp2.ini Project [Opera Privacy Sandbox *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*|*first_party_sets* FileKey2=%AppData%\Opera Software\Opera*\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%AppData%\Opera Software\Opera*\*\Network|Trust Tokens* FileKey4=%AppData%\Opera Software\Opera*\CookieReadinessList|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera*\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera*\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera*\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera*\TrustTokenKeyCommitments|*|REMOVESELF Tags=Opera,Browser ID=Opera Privacy Sandbox * Author=Winapp2.ini Project [Opera Progressive Web Apps *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\Web Applications|*|REMOVESELF Tags=Opera,Browser ID=Opera Progressive Web Apps * Author=Winapp2.ini Project [Opera Saved Usernames & Passwords *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|Login Data* Tags=Opera,Browser ID=Opera Saved Usernames & Passwords * Author=Winapp2.ini Project [Opera Security & Threat Detection *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|DIPS* FileKey2=%AppData%\Opera Software\Opera*\*\ClientCertificates|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera*\*\Network|TransportSecurity* FileKey4=%AppData%\Opera Software\Opera*\*\Safe Browsing Network|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera*\CertificateRevocation|*|REMOVESELF FileKey6=%AppData%\Opera Software\Opera*\Crowd Deny|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera*\PKIMetadata|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera*\Safe Browsing|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera*\SafetyTips|*|REMOVESELF FileKey10=%AppData%\Opera Software\Opera*\SSLErrorAssistant|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera*\Subresource Filter|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera*\ZxcvbnData|*|REMOVESELF Tags=Opera,Browser ID=Opera Security & Threat Detection * Author=Winapp2.ini Project [Opera Shopping Insights *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\chrome_cart_db|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera*\*\commerce_subscription_db|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera*\*\coupon_db|*|REMOVESELF FileKey4=%AppData%\Opera Software\Opera*\*\discount*_db|*|REMOVESELF FileKey5=%AppData%\Opera Software\Opera*\*\parcel_tracking_db|*|REMOVESELF Tags=Opera,Browser ID=Opera Shopping Insights * Author=Winapp2.ini Project [Opera Storage Quota Manager *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|QuotaManager Tags=Opera,Browser ID=Opera Storage Quota Manager * Author=Winapp2.ini Project [Opera Sync Data *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\Sync Data|*|REMOVESELF Tags=Opera,Browser ID=Opera Sync Data * Author=Winapp2.ini Project [Opera Telemetry *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Application|debug.log FileKey2=%AppData%\Opera Software\Application\SetupMetrics|*|REMOVESELF FileKey3=%AppData%\Opera Software\Opera*|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%AppData%\Opera Software\Opera*|*.pma;LOG;LOG.old|RECURSE FileKey5=%AppData%\Opera Software\Opera*\*|*.log FileKey6=%AppData%\Opera Software\Opera*\*\Crash Reports|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera*\*\DataSharing|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera*\*\Feature Engagement Tracker|*|REMOVESELF FileKey9=%AppData%\Opera Software\Opera*\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey10=%AppData%\Opera Software\Opera*\*\PersistentOriginTrials|*|REMOVESELF FileKey11=%AppData%\Opera Software\Opera*\*\Site Characteristics Database|*|REMOVESELF FileKey12=%AppData%\Opera Software\Opera*\*\VideoDecodeStats|*|REMOVESELF FileKey13=%AppData%\Opera Software\Opera*\*\WebRTC Logs|*|REMOVESELF FileKey14=%AppData%\Opera Software\Opera*\*\WebrtcVideoStats|*|REMOVESELF FileKey15=%AppData%\Opera Software\Opera*\*BrowserMetrics|*|REMOVESELF FileKey16=%AppData%\Opera Software\Opera*\Crash Reports|*|REMOVESELF FileKey17=%AppData%\Opera Software\Opera*\Crashpad|*|REMOVESELF FileKey18=%AppData%\Opera Software\Opera*\Local Traces|*|REMOVESELF FileKey19=%AppData%\Opera Software\Opera*\OriginTrials|*|REMOVESELF FileKey20=%AppData%\Opera Software\Opera*\Stability|*|REMOVESELF FileKey21=%ProgramFiles%\Opera Software\Application|debug.log FileKey22=%ProgramFiles%\Opera Software\Application\SetupMetrics|*|REMOVESELF Tags=Opera,Browser ID=Opera Telemetry * Author=Winapp2.ini Project [Opera Web Browsing Cookies *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\Network|Cookies*;Device Bound Sessions* Tags=Opera,Browser ID=Opera Web Browsing Cookies * Author=Winapp2.ini Project [Opera Web Browsing History *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Opera,Browser ID=Opera Web Browsing History * Author=Winapp2.ini Project [Opera Web Browsing Session *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\Extension State|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera*\*\Sessions|*|REMOVESELF Tags=Opera,Browser ID=Opera Web Browsing Session * Author=Winapp2.ini Project [Opera Web Storage *] DetectFile=%AppData%\Opera Software\Opera* FileKey1=%AppData%\Opera Software\Opera*\*\IndexedDB|*|REMOVESELF FileKey2=%AppData%\Opera Software\Opera*\*\Local Storage\*\IndexedDB\https*|* FileKey3=%AppData%\Opera Software\Opera*\*\Local Storage\*\Session Storage|* FileKey4=%AppData%\Opera Software\Opera*\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%AppData%\Opera Software\Opera*\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%AppData%\Opera Software\Opera*\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%AppData%\Opera Software\Opera*\*\Session Storage|*|REMOVESELF FileKey8=%AppData%\Opera Software\Opera*\*\WebStorage|*|REMOVESELF Tags=Opera,Browser ID=Opera Web Storage * Author=Winapp2.ini Project [OptimumLink *] DetectFile=%AppData%\OptimumLink FileKey1=%AppData%\OptimumLink|TrayLogs*.* Tags=ccapps ID=OptimumLink * Author=Winapp2.ini Project [Oracle Java *] Detect1=HKLM\Software\JavaSoft\Java Plug-in Detect2=HKLM\Software\JavaSoft\Java Runtime Environment Detect3=HKLM\Software\JavaSoft\Java Web Start DetectFile=%ProgramData%\Oracle\Java FileKey1=%AppData%\Sun\Java\Deployment\SystemCache|*|RECURSE FileKey2=%AppData%\Sun\Java\jre*|*|REMOVESELF FileKey3=%LocalAppData%\javasharedresources|* FileKey4=%LocalAppData%\Sun\Java\Deployment\*Cache|*|RECURSE FileKey5=%ProgramData%\Oracle\Java\.oracle_jre_usage|* FileKey6=%ProgramData%\Oracle\Java\installcache|*|RECURSE FileKey7=%ProgramFiles%\Java\jre*|*PATCH.ERR FileKey8=%ProgramFiles%\Java\jre*\lib\security|*.bak FileKey9=%SystemDrive%\Users\*\.oracle_jre_usage|*|REMOVESELF FileKey10=%UserProfile%\AppData\LocalLow\Oracle\Java\jdk*|*|REMOVESELF FileKey11=%UserProfile%\AppData\LocalLow\Oracle\Java\jre*|*|REMOVESELF FileKey12=%UserProfile%\AppData\LocalLow\Sun\Java\Deployment\SystemCache|*|RECURSE FileKey13=%UserProfile%\AppData\LocalLow\Sun\Java\Deployment\tmp|*|RECURSE FileKey14=%UserProfile%\AppData\LocalLow\Sun\Java\jdk*|*|REMOVESELF FileKey15=%UserProfile%\AppData\LocalLow\Sun\Java\jre*|*|REMOVESELF FileKey16=%WinDir%\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\*Cache|*|RECURSE FileKey17=%WinDir%\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\*Cache|*|RECURSE Tags=ccinternet ID=Oracle Java * Author=Winapp2.ini Project [Oracle VirtualBox *] DetectFile=%UserProfile%\.VirtualBox FileKey1=%ProgramData%\VirtualBox|*.log* FileKey2=%UserProfile%\.VirtualBox|*.log* FileKey3=%UserProfile%\VirtualBox VMs\*\Logs|*.log* FileKey4=%WinDir%\System32\config\systemprofile\AppData\Roaming\VirtualBox|*.log Tags=ccutil ID=Oracle VirtualBox * Author=Winapp2.ini Project [Osmos *] Detect=HKCU\Software\Valve\Steam\Apps\29180 FileKey1=%UserProfile%\Documents\Osmos|osmos.log Tags=ccapps ID=Osmos * Author=Winapp2.ini Project [OSO Update *] DetectFile=%UserProfile%\CC-Logs FileKey1=%UserProfile%\CC-Logs\osoupd|*.log Tags=ccinternet ID=OSO Update * Author=Winapp2.ini Project [osu! *] Detect=HKCU\Software\Osu! FileKey1=%LocalAppData%\osu!\logs|* FileKey2=%ProgramFiles%\Osu!|debug-import.txt Tags=ccapps ID=osu! * Author=Winapp2.ini Project [Outer Wilds *] DetectFile=%UserProfile%\AppData%\LocalLow\Mobius Digital\Outer Wilds FileKey1=%UserProfile%\AppData%\LocalLow\Mobius Digital\Outer Wilds|*.log Tags=ccapps ID=Outer Wilds * Author=Winapp2.ini Project [Outlast *] DetectFile=%UserProfile%\Documents\My Games\Outlast* FileKey1=%UserProfile%\Documents\My Games\Outlast*\OLGame\Logs|* Tags=ccapps ID=Outlast * Author=Winapp2.ini Project [Outward *] DetectFile=%UserProfile%\AppData\LocalLow\Nine Dots Studio\Outward FileKey1=%UserProfile%\AppData\LocalLow\Nine Dots Studio\Outward|*log.txt Tags=ccapps ID=Outward * Author=Winapp2.ini Project [Oxygen 14 *] DetectFile=%ProgramFiles%\Oxygen XML Editor 14 FileKey1=%ProgramFiles%\Oxygen XML Editor 14|*.log;*.properties FileKey2=%ProgramFiles%\Oxygen XML Editor 14\.install4j|*.log FileKey3=%ProgramFiles%\Oxygen XML Editor 14\dicts|*.html;*.txt FileKey4=%ProgramFiles%\Oxygen XML Editor 14\lib|*.txt|RECURSE ExcludeKey1=FILE|%ProgramFiles%\Oxygen XML Editor 14\.install4j\|files.log Tags=ccapps ID=Oxygen 14 * Author=Winapp2.ini Project [PACE Eden *] DetectFile=%LocalAppData%\PACE\Eden FileKey1=%LocalAppData%\PACE\Eden\Logs|*|RECURSE FileKey2=%LocalAppData%\PaceAp\iLok License Manager\Cache\Images|*|RECURSE FileKey3=%ProgramData%\PACE\Eden\LdLogs|* Tags=ccapps ID=PACE Eden * Author=Winapp2.ini Project [Pacific Storm *] Detect=HKCU\Software\Valve\Steam\Apps\11250 DetectFile=%ProgramFiles%\Buka\Pacific Storm FileKey1=%ProgramFiles%\Buka\Pacific Storm|*.log|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\Common\Pacific Storm*|*.log|RECURSE Tags=ccapps ID=Pacific Storm * Author=Winapp2.ini Project [PageTech PCLReader *] Detect=HKLM\SOFTWARE\PageTech DetectFile=%ProgramData%\PageTech FileKey1=%ProgramData%\PageTech|*.log Tags=ccutil ID=PageTech PCLReader * Author=Winapp2.ini Project [Painkiller Hell & Damnation *] Detect=HKCU\Software\Valve\Steam\Apps\214870 FileKey1=%UserProfile%\Documents\My Games\Painkiller Hell and Damnation\PKHDGame\Logs|* Tags=ccapps ID=Painkiller Hell & Damnation * Author=Winapp2.ini Project [Paint Shop Pro *] Detect=HKCU\Software\Jasc\Paint Shop Pro 6 FileKey1=%ProgramFiles%\Jasc Software Inc\Paint Shop Pro*\Cache|* RegKey1=HKCU\Software\Jasc\Paint Shop Pro 6\Recent File List Tags=ccmedia ID=Paint Shop Pro * Author=Winapp2.ini Project [Paint.NET *] Detect=HKCU\Software\Paint.NET FileKey1=%AppData%\CustomBrushesMini\ThumbCache|*|RECURSE FileKey2=%LocalAppData%\Paint.NET|*|RECURSE RegKey1=HKCU\Software\Paint.NET|LastFileDialogDirectory Tags=ccapps ID=Paint.NET * Author=Winapp2.ini Project [PaintTool SAI *] DetectFile=%AppData%\SYSTEMAX Software Development\SAI* FileKey1=%AppData%\SYSTEMAX Software Development\SAI*|recent.txt FileKey2=%UserProfile%\Documents\SYSTEMAX Software Development\SAI*\error|*.txt Tags=ccmedia ID=PaintTool SAI * Author=Winapp2.ini Project [Pale Moon Autocomplete History *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|formhistory* Tags=ccapps ID=Pale Moon Autocomplete History * Author=Winapp2.ini Project [Pale Moon Autofill Data *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|autofill-profiles.json Tags=ccapps ID=Pale Moon Autofill Data * Author=Winapp2.ini Project [Pale Moon Bookmark Backups *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Pale Moon Bookmark Backups * Author=Winapp2.ini Project [Pale Moon Bookmark Favicons *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|favicons* Tags=ccapps ID=Pale Moon Bookmark Favicons * Author=Winapp2.ini Project [Pale Moon Caches *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\notificationstore|* FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\security_state|* FileKey5=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\shader-cache|* FileKey6=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Moonchild Productions\Pale Moon\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Moonchild Productions\Pale Moon\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Moonchild Productions\Pale Moon\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Pale Moon Caches * Author=Winapp2.ini Project [Pale Moon Privacy Sandbox *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Pale Moon Privacy Sandbox * Author=Winapp2.ini Project [Pale Moon Saved Usernames & Passwords *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|key4.db;logins.json Tags=ccapps ID=Pale Moon Saved Usernames & Passwords * Author=Winapp2.ini Project [Pale Moon Synced Tabs *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|synced-tabs.db* Tags=ccapps ID=Pale Moon Synced Tabs * Author=Winapp2.ini Project [Pale Moon Telemetry *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon|*.log|RECURSE FileKey2=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\crashes|* FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\minidumps|* FileKey6=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\weave\logs|* Tags=ccapps ID=Pale Moon Telemetry * Author=Winapp2.ini Project [Pale Moon Web Browsing Cookies *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|cookies* Tags=ccapps ID=Pale Moon Web Browsing Cookies * Author=Winapp2.ini Project [Pale Moon Web Browsing Session *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|session*.json* Tags=ccapps ID=Pale Moon Web Browsing Session * Author=Winapp2.ini Project [Pale Moon Web Browsing Session Backups *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Pale Moon Web Browsing Session Backups * Author=Winapp2.ini Project [Pale Moon Web Storage *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Pale Moon Web Storage * Author=Winapp2.ini Project [Pale Moon Website Permissions *] DetectFile=%AppData%\Moonchild Productions\Pale Moon\Profiles FileKey1=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|permissions.sqlite Tags=ccapps ID=Pale Moon Website Permissions * Author=Winapp2.ini Project [Palia *] DetectFile=%LocalAppData%\Palia FileKey1=%LocalAppData%\Palia\Saved\Logs|* FileKey2=%LocalAppData%\Palia\Saved\webcache*\*cache*|*|RECURSE Tags=ccapps ID=Palia * Author=Winapp2.ini Project [Paltalk Messenger *] DetectFile=%ProgramFiles%\Paltalk Messenger FileKey1=%AppData%\Paltalk|*|RECURSE Tags=ccinternet ID=Paltalk Messenger * Author=Winapp2.ini Project [Panasonic HD Writer *] DetectFile=%LocalAppData%\Panasonic\HD Writer* FileKey1=%LocalAppData%\Panasonic\HD Writer*\Log|* FileKey2=%ProgramData%\Panasonic\HD Writer*|EventLog.evl|RECURSE Tags=ccmedia ID=Panasonic HD Writer * Author=Winapp2.ini Project [Panda Antivirus *] Detect=HKLM\Software\Panda Security FileKey1=%ProgramData%\Panda Security\Panda Devices Agent\Logs|* FileKey2=%ProgramData%\Panda Security\Panda Security Protection|*.log FileKey3=%ProgramData%\Panda Security\Panda Security Protection\Logs|* FileKey4=%ProgramData%\Panda Security\Panda Security Protection\SRFRepository|*.bak FileKey5=%ProgramData%\Panda Security\PSLogs|*.log Tags=ccutil ID=Panda Antivirus * Author=Winapp2.ini Project [Pandion *] Detect=HKCU\Software\Pandion FileKey1=%AppData%\Pandion\Avatars|*|RECURSE FileKey2=%AppData%\Pandion\Message Cache|*|RECURSE Tags=ccinternet ID=Pandion * Author=Winapp2.ini Project [Pandion Chat Logs *] Detect=HKCU\Software\Pandion FileKey1=%AppData%\Pandion\Profiles|*.buffer;*.log|RECURSE Tags=ccinternet ID=Pandion Chat Logs * Author=Winapp2.ini Project [Paradox Interactive Launcher *] DetectFile1=%AppData%\Launcher-main DetectFile2=%LocalAppData%\Paradox Interactive\Launcher* FileKey1=%AppData%\Launcher-main|*-journal;*.old;LOG;Network Persistent State;QuotaManager|RECURSE FileKey2=%AppData%\Launcher-main\*Cache|* FileKey3=%AppData%\Launcher-main\blob_storage|*|RECURSE FileKey4=%AppData%\Paradox Interactive\launcher-v2\cache|* FileKey5=%AppData%\Paradox Launcher\Logs|* FileKey6=%LocalAppData%\Paradox Interactive\Launcher*|* FileKey7=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data|*-journal;*.old;LOG;Network Persistent State;QuotaManager|RECURSE FileKey8=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data\*Cache|*|REMOVESELF FileKey9=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data\blob_storage|*|RECURSE FileKey10=%LocalAppData%\Paradox Interactive\Launcher*\Logs|* FileKey11=%UserProfile%\Documents\Paradox Interactive\CrashReporter\Logs|* FileKey12=%UserProfile%\Documents\Paradox Interactive\CrashReporter\ShaderCache\dx*|*|RECURSE Tags=ccapps ID=Paradox Interactive Launcher * Author=Winapp2.ini Project [Paragon Software *] DetectFile=%ProgramFiles%\Paragon Software FileKey1=%ProgramData%\clonehdd|*.log FileKey2=%ProgramData%\converthfs|*.log FileKey3=%ProgramData%\createpart|*.log FileKey4=%ProgramData%\deletepart|*.log FileKey5=%ProgramData%\explauncher|*.log FileKey6=%ProgramData%\formatpart|*.log FileKey7=%ProgramData%\ftw|*.log FileKey8=%ProgramData%\launcher|*.log FileKey9=%ProgramData%\logsaver|*.log FileKey10=%ProgramData%\migrateos|*.log FileKey11=%ProgramData%\redistpart|*.log FileKey12=%ProgramData%\vmadjust|*.log FileKey13=%ProgramData%\vmcreate|*.log FileKey14=%ProgramData%\wipe|*.log FileKey15=%ProgramFiles%\Paragon Software\*|*.log;*.txt|RECURSE FileKey16=%SystemDrive%\Documents and Settings\LocalService|objsrv.log Tags=ccutil ID=Paragon Software * Author=Winapp2.ini Project [Parallel Password Recovery *] Detect=HKCU\Software\Parallel Password Recovery FileKey1=%ProgramFiles%\Parallel Password Recovery|*.log RegKey1=HKCU\Software\Parallel Password Recovery\Parallel recovery server\1.0|Last stored job RegKey2=HKCU\Software\Parallel Password Recovery\PPR GUI manager\1.0|Last password definition file path RegKey3=HKCU\Software\Parallel Password Recovery\PPR GUI manager\1.0|Last test path RegKey4=HKCU\Software\Parallel Password Recovery\PPR GUI manager\1.0|Path to password definition file RegKey5=HKCU\Software\Parallel Password Recovery\PPR GUI manager\1.0|Path to test file RegKey6=HKLM\Software\Parallel Password Recovery\Parallel recovery server\1.0|Last stored job RegKey7=HKLM\Software\Parallel Password Recovery\PPR GUI manager\1.0|Last test path RegKey8=HKLM\Software\Parallel Password Recovery\PPR GUI manager\1.0|Path to password definition file RegKey9=HKLM\Software\Parallel Password Recovery\PPR GUI manager\1.0|Path to test file RegKey10=HKLM\Software\Wow6432Node\Parallel Password Recovery\Parallel recovery server\1.0|Last stored job RegKey11=HKLM\Software\Wow6432Node\Parallel Password Recovery\PPR GUI manager\1.0|Last password definition file path RegKey12=HKLM\Software\Wow6432Node\Parallel Password Recovery\PPR GUI manager\1.0|Last test path RegKey13=HKLM\Software\Wow6432Node\Parallel Password Recovery\PPR GUI manager\1.0|Path to password definition file RegKey14=HKLM\Software\Wow6432Node\Parallel Password Recovery\PPR GUI manager\1.0|Path to test file Tags=ccutil ID=Parallel Password Recovery * Author=Winapp2.ini Project [Paramount Dynamic *] DetectFile=%LocalAppData%\Microsoft\Windows\Themes\ParamountDynamic.theme Warning=This will cause you to redownload the Paramount Dynamic RSS file. FileKey1=%LocalAppData%\Microsoft\Feeds|http~c~f~fthemeserver~dmicrosoft~dcom~fdefault~daspx~mp*Paramount* Tags=ccmedia ID=Paramount Dynamic * Author=Winapp2.ini Project [Paranormal Agency *] DetectFile=%AppData%\Shape Games\Paranormal_v* FileKey1=%AppData%\Shame Games\Paranormal_v*\logs|* Tags=ccapps ID=Paranormal Agency * Author=Winapp2.ini Project [Parsec *] DetectFile=%AppData%\Parsec FileKey1=%AppData%\Parsec|log.txt Tags=ccinternet ID=Parsec * Author=Winapp2.ini Project [Partner Application *] DetectFile=%ProgramData%\Partner FileKey1=%ProgramData%\Partner|*.log Tags=ccinternet ID=Partner Application * Author=Winapp2.ini Project [Passware Encryption Analyzer *] DetectFile1=%AppData%\Passware\EncryptionAnalyzer DetectFile2=%ProgramFiles%\Passware\Encryption Analyzer* FileKey1=%AppData%\EncryptionAnalyzer\logs|* FileKey2=%AppData%\Passware\EncryptionAnalyzer\*|config.json;Network Persistent State FileKey3=%AppData%\Passware\EncryptionAnalyzer\*\*Cache|*|RECURSE FileKey4=%AppData%\Passware\EncryptionAnalyzer\*\blob_storage|*|RECURSE FileKey5=%AppData%\Passware\EncryptionAnalyzer\*\Local Storage\leveldb|*.old;LOG FileKey6=%AppData%\Passware\EncryptionAnalyzer\*\logs|* FileKey7=%AppData%\Passware\EncryptionAnalyzer\*\Session Storage|*.old;LOG FileKey8=%AppData%\PasswareEncryptionAnalyzer\logs|* Tags=ccapps ID=Passware Encryption Analyzer * Author=Winapp2.ini Project [Passware Search Index Examiner *] DetectFile=%ProgramFiles%\Passware\Search Index Examiner* FileKey1=%AppData%\Passware\SearchIndexExaminer|Settings.bin Tags=ccutil ID=Passware Search Index Examiner * Author=Winapp2.ini Project [Patch My PC *] DetectFile=%LocalAppData%\Patch_My_PC,_LLC FileKey1=%LocalAppData%\Patch_My_PC,_LLC|*|RECURSE Tags=ccutil ID=Patch My PC * Author=Winapp2.ini Project [Patch Quest *] DetectFile=%UserProfile%\AppData\LocalLow\Lychee Game Labs\Patch Quest FileKey1=%UserProfile%\AppData\LocalLow\Lychee Game Labs\Patch Quest|*.log FileKey2=%UserProfile%\AppData\LocalLow\Lychee Game Labs\Patch Quest\Unity|*|REMOVESELF Tags=ccapps ID=Patch Quest * Author=Winapp2.ini Project [Path of Exile *] Detect1=HKCU\Software\GrindingGearGames\Path of Exile Detect2=HKCU\Software\Valve\Steam\Apps\238960 FileKey1=%ProgramFiles%\Grinding Gear Games\Path of Exile\Logs|* FileKey2=%ProgramFiles%\Steam\steamapps\common\Path of Exile\logs|* FileKey3=%UserProfile%\Documents\My Games\Path of Exile\Minimap|* Tags=ccapps ID=Path of Exile * Author=Winapp2.ini Project [PAYDAY 2 *] Detect=HKCU\Software\Valve\Steam\Apps\218620 DetectFile=%LocalAppData%\PAYDAY 2 FileKey1=%LocalAppData%\PAYDAY 2|crash*.txt Tags=ccapps ID=PAYDAY 2 * Author=Winapp2.ini Project [PC Doctor *] DetectFile=%ProgramFiles%\PC-Doctor For Windows FileKey1=%ProgramFiles%\PC-Doctor For Windows\Logs|* Tags=ccutil ID=PC Doctor * Author=Winapp2.ini Project [PC Optimizer Pro *] DetectFile=%ProgramData%\PC optimizer pro FileKey1=%ProgramData%\PC Optimizer Pro\Logs|* Tags=ccutil ID=PC Optimizer Pro * Author=Winapp2.ini Project [PC TechZone Merlin InstantFeedback *] DetectFile=%ProgramFiles%\PC TechZone\Merlin InstantFeedback FileKey1=%ProgramFiles%\PC TechZone\Merlin InstantFeedback|*.tmp;*Log.txt;seller.txt FileKey2=%ProgramFiles%\PC TechZone\Merlin InstantFeedback\Logs|* Tags=ccutil ID=PC TechZone Merlin InstantFeedback * Author=Winapp2.ini Project [PC Trek Advanced Password Recovery Suite *] DetectFile=%ProgramFiles%\Advanced Password Recovery Suite FileKey1=%ProgramFiles%\Advanced Password Recovery Suite|dscnt.exe Tags=ccapps ID=PC Trek Advanced Password Recovery Suite * Author=Winapp2.ini Project [PCMark 10 *] DetectFile=%UserProfile%\Documents\PCMark 10 FileKey1=%UserProfile%\Documents\PCMark 10|*|REMOVESELF Tags=ccutil ID=PCMark 10 * Author=Winapp2.ini Project [PCSX2 *] DetectFile=%UserProfile%\Documents\PCSX2 FileKey1=%UserProfile%\Documents\PCSX2\logs|*|RECURSE FileKey2=%UserProfile%\Documents\PCSX2\snaps|*|RECURSE Tags=ccapps ID=PCSX2 * Author=Winapp2.ini Project [PCWinBooster *] DetectFile=%AppData%\Soft4Boost\PCWinBooster* FileKey1=%AppData%\Soft4Boost\Logs|*|RECURSE Tags=ccutil ID=PCWinBooster * Author=Winapp2.ini Project [PDF-XChange *] Detect1=HKCU\Software\Tracker Software\PDFViewer Detect2=HKCU\Software\Tracker Software\PDFXEditor FileKey1=%LocalAppData%\Tracker Software\LiveUpdate\Updates|* FileKey2=%ProgramData%\PDF-XChange\Updater\InstallPackages|* FileKey3=%ProgramData%\Tracker Software\PDFXShellExt\Ifilter\Temp|*.tmp FileKey4=%ProgramData%\Tracker Software\TrackerUpdate|TrackerUpdate.exe.del FileKey5=%ProgramData%\Tracker Software\TrackerUpdate\Download|* RegKey1=HKCU\Software\Tracker Software\PDFViewer\Documents\LastOpened Tags=ccapps ID=PDF-XChange * Author=Winapp2.ini Project [PDF Annotator *] Detect=HKCU\Software\GRAHL\PDFAnnotator RegKey1=HKCU\Software\GRAHL\PDFAnnotator\3.0\Files\MRUItems RegKey2=HKCU\Software\GRAHL\PDFAnnotator\4.0\Files\MRUItems Tags=ccapps ID=PDF Annotator * Author=Winapp2.ini Project [PDF Architect *] DetectFile1=%AppData%\PDF Architect* DetectFile2=%AppData%\pdfforge_gmbh\PDF_Architect* FileKey1=%AppData%\PDF Architect*\Logs|* FileKey2=%AppData%\pdfforge_gmbh\PDF_Architect*\minidump|*.dmp|RECURSE Tags=ccapps ID=PDF Architect * Author=Winapp2.ini Project [PDF Editor 4 *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PDF Editor 4 FileKey1=%ProgramFiles%\PDF Editor 4|*.diz;*.log Tags=ccutil ID=PDF Editor 4 * Author=Winapp2.ini Project [PDF Explorer *] Detect=HKCU\Software\PDFExplorer RegKey1=HKCU\Software\PDFExplorer\Options|LastDiskTreeFolder RegKey2=HKCU\Software\PDFExplorer\Options|ScanGridStartupFolder Tags=ccapps ID=PDF Explorer * Author=Winapp2.ini Project [PDF24 Creator *] DetectFile=%ProgramFiles%\PDF24 FileKey1=%ProgramFiles%\PDF24|*.log Tags=ccapps ID=PDF24 Creator * Author=Winapp2.ini Project [PDFCreator *] DetectFile=%LocalAppData%\PDFForge\PDFCreator FileKey1=%AppData%\pdfforge\Images2PDF|Print*-*.log FileKey2=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF FileKey3=%LocalAppData%\PDFCreator|PDFCreator.log FileKey4=%LocalAppData%\PDFForge\PDFCreator|PDFCreatorHistory.json FileKey5=%ProgramFiles%\PDFCreator|SetupLog.txt RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory Tags=ccapps ID=PDFCreator * Author=Winapp2.ini Project [PDFill PDF Tools *] DetectFile=%ProgramFiles%\PlotSoft\PDFill_PDF_Tools FileKey1=%ProgramFiles%\PlotSoft\PDFill_PDF_Tools\download|gs.zip Tags=ccapps ID=PDFill PDF Tools * Author=Winapp2.ini Project [PDFsam *] DetectFile1=%AppData%\PDFsam Enhanced* DetectFile2=%ProgramData%\PDFsam Basic FileKey1=%AppData%\PDFsam Enhanced*\logs|*.htm FileKey2=%ProgramData%\PDFsam Basic|*.msi FileKey3=%ProgramData%\PDFsam Enhanced*\Installation|*.exe;*.msi FileKey4=%ProgramData%\PDFsam Enhanced*\Installation\logs|* Tags=ccapps ID=PDFsam * Author=Winapp2.ini Project [PDFStreamDumper *] Detect=HKCU\Software\VB and VBA Program Settings\PDFStreamDumper RegKey1=HKCU\Software\VB and VBA Program Settings\PDFStreamDumper\Settings|LastFile RegKey2=HKCU\Software\VB and VBA Program Settings\PDFStreamDumper\Settings|lastFind RegKey3=HKCU\Software\VB and VBA Program Settings\PDFStreamDumper\Settings|lastReplace Tags=ccutil ID=PDFStreamDumper * Author=Winapp2.ini Project [PE Module Explorer *] Detect=HKCU\Software\Woozle\PE Module Explorer RegKey1=HKCU\Software\Woozle\PE Module Explorer\Recent Files Tags=ccutil ID=PE Module Explorer * Author=Winapp2.ini Project [PeaZip *] DetectFile=%ProgramFiles%\PeaZip FileKey1=%ProgramFiles%\PeaZip\res|note.txt|RECURSE Tags=ccutil ID=PeaZip * Author=Winapp2.ini Project [Peerblock *] DetectFile=%ProgramFiles%\Peerblock FileKey1=%ProgramFiles%\Peerblock|*.bak;*.log;cache.p2b;History.db FileKey2=%ProgramFiles%\Peerblock\lists|*.list.failed* Tags=ccutil ID=Peerblock * Author=Winapp2.ini Project [Pegasus Mail *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pegasus Mail FileKey1=%SystemDrive%\PMAIL\MAIL|SYSLOG.PM FileKey2=%SystemDrive%\PMAIL\Programs|*.log Tags=ccutil ID=Pegasus Mail * Author=Winapp2.ini Project [Pelles C *] Detect=HKCU\Software\Pelle Orinius\PellesC RegKey1=HKCU\Software\Pelle Orinius\PellesC\Recent File List RegKey2=HKCU\Software\Pelle Orinius\PellesC\Recent Project List RegKey3=HKCU\Software\Pelle Orinius\PellesC\Recent Search List Tags=ccapps ID=Pelles C * Author=Winapp2.ini Project [Penumbra Black Plague *] DetectFile=%UserProfile%\Documents\Penumbra* FileKey1=%UserProfile%\Documents\Penumbra*\*|*.log Tags=ccapps ID=Penumbra Black Plague * Author=Winapp2.ini Project [PerfectDisk *] Detect=HKCU\Software\Raxco\PerfectDisk FileKey1=%ProgramData%\Raxco\PerfectDisk\*|*.log;*.txt;PDBootLog Tags=ccutil ID=PerfectDisk * Author=Winapp2.ini Project [PerfectKeyboard *] DetectFile=%UserProfile%\Documents\PerfectKeyboardFiles FileKey1=%UserProfile%\Documents\PerfectKeyboardFiles\Temp|log.txt Tags=ccapps ID=PerfectKeyboard * Author=Winapp2.ini Project [PerfectRegistry *] Detect=HKCU\Software\Raxco\PerfectRegistry DetectFile=%ProgramFiles%\Raxco\PerfectRegistry FileKey1=%AppData%\Raxco\PerfectRegistry|*.log;TempHLList.rcp Tags=ccutil ID=PerfectRegistry * Author=Winapp2.ini Project [PerfectUpdater *] Detect=HKCU\Software\Raxco\PerfectUpdater FileKey1=%AppData%\Raxco\PerfectUpdater|*.log FileKey2=%AppData%\Raxco\PerfectUpdater\Backup|* FileKey3=%AppData%\Raxco\PerfectUpdater\Download|* Tags=ccutil ID=PerfectUpdater * Author=Winapp2.ini Project [Performance Maintainer *] DetectFile=%ProgramFiles%\PC Starters\Performance Maintainer FileKey1=%ProgramFiles%\PC Starters\Performance Maintainer\Backups|*|RECURSE FileKey2=%ProgramFiles%\PC Starters\Performance Maintainer\log*|*|RECURSE Tags=ccutil ID=Performance Maintainer * Author=Winapp2.ini Project [Pet Pals: Animal Doctor *] Detect=HKLM\Software\Legacy Interactive\Pet Pals FileKey1=%ProgramFiles%\Legacy Interactive\Pet Pals Animal Doctor|*.log FileKey2=%ProgramFiles%\Legacy Interactive\Pet Pals Animal Doctor\jre|* FileKey3=%ProgramFiles%\Legacy Interactive\Pet Pals Animal Doctor\temp|*|REMOVESELF ExcludeKey1=PATH|%ProgramFiles%\Legacy Interactive\Pet Pals Animal Doctor\jre\bin\|* ExcludeKey2=PATH|%ProgramFiles%\Legacy Interactive\Pet Pals Animal Doctor\jre\lib\|* Tags=ccapps ID=Pet Pals: Animal Doctor * Author=Winapp2.ini Project [pgAdmin *] DetectFile=%AppData%\pgAdmin FileKey1=%AppData%\pgAdmin|pgadmin*.log Tags=ccutil ID=pgAdmin * Author=Winapp2.ini Project [phase-6 *] DetectFile=%UserProfile%\.phase-6 FileKey1=%UserProfile%\.phase-6|window-position.txt FileKey2=%UserProfile%\.phase-6\logs|phase-6.log Tags=ccapps ID=phase-6 * Author=Winapp2.ini Project [Phorest *] Detect=HKCU\Software\FutureFog\Phorest\Options RegKey1=HKCU\Software\FutureFog\Phorest\Layout|SelectionHeight RegKey2=HKCU\Software\FutureFog\Phorest\Layout|SelectionLeft RegKey3=HKCU\Software\FutureFog\Phorest\Layout|SelectionTop RegKey4=HKCU\Software\FutureFog\Phorest\Layout|SelectionWidth RegKey5=HKCU\Software\FutureFog\Phorest\Options|LastUsedFolder Tags=ccutil ID=Phorest * Author=Winapp2.ini Project [Photo DVD Slideshow *] DetectFile=%AppData%\Photo DVD Slideshow FileKey1=%AppData%\Photo DVD Slideshow|*.log FileKey2=%AppData%\Photo DVD Slideshow\PhotosCache|* Tags=ccmedia ID=Photo DVD Slideshow * Author=Winapp2.ini Project [Photo Print Calendar 3.00E Beta *] Detect=HKLM\Software\Computer Institute of Japan, Ltd.\Photo Print Calendar from YOKOHAMA Ver.3.00E beta\3.00E beta FileKey1=%ProgramFiles%\Photo Print Calendar|update.bmp Tags=ccapps ID=Photo Print Calendar 3.00E Beta * Author=Winapp2.ini Project [Photo Stamp Remover *] Detect=HKCU\Software\softorbits\PhotoStampRemover RegKey1=HKCU\Software\softorbits\PhotoStampRemover|currentFile Tags=ccmedia ID=Photo Stamp Remover * Author=Winapp2.ini Project [Photo! Editor *] Detect=HKCU\Software\VicMan Software\Photo! Editor FileKey1=%ProgramFiles%\Photo!\Photo! Editor|*.log RegKey1=HKCU\Software\VicMan Software\Photo! Editor|LastFolder Tags=ccutil ID=Photo! Editor * Author=Winapp2.ini Project [PhotoFlare *] Detect=HKCU\Software\photoflare.io\PhotoFlare RegKey1=HKCU\Software\photoflare.io\PhotoFlare|OpenFolder RegKey2=HKCU\Software\photoflare.io\PhotoFlare|RecentFiles RegKey3=HKCU\Software\photoflare.io\PhotoFlare|SaveFolder RegKey4=HKCU\Software\photoflare.io\PhotoFlare|SaveFormat Tags=ccmedia ID=PhotoFlare * Author=Winapp2.ini Project [PhotoScissors *] Detect=HKCU\Software\Teorex\PhotoScissors RegKey1=HKCU\Software\Teorex\PhotoScissors\Recent File List RegKey2=HKCU\Software\Teorex\PhotoScissors\RecentFileList Tags=ccapps ID=PhotoScissors * Author=Winapp2.ini Project [PhotoZoom Pro *] Detect1=HKCU\Software\BenVista\PhotoZoom Pro 6 Detect2=HKCU\Software\BenVista\PhotoZoom Pro 7 Detect3=HKCU\Software\BenVista\PhotoZoom Pro 8 RegKey1=HKCU\Software\BenVista\PhotoZoom Pro 6|FileDir RegKey2=HKCU\Software\BenVista\PhotoZoom Pro 6\Recent Images RegKey3=HKCU\Software\BenVista\PhotoZoom Pro 7|FileDir RegKey4=HKCU\Software\BenVista\PhotoZoom Pro 7\Recent Images RegKey5=HKCU\Software\BenVista\PhotoZoom Pro 8|FileDir RegKey6=HKCU\Software\BenVista\PhotoZoom Pro 8\Recent Images Tags=ccmedia ID=PhotoZoom Pro * Author=Winapp2.ini Project [PHPStorm *] DetectFile=%UserProfile%\.WebIde40 FileKey1=%UserProfile%\.WebIde40\LocalHistory|*|RECURSE FileKey2=%UserProfile%\.WebIde40\Log|*|RECURSE FileKey3=%UserProfile%\.WebIde40\system\caches|*|RECURSE FileKey4=%UserProfile%\.WebIde40\tmp|*|RECURSE Tags=ccutil ID=PHPStorm * Author=Winapp2.ini Project [PhraseExpress *] DetectFile=%UserProfile%\Documents\PhraseExpress FileKey1=%UserProfile%\Documents\PhraseExpress|*.bak Tags=ccutil ID=PhraseExpress * Author=Winapp2.ini Project [PhrozenSoft *] DetectFile=%AppData%\PhrozenSoft FileKey1=%AppData%\PhrozenSoft\PVTUploader|phrzvtu.db Tags=ccutil ID=PhrozenSoft * Author=Winapp2.ini Project [Phyxion.net Driver Sweeper *] DetectFile=%ProgramFiles%\Phyxion.net\Driver Sweeper\Logs FileKey1=%ProgramFiles%\Phyxion.net\Driver Sweeper\Backup|*|RECURSE FileKey2=%ProgramFiles%\Phyxion.net\Driver Sweeper\Logs|*|RECURSE Tags=ccutil ID=Phyxion.net Driver Sweeper * Author=Winapp2.ini Project [Pi Network *] DetectFile=%LocalAppData%\programs\pi-network-desktop FileKey1=%AppData%\Pi Network|*-journal;*.old;*.tmp;LOG;Network Persistent State;QuotaManager|RECURSE FileKey2=%AppData%\Pi Network\*Cache|*|RECURSE FileKey3=%AppData%\Pi Network\blob_storage|*|RECURSE FileKey4=%AppData%\Pi Network\Crashpad\reports|*.dmp FileKey5=%AppData%\Pi Network\Logs|* FileKey6=%AppData%\Pi Network\Pi Network\Logs|* FileKey7=%AppData%\Pi Network\VideoDecodeStats|* FileKey8=%LocalAppData%\pi-network-desktop-updater|installer.exe FileKey9=%LocalAppData%\pi-network-desktop-updater\pending|*Setup*.exe Tags=ccapps ID=Pi Network * Author=Winapp2.ini Project [PictoQuest *] DetectFile=%UserProfile%\AppData\LocalLow\NanoPiko\PictoQuest FileKey1=%UserProfile%\AppData\LocalLow\NanoPiko\PictoQuest|*txt Tags=ccapps ID=PictoQuest * Author=Winapp2.ini Project [PictureTrail Photo Editor *] Detect=HKCU\Software\PictureTrail Photo Editor\PictureTrail Photo Editor RegKey1=HKCU\Software\Local AppWizard-Generated Applications\PictureTrail Photo Editor\Recent File List RegKey2=HKCU\Software\PictureTrail Photo Editor\PictureTrail Photo Editor\Recent File List Tags=ccmedia ID=PictureTrail Photo Editor * Author=Winapp2.ini Project [Pictus *] Detect=HKLM\Software\Poppeman\Pictus DetectFile=%AppData%\Poppeman\Pictus FileKey1=%AppData%\Poppeman\Pictus|runlog.txt;setup.txt Tags=ccmedia ID=Pictus * Author=Winapp2.ini Project [PicView *] DetectFile=%ProgramFiles%\PicView FileKey1=%LocalAppData%\Ruben2776\PicView_StrongName_*\*|Recent.txt Tags=ccmedia ID=PicView * Author=Winapp2.ini Project [Pidgin *] Detect=HKCU\Software\Pidgin FileKey1=%AppData%\.purple|*.xml~ FileKey2=%UserProfile%|Recently-Used.xbel Tags=ccinternet ID=Pidgin * Author=Winapp2.ini Project [Pidgin Chat Logs *] Detect=HKCU\Software\Pidgin FileKey1=%AppData%\.purple\logs|*|REMOVESELF Tags=ccinternet ID=Pidgin Chat Logs * Author=Winapp2.ini Project [Pinnacle Studio *] DetectFile=%ProgramFiles%\Pinnacle\Studio* FileKey1=%ProgramFiles%\Pinnacle\Studio*|*.log FileKey2=%ProgramFiles%\Pinnacle\Studio*\Programs|*.log Tags=ccmedia ID=Pinnacle Studio * Author=Winapp2.ini Project [Pioneer Rekordbox *] DetectFile=%AppData%\Pioneer\Rekordbox FileKey1=%AppData%\Pioneer\Rekordbox\Crashes|*.dmp FileKey2=%AppData%\PioneerLog|*Log.txt FileKey3=%UserProfile%\Documents\Rekordbox|*log*.txt Tags=ccmedia ID=Pioneer Rekordbox * Author=Winapp2.ini Project [Pipy *] DetectFile=%AppData%\Pipy FileKey1=%AppData%\Pipy\Logs|* Tags=ccapps ID=Pipy * Author=Winapp2.ini Project [PixelFlasher *] DetectFile=%AppData%\PixelFlasher FileKey1=%AppData%\PixelFlasher|device_images_history.json FileKey2=%AppData%\PixelFlasher\logs|* FileKey3=%AppData%\PixelFlasher\tmp|* Tags=ccutil ID=PixelFlasher * Author=Winapp2.ini Project [PixelFlasher Boot Images *] DetectFile=%AppData%\PixelFlasher FileKey1=%AppData%\PixelFlasher\boot_images*\*|*|REMOVESELF Tags=ccutil ID=PixelFlasher Boot Images * Author=Winapp2.ini Project [PixelFlasher Factory Images *] DetectFile=%AppData%\PixelFlasher FileKey1=%AppData%\PixelFlasher\Factory Images\*|*|REMOVESELF Tags=ccutil ID=PixelFlasher Factory Images * Author=Winapp2.ini Project [PKZip *] DetectFile=%ProgramFiles%\PKWARE\PKZIPW FileKey1=%ProgramFiles%\PKWARE\PKZIPW|*.log RegKey1=HKCU\Software\PKWARE\PKZIP70\History Tags=ccutil ID=PKZip * Author=Winapp2.ini Project [Plague Inc: Evolved *] DetectFile=%UserProfile%\AppData\LocalLow\Ndemic Creations\Plague Inc Evolved FileKey1=%UserProfile%\AppData\LocalLow\Ndemic Creations\Plague Inc Evolved|Player.log Tags=ccapps ID=Plague Inc: Evolved * Author=Winapp2.ini Project [Planet Horse *] DetectFile=%ProgramFiles%\Planet Horse FileKey1=%ProgramFiles%\Planet Horse|output_log.txt|RECURSE Tags=ccapps ID=Planet Horse * Author=Winapp2.ini Project [Planets Under Attack *] Detect=HKCU\Software\Valve\Steam\Apps\218510 FileKey1=%UserProfile%\Documents\My Games\Planets Under Attack|*.log Tags=ccapps ID=Planets Under Attack * Author=Winapp2.ini Project [Plantronics Spokes *] DetectFile=%LocalAppData%\Plantronics\Spokes3G FileKey1=%LocalAppData%\Plantronics\Logs|* FileKey2=%LocalAppData%\Plantronics\Spokes3G\cefcache\*Cache|* Tags=ccmedia ID=Plantronics Spokes * Author=Winapp2.ini Project [Plants vs. Zombies *] DetectFile=%LocalAppData%\PVZCache FileKey1=%LocalAppData%\PVZCache|* FileKey2=%ProgramFiles%\Popcap Games\Plants vs Zombies|Install.log FileKey3=%UserProfile%\Documents\PVZ Battle for Neighborville\CrashDumps|*|RECURSE Tags=ccapps ID=Plants vs. Zombies * Author=Winapp2.ini Project [Plarium Play *] DetectFile=%LocalAppData%\PlariumPlay.log FileKey1=%LocalAppData%|PlariumPlay.log Tags=ccapps ID=Plarium Play * Author=Winapp2.ini Project [PlayFirst Games *] DetectFile=%AppData%\PlayFirst FileKey1=%AppData%\PlayFirst|logfile.txt|RECURSE Tags=ccapps ID=PlayFirst Games * Author=Winapp2.ini Project [Plex *] DetectFile=%LocalAppData%\Plex FileKey1=%LocalAppData%\Plex\cache|*|RECURSE FileKey2=%LocalAppData%\Plex\logs|* FileKey3=%LocalAppData%\Plex\Plex Media Server\Cache|*|RECURSE FileKey4=%LocalAppData%\Plex\Plex Media Server\logs|* FileKey5=%LocalAppData%\Plex\QtWebEngine\Default|Visited Links FileKey6=%LocalAppData%\Plex\QtWebEngine\Default\GPUCache|* Tags=ccmedia ID=Plex * Author=Winapp2.ini Project [Plex Media Server *] Detect=HKCU\Software\Plex, Inc.\Plex Media Server FileKey1=%LocalAppData%\Plex Media Server\Cache\PhotoTranscoder|*|RECURSE FileKey2=%LocalAppData%\Plex Media Server\Crash Reports|*|RECURSE FileKey3=%LocalAppData%\Plex Media Server\Logs|*|RECURSE FileKey4=%LocalAppData%\Plex Media Server\Plug-in Support\Caches|*|RECURSE FileKey5=%LocalAppData%\Plex Media Server\Plug-in Support\Databases|*.db-shm;*.db-wal FileKey6=%LocalAppData%\Plex Media Server\Updates|*|RECURSE FileKey7=%LocalAppData%\Plex\Cache\qmlcache|* FileKey8=%LocalAppData%\Plex\Cache\qtwebengine\Default\Cache|* FileKey9=%LocalAppData%\Plex\logs|* FileKey10=%ProgramFiles%\Plex\Plex Media Server|*.log;*.txt|RECURSE FileKey11=%WinDir%\System32\config\systemprofile\AppData\Local\Plex Media Server\Logs|*|RECURSE FileKey12=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Plex Media Server\Logs|*|RECURSE Tags=ccmedia ID=Plex Media Server * Author=Winapp2.ini Project [PlumChoice Quick Connect *] DetectFile=%LocalAppData%\Tific FileKey1=%LocalAppData%\Tific|*.log|RECURSE Tags=ccapps ID=PlumChoice Quick Connect * Author=Winapp2.ini Project [Plus500 *] Detect=HKCU\Software\Plus500 DetectFile=%ProgramFiles%\Plus500 FileKey1=%LocalAppData%\Plus500\Main|*.log* Tags=ccapps ID=Plus500 * Author=Winapp2.ini Project [Pocket Killbox *] Detect=HKCU\Software\KillBox DetectFile=%SystemDrive%\!Killbox FileKey1=%SystemDrive%\!Killbox\Logs|* RegKey1=HKCU\Software\KillBox|LastPath Tags=ccutil ID=Pocket Killbox * Author=Winapp2.ini Project [Pogo Games *] DetectFile=%AppData%\Pogo Games FileKey1=%AppData%\Pogo Games\*\Cache|*|REMOVESELF Tags=ccapps ID=Pogo Games * Author=Winapp2.ini Project [Pointstone Registry Cleaner *] DetectFile=%AppData%\Pointstone\Registry Cleaner FileKey1=%AppData%\Pointstone\Registry Cleaner|*.bak;Statistics.xml FileKey2=%AppData%\Pointstone\Registry Cleaner\Logs|*.txt Tags=ccutil ID=Pointstone Registry Cleaner * Author=Winapp2.ini Project [Pointstone Total Privacy *] Detect=HKCU\Software\Pointstone\Total Privacy FileKey1=%ProgramFiles%\Pointstone\Total Privacy*|*.txt Tags=ccutil ID=Pointstone Total Privacy * Author=Winapp2.ini Project [Pok3D *] DetectFile=%ProgramFiles%\Pok3d FileKey1=%AppData%\Pok3d|*.dmp;*.log Tags=ccapps ID=Pok3D * Author=Winapp2.ini Project [PokerStars *] DetectFile=%LocalAppData%\PokerStars FileKey1=%LocalAppData%\PokerStars|*.log.* FileKey2=%LocalAppData%\PokerStars\ImgCache|* FileKey3=%ProgramFiles%\PokerStars*|*.log.* Tags=ccapps ID=PokerStars * Author=Winapp2.ini Project [Polarity *] DetectFile=%ProgramFiles%\Polarity FileKey1=%AppData%\Stanley Lim\Polarity\Cache|*|RECURSE FileKey2=%AppData%\Stanley Lim\Polarity\Favicon|* FileKey3=%ProgramFiles%\Polarity|*.log FileKey4=%UserProfile%\Polarity_Config|downloads_names.ini;downloads_times.ini;downloads_urls.ini;history.ini;history_names.ini;history_times.ini;savedTabs.ini Tags=ccinternet ID=Polarity * Author=Winapp2.ini Project [Polyball *] Detect=HKCU\Software\Valve\Steam\Apps\368180 FileKey1=%ProgramFiles%\SteamLibrary\steamapps\common\Polyball\Polyball_Data|output_log.txt Tags=ccapps ID=Polyball * Author=Winapp2.ini Project [PolyView *] Detect=HKCU\Software\Polybytes\PolyView RegKey1=HKCU\Software\Polybytes\PolyView\Recent File List Tags=ccapps ID=PolyView * Author=Winapp2.ini Project [Popcorn Time *] DetectFile=%LocalAppData%\Popcorn*Time* FileKey1=%LocalAppData%\Popcorn*Time*\*Cache|*|RECURSE FileKey2=%LocalAppData%\Popcorn*Time*\node_modules\peerflix\node_modules\torrent-stream\node_modules\parse-torrent\node_modules\magnet-uri|*log.txt FileKey3=%LocalAppData%\Popcorn*Time*\PopcornTime\Cache\QTWebEngine\Default\Cache|* FileKey4=%LocalAppData%\Popcorn*Time*\QTWebEngine\Default\GPUCache|* FileKey5=%LocalAppData%\Popcorn*Time*\User Data\*\*Cache|* FileKey6=%ProgramFiles%\Popcorn*Time*\plugins|plugins.dat.* Tags=ccinternet ID=Popcorn Time * Author=Winapp2.ini Project [Portfolio Performance *] DetectFile=%LocalAppData%\PortfolioPerformance FileKey1=%LocalAppData%\PortfolioPerformance\workspace\.metadata|*.lock;*.log Tags=ccapps ID=Portfolio Performance * Author=Winapp2.ini Project [PortForward.com PortChecker *] Detect=HKCU\Software\VB and VBA Program Settings\PFPortChecker RegKey1=HKCU\Software\VB and VBA Program Settings\PFPortChecker\Settings|Port Tags=ccutil ID=PortForward.com PortChecker * Author=Winapp2.ini Project [PortScan & Stuff *] Detect=HKCU\Software\CompSoft\PortScan RegKey1=HKCU\Software\CompSoft\PortScan|ScanEnd RegKey2=HKCU\Software\CompSoft\PortScan|ScanStart RegKey3=HKCU\Software\CompSoft\PortScan\MRUDNSQuery RegKey4=HKCU\Software\CompSoft\PortScan\MRUDNSServer RegKey5=HKCU\Software\CompSoft\PortScan\MRUPing RegKey6=HKCU\Software\CompSoft\PortScan\MRUTraceroute RegKey7=HKCU\Software\CompSoft\PortScan\MRUWhoIs Tags=ccinternet ID=PortScan & Stuff * Author=Winapp2.ini Project [PostBox *] DetectFile=%LocalAppData%\PostBox FileKey1=%AppData%\PostBox|*.log|RECURSE FileKey2=%AppData%\PostBox\Crash Reports|*|REMOVESELF FileKey3=%LocalAppData%\PostBox\Profiles\*\Cache|*|REMOVESELF Tags=ccapps ID=PostBox * Author=Winapp2.ini Project [Postman *] DetectFile=%LocalAppData%\Postman FileKey1=%AppData%\Postman\*Cache|* FileKey2=%AppData%\Postman\Logs|*.log FileKey3=%AppData%\Postman\partitions\postman_shell\GPUCache|* FileKey4=%AppData%\Postman\partitions\postman_shell\webrtc_event_logs|* FileKey5=%AppData%\Postman\partitions\postman_user_cookies\webrtc_event_logs|* FileKey6=%AppData%\Postman\webrtc_event_logs|* FileKey7=%LocalAppData%\Postman|*.log|RECURSE Tags=ccinternet ID=Postman * Author=Winapp2.ini Project [PotPlayer *] Detect1=HKCU\Software\Daum\PotPlayerMini Detect2=HKCU\Software\Daum\PotPlayerMini64 FileKey1=%AppData%\Daum\PotPlayer\Log|* FileKey2=%LocalAppData%\Daum\PotPlayer\Log|*.xml FileKey3=%ProgramFiles%\PotPlayer\History|*.txt|REMOVESELF RegKey1=HKCU\Software\Daum\PotPlayerMini\RememberFiles RegKey2=HKCU\Software\Daum\PotPlayerMini64\RememberFiles Tags=ccmedia ID=PotPlayer * Author=Winapp2.ini Project [PowerENGAGE *] DetectFile=%AppData%\PowerENGAGE FileKey1=%AppData%\PowerENGAGE|*-journal;*.old;LOG FileKey2=%AppData%\PowerENGAGE\*Cache|* FileKey3=%AppData%\PowerENGAGE\Logs|* Tags=ccapps ID=PowerENGAGE * Author=Winapp2.ini Project [PowerISO *] Detect=HKCU\Software\PowerISO FileKey1=%AppData%\PowerISO\Upgrade|*|REMOVESELF FileKey2=%ProgramFiles%\PowerISO|*.tmp RegKey1=HKCU\Software\PowerISO\SCDEmu|ImageName0 RegKey2=HKCU\Software\PowerISO\SCDEmu|ImageName1 RegKey3=HKCU\Software\PowerISO\SCDEmu|ImageName2 RegKey4=HKCU\Software\PowerISO\SCDEmu|ImageName3 RegKey5=HKCU\Software\PowerISO\SCDEmu|ImageName4 RegKey6=HKCU\Software\PowerISO\SCDEmu|ImageName5 RegKey7=HKCU\Software\PowerISO\SCDEmu|ImageName6 RegKey8=HKCU\Software\PowerISO\SCDEmu|ImageName7 RegKey9=HKCU\Software\PowerISO\SCDEmu|ImageName8 RegKey10=HKCU\Software\PowerISO\SCDEmu|ImageName9 RegKey11=HKCU\Software\PowerISO\SCDEmu|ImageName10 RegKey12=HKCU\Software\PowerISO\SCDEmu|ImageName11 RegKey13=HKCU\Software\PowerISO\SCDEmu|ImageName12 RegKey14=HKCU\Software\PowerISO\SCDEmu|ImageName13 RegKey15=HKCU\Software\PowerISO\SCDEmu|ImageName14 RegKey16=HKCU\Software\PowerISO\SCDEmu|ImageName15 RegKey17=HKCU\Software\PowerISO\SCDEmu|ImageName16 RegKey18=HKCU\Software\PowerISO\SCDEmu|ImageName17 RegKey19=HKCU\Software\PowerISO\SCDEmu|ImageName18 RegKey20=HKCU\Software\PowerISO\SCDEmu|ImageName19 RegKey21=HKCU\Software\PowerISO\SCDEmu|ImageName20 RegKey22=HKCU\Software\PowerISO\SCDEmu|ImageName21 RegKey23=HKCU\Software\PowerISO\SCDEmu|ImageName22 RegKey24=HKU\S-1-5-18\Software\PowerISO|ExtractPath0 RegKey25=HKU\S-1-5-18\Software\PowerISO|ExtractPath1 RegKey26=HKU\S-1-5-18\Software\PowerISO|ExtractPath2 RegKey27=HKU\S-1-5-18\Software\PowerISO|ExtractPath3 RegKey28=HKU\S-1-5-18\Software\PowerISO|ExtractPath4 RegKey29=HKU\S-1-5-18\Software\PowerISO|ExtractPath5 RegKey30=HKU\S-1-5-18\Software\PowerISO|ExtractPath6 RegKey31=HKU\S-1-5-18\Software\PowerISO|ExtractPath7 RegKey32=HKU\S-1-5-18\Software\PowerISO|Reopen0 RegKey33=HKU\S-1-5-18\Software\PowerISO|Reopen1 RegKey34=HKU\S-1-5-18\Software\PowerISO|Reopen2 RegKey35=HKU\S-1-5-18\Software\PowerISO|Reopen3 RegKey36=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName0 RegKey37=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName1 RegKey38=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName2 RegKey39=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName3 RegKey40=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName4 RegKey41=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName5 RegKey42=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName6 RegKey43=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName7 RegKey44=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName8 RegKey45=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName9 RegKey46=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName10 RegKey47=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName11 RegKey48=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName12 RegKey49=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName13 RegKey50=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName14 RegKey51=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName15 RegKey52=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName16 RegKey53=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName17 RegKey54=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName18 RegKey55=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName19 RegKey56=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName20 RegKey57=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName21 RegKey58=HKU\S-1-5-18\Software\PowerISO\SCDEmu|ImageName22 Tags=ccutil ID=PowerISO * Author=Winapp2.ini Project [PowerPoint Repair Toolbox *] DetectFile=%ProgramFiles%\PowerPoint Repair Toolbox FileKey1=%LocalAppData%\PowerPoint Repair Toolbox|*.log FileKey2=%LocalAppData%\PowerPoint Repair Toolbox\temp|*|RECURSE FileKey3=%ProgramFiles%\PowerPoint Repair Toolbox|history.txt Tags=ccapps ID=PowerPoint Repair Toolbox * Author=Winapp2.ini Project [PowerTerm WebConnect DeskView *] DetectFile=%LocalAppData%\Ericom FileKey1=%LocalAppData%\Ericom\Ptagent|* FileKey2=%LocalAppData%\Ericom\PtRdp|* Tags=ccmedia ID=PowerTerm WebConnect DeskView * Author=Winapp2.ini Project [PowerZip *] Detect=HKCU\Software\Trident Software\PowerZip RegKey1=HKCU\Software\Trident Software\PowerZip\Doc RegKey2=HKCU\Software\Trident Software\PowerZip\Recent File List Tags=ccutil ID=PowerZip * Author=Winapp2.ini Project [PPTX Repair Kit *] DetectFile=%ProgramFiles%\PPTX Repair Kit FileKey1=%LocalAppData%\PPTX Repair Kit|*.log FileKey2=%LocalAppData%\PPTX Repair Kit\temp|*|RECURSE FileKey3=%ProgramFiles%\PPTX Repair Kit|history.txt Tags=ccapps ID=PPTX Repair Kit * Author=Winapp2.ini Project [Predator *] Detect=HKLM\Software\Predator-Usb FileKey1=%ProgramData%\Predator-Usb\PredatorACE\data|*.log Tags=ccapps ID=Predator * Author=Winapp2.ini Project [Presto Transfer Ultimate *] Detect=HKCU\Software\Perception\Presto Transfer Ultimate FileKey1=%AppData%\Presto Transfer Ultimate|lastlog.html Tags=ccutil ID=Presto Transfer Ultimate * Author=Winapp2.ini Project [Prevent Restore *] DetectFile=%AppData%\Prevent Restore FileKey1=%AppData%\Prevent Restore|rreport.txt Tags=ccutil ID=Prevent Restore * Author=Winapp2.ini Project [Prince of Persia *] Detect1=HKLM\Software\Ubisoft\Prince of Persia The Sands of Time Detect2=HKLM\Software\Ubisoft\Prince of Persia Warrior Within DetectFile=%ProgramFiles%\Ubisoft\Prince of Persia* FileKey1=%LocalAppData%\Ubisoft\Prince of Persia*|*.log FileKey2=%ProgramFiles%\Ubisoft\Prince of Persia*|*.log;POPError.DAT Tags=ccapps ID=Prince of Persia * Author=Winapp2.ini Project [priPrinter *] Detect=HKLM\Software\Pelikan Software KFT\priPrinter FileKey1=%AppData%\Pelikan Software KFT\priPrinter|cache_*.dat FileKey2=%ProgramData%\priPrinter\dumps|* RegKey1=HKCU\Software\Pelikan Software KFT\priPrinter|lastCleanUp Tags=ccapps ID=priPrinter * Author=Winapp2.ini Project [Prison Architect *] Detect=HKCU\Software\Valve\Steam\Apps\233450 FileKey1=%LocalAppData%\Introversion\Prison Architect|debug.txt Tags=ccapps ID=Prison Architect * Author=Winapp2.ini Project [privacy.sexy *] DetectFile=%AppData%\privacy.sexy FileKey1=%AppData%\privacy.sexy|Network Persistent State FileKey2=%AppData%\privacy.sexy\*Cache|*|RECURSE FileKey3=%AppData%\privacy.sexy\*Storage|*.old;LOG|RECURSE FileKey4=%AppData%\privacy.sexy\blob_storage|*|RECURSE FileKey5=%AppData%\privacy.sexy\logs|*.log FileKey6=%AppData%\privacy.sexy\privacy.sexy\logs|* FileKey7=%LocalAppData%\privacy.sexy-updater|* FileKey8=%LocalAppData%\privacy.sexy-updater\*|*|REMOVESELF Tags=ccutil ID=privacy.sexy * Author=Winapp2.ini Project [PrivacyRoot Wipe *] Detect=HKLM\Software\privacyroot.com\wipe DetectFile=%AppData%\Wipe* FileKey1=%AppData%\Wipe*|apps_sorting.titles;found_apps.paths;StatsDates.txt FileKey2=%AppData%\Wipe*\AutoExclude|*.txt FileKey3=%AppData%\Wipe*\Temp\CachedImages|*.png RegKey1=HKLM\Software\privacyroot.com\wipe|SETUP-EXE Tags=ccutil ID=PrivacyRoot Wipe * Author=Winapp2.ini Project [Private Internet Access VPN *] DetectFile=%AppData%\Titanium\appdata\com.privateinternetaccess.vpn FileKey1=%AppData%\Titanium\appdata\com.privateinternetaccess.vpn|*.log FileKey2=%ProgramFiles%\pia_manager\log|* FileKey3=%ProgramFiles%\pia_manager\tmp|* FileKey4=%UserProfile%|.pia_manager_crash.log Tags=ccinternet ID=Private Internet Access VPN * Author=Winapp2.ini Project [PrivaZer *] Detect=HKCU\Software\PrivaZer FileKey1=%LocalAppData%\PrivaZer|*.txt Tags=ccutil ID=PrivaZer * Author=Winapp2.ini Project [Privoxy *] Detect=HKCU\Software\Privoxy FileKey1=%ProgramFiles%\Vidalia Bundle\Privoxy|privoxy.log Tags=ccinternet ID=Privoxy * Author=Winapp2.ini Project [Pro PC Cleaner *] DetectFile=%UserProfile%\Documents\ProPCCleaner FileKey1=%UserProfile%\Documents\ProPCCleaner|log*.txt Tags=ccutil ID=Pro PC Cleaner * Author=Winapp2.ini Project [Procaster *] DetectFile=%LocalAppData%\Procaster FileKey1=%LocalAppData%\Procaster|*.log|RECURSE Tags=ccmedia ID=Procaster * Author=Winapp2.ini Project [Process Hacker *] DetectFile=%ProgramFiles%\Process Hacker FileKey1=%AppData%\Process Hacker\Cache|*|RECURSE FileKey2=%ProgramFiles%\Process Hacker|processhacker-setup.exe Tags=ccutil ID=Process Hacker * Author=Winapp2.ini Project [Processing *] DetectFile=%AppData%\Processing FileKey1=%AppData%\Processing|recent.txts FileKey2=%AppData%\Processing\Console|* FileKey3=%AppData%\Processing\Debug|* Tags=ccutil ID=Processing * Author=Winapp2.ini Project [ProcessLasso *] Detect=HKCU\Software\ProcessLasso FileKey1=%AppData%\ProcessLasso|prolasso.log FileKey2=%LocalAppData%\ProcessLasso\Logs|* FileKey3=%ProgramFiles%\Process Lasso|.logtype5 Tags=ccutil ID=ProcessLasso * Author=Winapp2.ini Project [ProDiscover *] Detect=HKLM\Software\Technology Pathways\ProDiscover RegKey1=HKLM\Software\Technology Pathways\ProDiscover\Recent File List Tags=ccutil ID=ProDiscover * Author=Winapp2.ini Project [ProFantasy Software CC3 View *] Detect=HKCU\Software\EvolutionComputing RegKey1=HKCU\Software\EvolutionComputing\CC3View|1 RegKey2=HKCU\Software\EvolutionComputing\CC3View|2 RegKey3=HKCU\Software\EvolutionComputing\CC3View|3 RegKey4=HKCU\Software\EvolutionComputing\CC3View|4 RegKey5=HKCU\Software\EvolutionComputing\CC3View|WorkingDrawing Tags=ccmedia ID=ProFantasy Software CC3 View * Author=Winapp2.ini Project [ProgDVB *] DetectFile=%ProgramFiles%\ProgDVB FileKey1=%ProgramFiles%\ProgDVB\Logs|*|RECURSE Tags=ccmedia ID=ProgDVB * Author=Winapp2.ini Project [Programmer's Notepad *] Detect=HKCU\Software\Echo Software\PN2 FileKey1=%AppData%\Echo Software\PN2|User*.xml RegKey1=HKCU\Software\Echo Software\PN2\Find|FindText RegKey2=HKCU\Software\Echo Software\PN2\Find|ReplaceText RegKey3=HKCU\Software\Echo Software\PN2\MRU RegKey4=HKCU\Software\Echo Software\PN2\MRUProjects Tags=ccutil ID=Programmer's Notepad * Author=Winapp2.ini Project [Project64 *] Detect=HKCU\Software\N64 Emulation DetectFile=%ProgramFiles%\Project64* FileKey1=%ProgramFiles%\Project64 2.*\Logs|* RegKey1=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile1 RegKey2=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile2 RegKey3=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile3 RegKey4=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile4 RegKey5=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile5 RegKey6=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile6 RegKey7=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile7 RegKey8=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile8 RegKey9=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile9 RegKey10=HKCU\Software\N64 Emulation\Project64 Version 1.6|RecentFile10 Tags=ccapps ID=Project64 * Author=Winapp2.ini Project [PropertyList Editor *] Detect=HKCU\Software\pledit\PropertyList Editor RegKey1=HKCU\Software\pledit\PropertyList Editor\Recent File List Tags=ccutil ID=PropertyList Editor * Author=Winapp2.ini Project [Proteus *] Detect=HKCU\Software\Valve\Steam\Apps\219680 FileKey1=%UserProfile%\Documents\Proteus\logs|* ExcludeKey1=FILE|%UserProfile%\Documents\Proteus\logs\|rng.txt Tags=ccapps ID=Proteus * Author=Winapp2.ini Project [Proton Mail-bridge *] DetectFile=%AppData%\protonmail FileKey1=%AppData%\protonmail\bridge-v3\logs|*.log Tags=ccutil ID=Proton Mail-bridge * Author=Winapp2.ini Project [Proton Mail *] DetectFile=%LocalAppData%\proton_mail FileKey1=%AppData%\Proton Mail\Local Storage\leveldb|*.old FileKey2=%AppData%\Proton Mail\logs|*.log Tags=ccutil ID=Proton Mail * Author=Winapp2.ini Project [Proton VPN *] DetectFile=%LocalAppData%\Proton\Proton VPN FileKey1=%LocalAppData%\Proton\Proton VPN\Logs|*.txt FileKey2=%ProgramData%\ProtonVPN\Logs|*|REMOVESELF FileKey3=%ProgramData%\ProtonVPN\UpdaterLogs|*|REMOVESELF Tags=ccutil ID=Proton VPN * Author=Winapp2.ini Project [PS3 Media Server *] Detect=HKCU\Software\PS3 Media Server FileKey1=%ProgramFiles%\PS3 Media Server|*.md;*log|RECURSE Tags=ccmedia ID=PS3 Media Server * Author=Winapp2.ini Project [Psi *] Detect=HKCU\Software\psi-im.org\Psi DetectFile=%LocalAppData%\Psi+ FileKey1=%LocalAppData%\Psi+\Avatars|*|RECURSE FileKey2=%UserProfile%\PsiData\avatars|* Tags=ccinternet ID=Psi * Author=Winapp2.ini Project [Psi Chat Logs *] Detect=HKCU\Software\psi-im.org\Psi DetectFile=%LocalAppData%\Psi+ FileKey1=%AppData%\Psi+\profiles\*\history|*|RECURSE FileKey2=%UserProfile%\PsiData\profiles\*\history|* Tags=ccinternet ID=Psi Chat Logs * Author=Winapp2.ini Project [PSoC Designer 5.4 *] DetectFile=%AppData%\Cypress_Semiconductor\PSoC_Designer_54 FileKey1=%AppData%\Cypress_Semiconductor\PSoC_Designer_54|debug.log* Tags=ccapps ID=PSoC Designer 5.4 * Author=Winapp2.ini Project [PSPad *] DetectFile=%AppData%\PSpad FileKey1=%AppData%\PSpad|Recent.ini Tags=ccutil ID=PSPad * Author=Winapp2.ini Project [PUBG Lite *] DetectFile=%ProgramFiles%\PUBGLite FileKey1=%ProgramFiles%\PUBGLite|*.log Tags=ccapps ID=PUBG Lite * Author=Winapp2.ini Project [PunkBuster *] DetectFile=%LocalAppData%\PunkBuster FileKey1=%LocalAppData%\PunkBuster|pbcl.log|RECURSE FileKey2=%WinDir%\System32\LogFiles\PunkBuster|* Tags=ccapps ID=PunkBuster * Author=Winapp2.ini Project [Puran Defrag *] Detect=HKLM\Software\Puran Software\Puran Defrag FileKey1=%ProgramFiles%\Puran Defrag|PuranDefrag.html Tags=ccutil ID=Puran Defrag * Author=Winapp2.ini Project [Puran Delete Empty Folders *] Detect=HKLM\Software\Puran Software\Delete Empty Folders RegKey1=HKLM\Software\Puran Software\Delete Empty Folders|Drives RegKey2=HKLM\Software\Wow6432Node\Puran Software\Delete Empty Folders|Drives Tags=ccutil ID=Puran Delete Empty Folders * Author=Winapp2.ini Project [Puran Fix Shortcuts *] Detect=HKLM\Software\Puran Software\Fix Shortcuts RegKey1=HKLM\Software\Puran Software\Fix Shortcuts|Drives RegKey2=HKLM\Software\Wow6432Node\Puran Software\Fix Shortcuts|Drives Tags=ccutil ID=Puran Fix Shortcuts * Author=Winapp2.ini Project [Pure Networks *] Detect=HKCU\Software\Pure Networks FileKey1=%ProgramData%\Pure Networks\Log|* FileKey2=%ProgramData%\Pure Networks\Platform|*.bak FileKey3=%ProgramData%\Pure Networks\Platform\minidumps|* Tags=ccinternet ID=Pure Networks * Author=Winapp2.ini Project [PureRa *] DetectFile=%SystemDrive%\PureRa.txt FileKey1=%SystemDrive%|PureRa.txt Tags=ccutil ID=PureRa * Author=Winapp2.ini Project [Puritan File Destroyer Elite *] Detect=HKCU\Software\Puritan\File Destroyer Elite FileKey1=%ProgramData%\Puritan\File Destroyer Elite|*.log|RECURSE Tags=ccmedia ID=Puritan File Destroyer Elite * Author=Winapp2.ini Project [Pushbullet *] DetectFile=%AppData%\Pushbullet FileKey1=%AppData%\Pushbullet\pushbullet|*.log Tags=ccinternet ID=Pushbullet * Author=Winapp2.ini Project [PuTTY *] DetectFile=%LocalAppData%\NETworkManager\PuTTY* FileKey1=%LocalAppData%\NETworkManager\PuTTY_Log|*.log Tags=ccinternet ID=PuTTY * Author=Winapp2.ini Project [PySol Fan Club edition *] DetectFile=%AppData%\PySolFC FileKey1=%AppData%\PySolFC|comments.dat;statistics.dat FileKey2=%ProgramFiles%\PySol Fan Club Edition|*.log Tags=ccapps ID=PySol Fan Club edition * Author=Winapp2.ini Project [Python *] Detect=HKCU\Software\Python FileKey1=%LocalAppData%\Pip\cache|*|RECURSE FileKey2=%ProgramFiles%\Python*|*.icns|RECURSE FileKey3=%SystemDrive%\Python*|*.icns|RECURSE Tags=ccutil ID=Python * Author=Winapp2.ini Project [qBittorrent *] DetectFile=%LocalAppData%\qBittorrent FileKey1=%LocalAppData%\qBittorrent\cache|* FileKey2=%LocalAppData%\qBittorrent\logs|* Tags=ccinternet ID=qBittorrent * Author=Winapp2.ini Project [Qiqqa *] DetectFile=%LocalAppData%\Quantisle\Qiqqa FileKey1=%LocalAppData%\Quantisle\Qiqqa\Logs|* FileKey2=%SystemDrive%\Temp|Qiqqa.log Tags=ccapps ID=Qiqqa * Author=Winapp2.ini Project [Qmmp *] DetectFile=%UserProfile%\.qmmp FileKey1=%UserProfile%\.qmmp\cache|*|RECURSE Tags=ccmedia ID=Qmmp * Author=Winapp2.ini Project [QQBrowser Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|*Web Data FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=QQBrowser Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [QQBrowser Autoplay Preferences *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=QQBrowser Autoplay Preferences * Author=Winapp2.ini Project [QQBrowser Bookmark Backups *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|Bookmarks.bak Tags=ccapps ID=QQBrowser Bookmark Backups * Author=Winapp2.ini Project [QQBrowser Bookmark Favicons *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%AppData%\Tencent\QQBrowser\BookmarkIcon\files|*|REMOVESELF FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*|favicons* Tags=ccapps ID=QQBrowser Bookmark Favicons * Author=Winapp2.ini Project [QQBrowser Caches *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data|Module Info Cache FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Tencent\QQBrowser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Tencent\QQBrowser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Tencent\QQBrowser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Tencent\QQBrowser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Tencent\QQBrowser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Tencent\QQBrowser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Tencent\QQBrowser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Tencent\QQBrowser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Tencent\QQBrowser\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Tencent\QQBrowser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Tencent\QQBrowser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Tencent\QQBrowser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Tencent\QQBrowser\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Tencent\QQBrowser\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Tencent\QQBrowser\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=QQBrowser Caches * Author=Winapp2.ini Project [QQBrowser Default App Handlers *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|PreferredApps Tags=ccapps ID=QQBrowser Default App Handlers * Author=Winapp2.ini Project [QQBrowser Download History *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=QQBrowser Download History * Author=Winapp2.ini Project [QQBrowser DRM Data *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=QQBrowser DRM Data * Author=Winapp2.ini Project [QQBrowser Extension Cookies *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|Extension Cookies Tags=ccapps ID=QQBrowser Extension Cookies * Author=Winapp2.ini Project [QQBrowser Pinned Tabs *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data RegKey1=HKCU\Software\Tencent\QQBrowser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=QQBrowser Pinned Tabs * Author=Winapp2.ini Project [QQBrowser Privacy Sandbox *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Tencent\QQBrowser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Tencent\QQBrowser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Tencent\QQBrowser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Tencent\QQBrowser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=QQBrowser Privacy Sandbox * Author=Winapp2.ini Project [QQBrowser Progressive Web Apps *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=QQBrowser Progressive Web Apps * Author=Winapp2.ini Project [QQBrowser Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|Login Data* Tags=ccapps ID=QQBrowser Saved Usernames & Passwords * Author=Winapp2.ini Project [QQBrowser Security & Threat Detection *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|DIPS* FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Tencent\QQBrowser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Tencent\QQBrowser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Tencent\QQBrowser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Tencent\QQBrowser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Tencent\QQBrowser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Tencent\QQBrowser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Tencent\QQBrowser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Tencent\QQBrowser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=QQBrowser Security & Threat Detection * Author=Winapp2.ini Project [QQBrowser Shopping Insights *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Tencent\QQBrowser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=QQBrowser Shopping Insights * Author=Winapp2.ini Project [QQBrowser Storage Quota Manager *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|QuotaManager Tags=ccapps ID=QQBrowser Storage Quota Manager * Author=Winapp2.ini Project [QQBrowser Sync Data *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=QQBrowser Sync Data * Author=Winapp2.ini Project [QQBrowser Telemetry *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%AppData%\Tencent\Logs|*|REMOVESELF FileKey2=%AppData%\Tencent\QQBrowser\*log|*.log FileKey3=%LocalAppData%\Tencent\QQBrowser\Application|debug.log FileKey4=%LocalAppData%\Tencent\QQBrowser\Application\SetupMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey6=%LocalAppData%\Tencent\QQBrowser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey7=%LocalAppData%\Tencent\QQBrowser\User Data\*|*.log FileKey8=%LocalAppData%\Tencent\QQBrowser\User Data\*\DataSharing|*|REMOVESELF FileKey9=%LocalAppData%\Tencent\QQBrowser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey10=%LocalAppData%\Tencent\QQBrowser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey11=%LocalAppData%\Tencent\QQBrowser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey12=%LocalAppData%\Tencent\QQBrowser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey13=%LocalAppData%\Tencent\QQBrowser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey14=%LocalAppData%\Tencent\QQBrowser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey15=%LocalAppData%\Tencent\QQBrowser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey16=%LocalAppData%\Tencent\QQBrowser\User Data\*BrowserMetrics|*|REMOVESELF FileKey17=%LocalAppData%\Tencent\QQBrowser\User Data\Crash Reports|*|REMOVESELF FileKey18=%LocalAppData%\Tencent\QQBrowser\User Data\Crashpad|*|REMOVESELF FileKey19=%LocalAppData%\Tencent\QQBrowser\User Data\Local Traces|*|REMOVESELF FileKey20=%LocalAppData%\Tencent\QQBrowser\User Data\OriginTrials|*|REMOVESELF FileKey21=%LocalAppData%\Tencent\QQBrowser\User Data\Stability|*|REMOVESELF FileKey22=%ProgramFiles%\Tencent\QQBrowser\Application|debug.log FileKey23=%ProgramFiles%\Tencent\QQBrowser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Tencent\QQBrowser\BlBeacon|failed_count RegKey2=HKCU\Software\Tencent\QQBrowser\BlBeacon|state RegKey3=HKCU\Software\Tencent\QQBrowser\Installer|LastChecked RegKey4=HKCU\Software\Tencent\QQBrowser\StabilityMetrics Tags=ccapps ID=QQBrowser Telemetry * Author=Winapp2.ini Project [QQBrowser Web Browsing Cookies *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=QQBrowser Web Browsing Cookies * Author=Winapp2.ini Project [QQBrowser Web Browsing History *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=QQBrowser Web Browsing History * Author=Winapp2.ini Project [QQBrowser Web Browsing Session *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=QQBrowser Web Browsing Session * Author=Winapp2.ini Project [QQBrowser Web Storage *] DetectFile=%LocalAppData%\Tencent\QQBrowser\User Data FileKey1=%LocalAppData%\Tencent\QQBrowser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Tencent\QQBrowser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Tencent\QQBrowser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Tencent\QQBrowser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Tencent\QQBrowser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Tencent\QQBrowser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Tencent\QQBrowser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Tencent\QQBrowser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=QQBrowser Web Storage * Author=Winapp2.ini Project [Qt Framework *] Detect1=HKCU\Software\QtProject Detect2=HKCU\Software\Trolltech DetectFile=%LocalAppData%\cache\qtshadercache* FileKey1=%LocalAppData%\cache\qtshadercache*|* RegKey1=HKCU\Software\QtProject\OrganizationDefaults\FileDialog|history RegKey2=HKCU\Software\QtProject\OrganizationDefaults\FileDialog|lastVisited RegKey3=HKCU\Software\Trolltech\OrganizationDefaults Tags=ccapps ID=Qt Framework * Author=Winapp2.ini Project [QTranslate *] DetectFile=%AppData%\QTranslate FileKey1=%AppData%\QTranslate|History.json Tags=ccapps ID=QTranslate * Author=Winapp2.ini Project [QTTabBar *] Detect=HKCU\Software\Quizo\QTTabBar FileKey1=%AppData%\QTTabBar|*.log RegKey1=HKCU\Software\Quizo\QTTabBar|TabsOnLastClosedWindow RegKey2=HKCU\Software\Quizo\QTTabBar\Cache RegKey3=HKCU\Software\Quizo\QTTabBar\RecentFiles RegKey4=HKCU\Software\Quizo\QTTabBar\RecentlyClosed Tags=ccutil ID=QTTabBar * Author=Winapp2.ini Project [Qualcomm Atheros Driver *] Detect=HKLM\Software\Atheros FileKey1=%CommonProgramFiles%\Atheros|InstallLog.txt FileKey2=%CommonProgramFiles%\Qualcomm|InstallLog.txt FileKey3=%CommonProgramFiles%\Qualcomm Atheros|*.log FileKey4=%LocalAppData%\Atheros\DirectConnect|*.log FileKey5=%ProgramData%\Atheros|*.log|RECURSE FileKey6=%ProgramData%\Qualcomm Atheros WiFi Driver Installation|*.Log|RECURSE Tags=ccutil ID=Qualcomm Atheros Driver * Author=Winapp2.ini Project [Quest3D *] DetectFile=%AppData%\Quest3D FileKey1=%AppData%\Quest3D\Lumion*|WriteErrorLog Tags=ccapps ID=Quest3D * Author=Winapp2.ini Project [QuickDic *] DetectFile=%ProgramFiles%\QuickDic FileKey1=%ProgramFiles%\QuickDic|QuickDic.ini Tags=ccapps ID=QuickDic * Author=Winapp2.ini Project [Quicken WillMaker Plus *] DetectFile=%LocalAppData%\Quicken WillMaker Plus* FileKey1=%LocalAppData%\Quicken WillMaker Plus *|web update log.txt Tags=ccapps ID=Quicken WillMaker Plus * Author=Winapp2.ini Project [QuickFind Autoplay Repair *] Detect=HKCU\Software\APR DetectFile=%ProgramFiles%\Autoplay Repair RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Run\APR_DEACTIVATED RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\APR_DEACTIVATED RegKey3=HKLM\Software\Microsoft\Windows\CurrentVersion\Run\APR_DEACTIVATED RegKey4=HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\APR_DEACTIVATED Tags=ccutil ID=QuickFind Autoplay Repair * Author=Winapp2.ini Project [QuickPAR *] Detect=HKCU\Software\QuickPar FileKey1=%LocalAppData%\QuickPar|* Tags=ccutil ID=QuickPAR * Author=Winapp2.ini Project [QuickTime Player *] Detect=HKLM\Software\Apple Computer, Inc.\QuickTime RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Favorite Movies RegKey2=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies RegKey3=HKLM\Software\Wow6432Node\Apple Computer, Inc.\QuickTime\Favorite Movies RegKey4=HKLM\Software\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies Tags=ccmedia ID=QuickTime Player * Author=Winapp2.ini Project [Qurb4 *] DetectFile=%LocalAppData%\Qurb4 FileKey1=%LocalAppData%\Qurb4|*.log|RECURSE Tags=ccapps ID=Qurb4 * Author=Winapp2.ini Project [qutIM *] Detect=HKCU\Software\qutIM FileKey1=%AppData%\qutIM\avatars\*|*|RECURSE Tags=ccinternet ID=qutIM * Author=Winapp2.ini Project [qutIM Chat History *] Detect=HKCU\Software\qutIM FileKey1=%AppData%\qutIM\history|*|RECURSE Tags=ccinternet ID=qutIM Chat History * Author=Winapp2.ini Project [QwertyLab RunAsSystem *] Detect=HKCU\Software\QwertyLab\RunAsSystem RegKey1=HKCU\Software\QwertyLab\RunAsSystem\mru Tags=ccutil ID=QwertyLab RunAsSystem * Author=Winapp2.ini Project [R-Wipe & Clean *] Detect=HKLM\Software\R-TT\RWC FileKey1=%AppData%\R-TT|*|RECURSE FileKey2=%SystemDrive%|*.sys.rwc FileKey3=%WinDir%\SoftwareDistribution|*.log.rwc ExcludeKey1=PATH|%AppData%\R-TT\RWC\WL\|* Tags=ccutil ID=R-Wipe & Clean * Author=Winapp2.ini Project [RadeonPro *] DetectFile=%AppData%\RadeonPro FileKey1=%AppData%\RadeonPro|*.bak*;*.bkp;*.old FileKey2=%AppData%\RadeonPro\Cache|*|RECURSE FileKey3=%AppData%\RadeonPro\Temp|*|RECURSE Tags=ccutil ID=RadeonPro * Author=Winapp2.ini Project [Radialix 2 *] Detect=HKCU\Software\Radialix FileKey1=%ProgramFiles%\Radialix 2|*.txt;*.url;*diz Tags=ccapps ID=Radialix 2 * Author=Winapp2.ini Project [RadioBOSS *] DetectFile=%AppData%\djsoft.net\RadioBOSS* FileKey1=%AppData%\djsoft.net\RadioBOSS*|*.bak;*log.txt;nowplaying.txt;~tmp FileKey2=%AppData%\djsoft.net\RadioBOSS*\log|*log.txt FileKey3=%AppData%\djsoft.net\RadioBOSS*\profile|*.bak FileKey4=%AppData%\djsoft.net\RadioBOSS*\report|*.csv FileKey5=%AppData%\djsoft.net\RadioBOSS*\temp|* Tags=ccinternet ID=RadioBOSS * Author=Winapp2.ini Project [Rage *] Detect=HKCU\Software\Valve\Steam\Apps\9200 FileKey1=%AppData%\id software\rage|*|RECURSE Tags=ccapps ID=Rage * Author=Winapp2.ini Project [Rainlendar 2 *] DetectFile=%UserProfile%\.rainlendar2 FileKey1=%UserProfile%\.rainlendar2|rainlendar2.log FileKey2=%UserProfile%\.rainlendar2\backups|*|RECURSE Tags=ccapps ID=Rainlendar 2 * Author=Winapp2.ini Project [Rainmeter *] Detect=HKLM\Software\Rainmeter FileKey1=%AppData%\Rainmeter\Updates|* Tags=ccutil ID=Rainmeter * Author=Winapp2.ini Project [Ranch Rush *] Detect1=HKLM\Software\Big Fish Games\Persistence\Install\F2580T1L1 Detect2=HKLM\Software\Big Fish Games\Persistence\Install\F5659T1L1 Detect3=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ranch Rush1.0 DetectFile=%ProgramFiles%\Ranch Rush* FileKey1=%ProgramData%\FreshGames\RanchRush\*|*.log;temp_data.ssp FileKey2=%ProgramFiles%\Ranch Rush*|*.html;*.nfo Tags=ccapps ID=Ranch Rush * Author=Winapp2.ini Project [Raspberry Pi Imager *] DetectFile=%LocalAppData%\Raspberry Pi\Imager FileKey1=%LocalAppData%\Raspberry Pi\Imager\cache|*.cache FileKey2=%LocalAppData%\Raspberry Pi\Imager\cache\*|* Tags=ccutil ID=Raspberry Pi Imager * Author=Winapp2.ini Project [RAV Antivirus *] DetectFile=%AppData%\rav-antivirus-client FileKey1=%AppData%\rav-antivirus-client|*.old;LOG;Network Persistent State|RECURSE FileKey2=%AppData%\rav-antivirus-client\*Cache|* FileKey3=%AppData%\rav-antivirus-client\blob_storage|*|RECURSE FileKey4=%AppData%\rav-antivirus-client\Partitions\*|Network Persistent State FileKey5=%AppData%\rav-antivirus-client\Partitions\*\*Cache|* FileKey6=%AppData%\rav-antivirus-client\Partitions\*\blob_storage|*|RECURSE Tags=ccapps ID=RAV Antivirus * Author=Winapp2.ini Project [Rayman Legends *] DetectFile=%ProgramFiles%\Rayman Legends FileKey1=%ProgramFiles%\Rayman Legends\_CommonRedist|*|REMOVESELF Tags=ccapps ID=Rayman Legends * Author=Winapp2.ini Project [Razer *] DetectFile=%ProgramData%\Razer FileKey1=%LocalAppData%\Razer\*\*Cache|* FileKey2=%LocalAppData%\Razer\*\Log*|*|RECURSE FileKey3=%LocalAppData%\Razer\*\Settings|GACache.bin FileKey4=%ProgramData%\Razer\*|DiagnoseReport*.txt FileKey5=%ProgramData%\Razer\*\*Cache|* FileKey6=%ProgramData%\Razer\*\Accounts\*\DataSync|SyncDate.txt FileKey7=%ProgramData%\Razer\*\Log*|*|RECURSE FileKey8=%ProgramData%\Razer\*\ProductUpdates\Downloads|* FileKey9=%ProgramFiles%\Razer\*|*.log Tags=ccutil ID=Razer * Author=Winapp2.ini Project [RCleaner *] DetectFile=%ProgramFiles%\RCleaner FileKey1=%ProgramFiles%\RCleaner|log.txt Tags=ccutil ID=RCleaner * Author=Winapp2.ini Project [Real Network Monitor *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Real Network Monitor FileKey1=%ProgramFiles%\Real Network Monitor|*.xml Tags=ccinternet ID=Real Network Monitor * Author=Winapp2.ini Project [Realms of Arkania: Blade of Destiny *] DetectFile=%UserProfile%\Documents\BladeofDestiny FileKey1=%UserProfile%\Documents\BladeofDestiny\Consolelog|*|RECURSE Tags=ccapps ID=Realms of Arkania: Blade of Destiny * Author=Winapp2.ini Project [Realore Whiterra Roads of Rome NG *] DetectFile=%AppData%\Realore Whiterra Roads of Rome NG FileKey1=%AppData%\Realore Whiterra Roads of Rome NG|log.txt Tags=ccapps ID=Realore Whiterra Roads of Rome NG * Author=Winapp2.ini Project [RealPlayer *] DetectFile=%AppData%\Real\RealPlayer FileKey1=%AppData%\Real\Real*Player|cookies.txt;ctd.dat;RealPlayer-log.txt;realplayer.ste FileKey2=%AppData%\Real\Real*Player\History|* FileKey3=%AppData%\Real\RealPlayer\db|*|RECURSE FileKey4=%AppData%\Real\RealPlayer\ErrorLogs|* FileKey5=%AppData%\Real\RealPlayer\Temp|* FileKey6=%AppData%\Real\RealPlayer\ThumbsCache|*|RECURSE FileKey7=%AppData%\Real\RealPlayer\WatchFolders|*.log;*_scan*|RECURSE FileKey8=%AppData%\Real\RPDS\Cache|*|RECURSE FileKey9=%AppData%\Real\Update|Update-log.txt FileKey10=%AppData%\Real\Update\Temp|*|RECURSE FileKey11=%LocalAppData%\Real\RealPlayer|*.db-shm;*.db-wal FileKey12=%LocalAppData%\Real\RealPlayer\Content\images|*.jpg FileKey13=%LocalAppData%\Real\RealPlayer\EBWebview|* FileKey14=%LocalAppData%\Real\RealPlayer\EBWebview\Default\Cache\Cache_Data|* FileKey15=%LocalAppData%\Real\RealPlayer\EBWebview\Default\Code Cache\js|* FileKey16=%ProgramData%\Real\RealPlayer|*-log.txt;S-* FileKey17=%ProgramData%\Real\RPDS\Content\images|*.jpg FileKey18=%ProgramData%\Real\RPDS\Logs|*.log* FileKey19=%ProgramData%\Real\Update_OB|RealPlayer-log.txt FileKey20=%ProgramData%\RPDS\Content\images|*.jpg FileKey21=%ProgramFiles%\Real\RealPlayer\common|cookies.txt FileKey22=%ProgramFiles%\Real\RealPlayer\RPDS|install.log FileKey23=%WinDir%|cdplayer.ini RegKey1=HKCU\Software\RealNetworks\RealJukebox\1.0\Preferences\WatchFolders ExcludeKey1=PATH|%AppData%\Real\RealPlayer\WatchFolders\|*scan.out Tags=ccmedia ID=RealPlayer * Author=Winapp2.ini Project [Realtek *] Detect=HKLM\Software\Realtek FileKey1=%ProgramData%\Realtek|*.log FileKey2=%ProgramFiles%\Realtek*|*.*log;*.txt|RECURSE FileKey3=%ProgramFiles%\Temp|*|REMOVESELF FileKey4=%SystemDrive%|RHDSetup.log ExcludeKey1=FILE|%ProgramFiles%\Realtek\*\|InstCtrl.txt ExcludeKey2=FILE|%ProgramFiles%\Realtek\*\|setupctrl.txt Tags=ccutil ID=Realtek * Author=Winapp2.ini Project [Recent Files Scanner *] Detect=HKCU\Software\Groupwyse Software\Recent Files Scanner RegKey1=HKCU\Software\Groupwyse Software\Recent Files Scanner\Paths Tags=ccutil ID=Recent Files Scanner * Author=Winapp2.ini Project [Reckless Racing *] DetectFile=%LocalAppData%\Packages\Microsoft.Studios.RecklessRacingUltimate_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.Studios.RecklessRacingUltimate_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Studios.RecklessRacingUltimate_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.Studios.RecklessRacingUltimate_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.Studios.RecklessRacingUltimate_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Reckless Racing * Author=Winapp2.ini Project [Recovery Toolbox for Word *] DetectFile=%LocalAppData%\Recovery Toolbox for Word FileKey1=%LocalAppData%\Recovery Toolbox for Word|*.log Tags=ccutil ID=Recovery Toolbox for Word * Author=Winapp2.ini Project [Recuva *] Detect=HKCU\Software\Piriform\Recuva FileKey1=%ProgramData%\Recuva\BurgerData|ActivityData_*.json FileKey2=%ProgramFiles%\Recuva|*.log;Recuva_log*.txt FileKey3=%UserProfile%|Recuva_log*.txt Tags=ccutil ID=Recuva * Author=Winapp2.ini Project [Red Button *] Detect=HKCU\Software\Pothos\Red Button RegKey1=HKCU\Software\Pothos\Red Button|LastUpdateCheck Tags=ccutil ID=Red Button * Author=Winapp2.ini Project [Reflector *] DetectFile=%AppData%\Reflector FileKey1=%AppData%\Reflector|*.dmp;*.log Tags=ccapps ID=Reflector * Author=Winapp2.ini Project [Reg Organizer *] Detect=HKCU\Software\ChemTable Software\Reg Organizer FileKey1=%LocalAppData%\ChemTable Software\Reg Organizer|*.log|RECURSE FileKey2=%ProgramFiles%\Reg Organizer|*.txt Tags=ccutil ID=Reg Organizer * Author=Winapp2.ini Project [RegAlyzer *] Detect1=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer Detect2=HKCU\Software\Safer Networking Limited\RegAlyzer Detect3=HKLM\Software\Safer Networking Limited\HiveManager FileKey1=%AppData%\Safer Networking\RegAlyzer|history.sqlite RegKey1=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|LastKey RegKey2=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|RemoteListHistory RegKey3=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|SearchTerm RegKey4=HKCU\Software\Safer Networking Limited\RegAlyzer|LastKey RegKey5=HKCU\Software\Safer Networking Limited\RegAlyzer|RemoteListHistory RegKey6=HKCU\Software\Safer Networking Limited\RegAlyzer|SearchTerm Tags=ccutil ID=RegAlyzer * Author=Winapp2.ini Project [RegDoctor *] DetectFile=%ProgramFiles%\RegDoctor FileKey1=%ProgramFiles%\RegDoctor\Backup|log.txt Tags=ccutil ID=RegDoctor * Author=Winapp2.ini Project [RegHance *] Detect=HKCU\Software\Lavasoft\Reghance RegKey1=HKCU\Software\Lavasoft\Reghance|Last key RegKey2=HKCU\Software\Lavasoft\Reghance|LastBkmfile RegKey3=HKCU\Software\Lavasoft\Reghance|Recentkeys RegKey4=HKCU\Software\Lavasoft\Reghance|Repltext Tags=ccutil ID=RegHance * Author=Winapp2.ini Project [RegHunter *] DetectFile=%ProgramFiles%\Enigma Software Group\RegHunter FileKey1=%ProgramFiles%\Enigma Software Group\RegHunter\Log|* Tags=ccutil ID=RegHunter * Author=Winapp2.ini Project [Registrar Registry Manager *] Detect=HKCU\Software\Resplendence Sp\Registrar Registry Manager RegKey1=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|ExportForm.saveDialogExportFilename RegKey2=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|ExportForm.saveDialogExportInitialDir RegKey3=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|LastOpenedKey Tags=ccutil ID=Registrar Registry Manager * Author=Winapp2.ini Project [Registry Corrector *] DetectFile=%AppData%\RegCorrector FileKey1=%AppData%\RegCorrector|RegCorrector_Undo_*.reg Tags=ccutil ID=Registry Corrector * Author=Winapp2.ini Project [Registry Crawler *] Detect=HKLM\Software\4Developers\RCrawler RegKey1=HKLM\Software\4Developers\RCrawler\History RegKey2=HKLM\Software\4Developers\RCrawler\Settings|LastSearch Tags=ccutil ID=Registry Crawler * Author=Winapp2.ini Project [Registry Drill *] DetectFile=%ProgramFiles%\Easy Desk Utilities\Registry Drill FileKey1=%ProgramFiles%\Easy Desk Utilities\Registry Drill|*.log FileKey2=%WinDir%\System32\config|Regdrill Compact.txt Tags=ccutil ID=Registry Drill * Author=Winapp2.ini Project [Registry Finder *] DetectFile=%AppData%\RegistryFinder FileKey1=%AppData%\RegistryFinder|RegCountCache.json FileKey2=%AppData%\RegistryFinder\UndoHistory|* FileKey3=%AppData%\RegistryFinder\UnsentCrashReports\Logs|* FileKey4=%ProgramFiles%\Registry Finder|RegistryFinder.log Tags=ccutil ID=Registry Finder * Author=Winapp2.ini Project [Registry First Aid *] Detect=HKCU\Software\KsL Software\RFA FileKey1=%LocalAppData%\Microsoft\Windows|NTUSER.tmp;UsrClass.tmp FileKey2=%UserProfile%|NTUSER.tmp;UsrClass.tmp FileKey3=%WinDir%\ServiceProfiles\*Service|*.tmp* FileKey4=%WinDir%\System32\config|*.tmp* FileKey5=%WinDir%\System32\config\systemprofile|*.tmp* FileKey6=%WinDir%\SysWOW64\config\systemprofile|*.tmp* Tags=ccutil ID=Registry First Aid * Author=Winapp2.ini Project [Registry Help Pro *] DetectFile=%AppData%\Registry Help Pro FileKey1=%AppData%\Registry Help Pro|*Log.txt Tags=ccutil ID=Registry Help Pro * Author=Winapp2.ini Project [Registry Recon *] DetectFile=%ProgramFiles%\Arsenal Recon\Registry Recon FileKey1=%ProgramFiles%\Arsenal Recon\Registry Recon|RegistryRecon.db FileKey2=%ProgramFiles%\Arsenal Recon\Registry Recon\Log|*.log FileKey3=%ProgramFiles%\Arsenal Recon\Registry Recon\OutputData|*.log|RECURSE Tags=ccutil ID=Registry Recon * Author=Winapp2.ini Project [Registry Recovery Toolbox *] Detect=HKCU\Software\Registry Recovery Toolbox FileKey1=%LocalAppData%\Recovery Toolbox for Registry|*.log FileKey2=%LocalAppData%\Registry Recovery Toolbox|*.log RegKey1=HKCU\Software\Registry Recovery Toolbox\List Source Registry Files Ext Tags=ccutil ID=Registry Recovery Toolbox * Author=Winapp2.ini Project [Registry Winner *] DetectFile=%ProgramFiles%\Registry Winner FileKey1=%ProgramFiles%\Registry Winner|*.bak Tags=ccutil ID=Registry Winner * Author=Winapp2.ini Project [RegistryFix *] DetectFile=%ProgramFiles%\RegistryFix FileKey1=%ProgramFiles%\RegistryFix\logs|* Tags=ccutil ID=RegistryFix * Author=Winapp2.ini Project [RegScrubVistaXP *] DetectFile=%ProgramFiles%\RegScrubVistaXP FileKey1=%ProgramFiles%\RegScrubVistaXP|*.reg;*.rsf;RegEditX.sav Tags=ccutil ID=RegScrubVistaXP * Author=Winapp2.ini Project [RegServo *] DetectFile=%ProgramData%\regservo FileKey1=%ProgramData%\regservo\Logs|*|RECURSE Tags=ccutil ID=RegServo * Author=Winapp2.ini Project [RegToBat *] Detect=HKLM\Software\BlueLife\RegToBat RegKey1=HKLM\Software\BlueLife\RegToBat|LastRegFile Tags=ccutil ID=RegToBat * Author=Winapp2.ini Project [RegVac Registry Cleaner *] DetectFile=%ProgramFiles%\RegVac Registry Cleaner FileKey1=%ProgramFiles%\RegVac Registry Cleaner|*.xml;cantremove.txt;Undo*.reg FileKey2=%WinDir%\System32\RegVac|*|REMOVESELF Tags=ccutil ID=RegVac Registry Cleaner * Author=Winapp2.ini Project [RegWork *] DetectFile=%ProgramFiles%\RegWork FileKey1=%ProgramFiles%\RegWork\Logs|* FileKey2=%ProgramFiles%\RegWork\Tmp|* Tags=ccapps ID=RegWork * Author=Winapp2.ini Project [Reign: Conflict of Nations *] Detect=HKCU\Software\Valve\Steam\Apps\46380 FileKey1=%LocalAppData%\1C\Reign Conflict of Nations|PSPLog.log Tags=ccapps ID=Reign: Conflict of Nations * Author=Winapp2.ini Project [Remo Repair PowerPoint *] DetectFile=%ProgramFiles%\Remo Repair PowerPoint* FileKey1=%ProgramFiles%\Remo Repair PowerPoint*|*.LOG Tags=ccapps ID=Remo Repair PowerPoint * Author=Winapp2.ini Project [Rename Expert *] DetectFile=%AppData%\Rename Expert FileKey1=%AppData%\Rename Expert\*\Logs|* FileKey2=%AppData%\Rename Expert\*\Restore|*.xml Tags=ccutil ID=Rename Expert * Author=Winapp2.ini Project [Rename Us *] Detect=HKCU\Software\Vitaliy Levchenko\Renamus RegKey1=HKCU\Software\Vitaliy Levchenko\Renamus\Recent Projects RegKey2=HKCU\Software\Vitaliy Levchenko\Renamus\Settings|LastFolder Tags=ccutil ID=Rename Us * Author=Winapp2.ini Project [Renault Media Nav Evolution Toolbox *] DetectFile=%AppData%\RenaultAutomotive FileKey1=%AppData%\RenaultAutomotive\log|* FileKey2=%AppData%\RenaultAutomotive\tmp|*|RECURSE Tags=ccapps ID=Renault Media Nav Evolution Toolbox * Author=Winapp2.ini Project [Replay Media Catcher *] Detect=HKLM\Software\Applian Technologies\Replay Media Catcher 5 DetectFile=%AppData%\Replay Media Catcher 4 FileKey1=%AppData%\Replay Media Catcher 4|*.log FileKey2=%AppData%\Replay Media Catcher 4\History|*|REMOVESELF FileKey3=%LocalAppData%\Replay Media Catcher 5\History|*|REMOVESELF FileKey4=%LocalAppData%\Replay Media Catcher 5\Temp|*|REMOVESELF FileKey5=%LocalAppData%\Replay Media Catcher 5\UrlCache|*|REMOVESELF FileKey6=%ProgramFiles%\Applian Technologies\Replay Media Catcher*|*.html;*.rtf;*.txt Tags=ccinternet ID=Replay Media Catcher * Author=Winapp2.ini Project [Resilio Sync *] DetectFile1=%AppData%\BitTorrent Sync DetectFile2=%AppData%\Resilio Sync FileKey1=%AppData%\BitTorrent Sync|*.log;*.old FileKey2=%AppData%\Resilio Sync|*.journal;*.journal.zip;*.log;*.old;history.dat Tags=ccutil ID=Resilio Sync * Author=Winapp2.ini Project [Resource Hacker *] DetectFile=%ProgramFiles%\Resource Hacker FileKey1=%ProgramFiles%\Resource Hacker|reshacker.GID;ResHacker.ini Tags=ccutil ID=Resource Hacker * Author=Winapp2.ini Project [Respondus *] DetectFile=%LocalAppData%\Respondus FileKey1=%LocalAppData%\Respondus\Cache|LOG;LOG.old;Network Persistent State;Visited Links|RECURSE FileKey2=%LocalAppData%\Respondus\Cache\*Cache|*|RECURSE FileKey3=%LocalAppData%\Respondus\Cache\blob_storage|*|RECURSE Tags=ccapps ID=Respondus * Author=Winapp2.ini Project [Restorator 2007 *] Detect=HKCU\Software\Bomers\Restorator RegKey1=HKCU\Software\Bomers\Restorator\Restorator\Current|LastSearchString RegKey2=HKCU\Software\Bomers\Restorator\Restorator\FindDialog RegKey3=HKCU\Software\Bomers\Restorator\Restorator\GrabDialog RegKey4=HKCU\Software\Bomers\Restorator\Restorator\LastFoundFiles RegKey5=HKCU\Software\Bomers\Restorator\Restorator\MRUList Tags=ccapps ID=Restorator 2007 * Author=Winapp2.ini Project [Restore Point Creator *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CC48DE1C-8EC2-43BC-9201-29701CD9AE13}_is1 FileKey1=%ProgramData%|Restore Point Creator.log FileKey2=%ProgramFiles%\Restore Point Creator|*.log;*.txt Tags=ccutil ID=Restore Point Creator * Author=Winapp2.ini Project [ResumeMaker *] DetectFile=%ProgramData%\Individual Software\ResumeMaker FileKey1=%ProgramData%\Individual Software\ResumeMaker\R12|*.log Tags=ccapps ID=ResumeMaker * Author=Winapp2.ini Project [Reus *] Detect=HKCU\Software\Valve\Steam\Apps\222730 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Reus|errorReport*.txt Tags=ccapps ID=Reus * Author=Winapp2.ini Project [Revenge of the Titans *] DetectFile=%UserProfile%\.revenge_of_the_titans_1.80 FileKey1=%UserProfile%\.revenge_of_the_titans_1.80|*.log Tags=ccapps ID=Revenge of the Titans * Author=Winapp2.ini Project [Revo Uninstaller Backups *] DetectFile=%LocalAppData%\VS Revo Group\Revo Uninstaller* FileKey1=%LocalAppData%\VS Revo Group\Revo Uninstaller*|RUPBackUpData.ini FileKey2=%LocalAppData%\VS Revo Group\Revo Uninstaller*\BackupsData|*|RECURSE FileKey3=%ProgramFiles%\VS Revo Group\Revo Uninstaller Pro|*.bak Tags=ccutil ID=Revo Uninstaller Backups * Author=Winapp2.ini Project [Ride! *] DetectFile=%ProgramFiles%\Ride! FileKey1=%ProgramFiles%\Ride!|*.log;*.txt|RECURSE FileKey2=%ProgramFiles%\Ride!\DirectX9|*|REMOVESELF Tags=ccapps ID=Ride! * Author=Winapp2.ini Project [Riding Academy 3D *] Detect=HKCU\Software\Program-Ace\RidingAcademy3D FileKey1=%LocalAppData%\Riding Academy 3D\logs|* Tags=ccapps ID=Riding Academy 3D * Author=Winapp2.ini Project [Riding Star 3 *] Detect=HKLM\Software\DTP\Riding Star 3 FileKey1=%ProgramFiles%\Riding Star 3|INSTALL.LOG;log.txt Tags=ccapps ID=Riding Star 3 * Author=Winapp2.ini Project [RIFT *] DetectFile=%UserProfile%\Documents\RIFT FileKey1=%AppData%\RIFT|*.log FileKey2=%ProgramFiles%\RIFT|*.log FileKey3=%Public%\Games\RIFT|*.log FileKey4=%SystemDrive%\RIFT|*.log FileKey5=%UserProfile%\Documents\RIFT|*.log Tags=ccapps ID=RIFT * Author=Winapp2.ini Project [Rift of the NecroDancer *] DetectFile=%UserProfile%\AppData\LocalLow\Brace Yourself Games\Rift of the NecroDancer* FileKey1=%UserProfile%\AppData\LocalLow\Brace Yourself Games\Rift of the NecroDancer*|*.log Tags=ccapps ID=Rift of the NecroDancer * Author=Winapp2.ini Project [RimWorld *] Detect=HKCU\Software\Valve\Steam\Apps\294100 FileKey1=%UserProfile%\AppData\LocalLow\Ludeon Studios\RimWorld by Ludeon Studios|player.log Tags=ccapps ID=RimWorld * Author=Winapp2.ini Project [Ring Central *] DetectFile=%ProgramData%\RingCentral FileKey1=%ProgramData%\RingCentral\LogFiles|* Tags=ccinternet ID=Ring Central * Author=Winapp2.ini Project [Riot Client *] DetectFile=%LocalAppData%\Riot Games\Riot Client FileKey1=%AppData%\riot-client-ux|*|RECURSE FileKey2=%LocalAppData%\Riot Games\Riot Client\Crashes\*\reports|*|RECURSE FileKey3=%LocalAppData%\Riot Games\Riot Client\Data\Cookies|* FileKey4=%LocalAppData%\Riot Games\Riot Client\Logs|*|RECURSE Tags=ccapps ID=Riot Client * Author=Winapp2.ini Project [Riot Vanguard *] DetectFile=%ProgramFiles%\Riot Vanguard FileKey1=%ProgramFiles%\Riot Vanguard\Logs|*.log Tags=ccapps ID=Riot Vanguard * Author=Winapp2.ini Project [Rise Of Legends *] DetectFile=%AppData%\Microsoft\Rise Of Legends FileKey1=%AppData%\Microsoft\Rise Of Legends\Logs|* FileKey2=%AppData%\Microsoft\Rise Of Legends\temp|*|RECURSE Tags=ccapps ID=Rise Of Legends * Author=Winapp2.ini Project [Rise of Nations *] Detect1=HKCU\Software\Microsoft\Microsoft Games\Rise of Nations Detect2=HKCU\Software\Microsoft\Microsoft Games\RiseofNationsExpansion FileKey1=%AppData%\Microsoft Games\Rise of Nations\Logs|* FileKey2=%ProgramFiles%\Microsoft Games\Rise of Nations\Logs|* Tags=ccapps ID=Rise of Nations * Author=Winapp2.ini Project [Rise of the Tomb Raider *] Detect=HKCU\Software\Valve\Steam\Apps\391220 FileKey1=%UserProfile%\Documents\Rise of the Tomb Raider|*.log Tags=ccapps ID=Rise of the Tomb Raider * Author=Winapp2.ini Project [Rising Hell *] DetectFile=%UserProfile%\AppData\LocalLow\Tahoe Games\Rising Hell FileKey1=%UserProfile%\AppData\LocalLow\Tahoe Games\Rising Hell|*txt FileKey2=%UserProfile%\AppData\LocalLow\Tahoe Games\Rising Hell\Unity|*|REMOVESELF Tags=ccapps ID=Rising Hell * Author=Winapp2.ini Project [Risk of Rain 2 *] DetectFile=%UserProfile%\AppData\LocalLow\Hopoo Games, LLC\Risk of Rain 2 FileKey1=%UserProfile%\AppData\LocalLow\Hopoo Games, LLC\Risk of Rain 2|*.log Tags=ccapps ID=Risk of Rain 2 * Author=Winapp2.ini Project [Riverbed AirPcap *] DetectFile=%ProgramFiles%\Riverbed\AirPcap\driver FileKey1=%ProgramFiles%\Riverbed\AirPcap\driver|*.log Tags=ccapps ID=Riverbed AirPcap * Author=Winapp2.ini Project [Rkill *] DetectFile1=%UserProfile%\Desktop\Rkill DetectFile2=%UserProfile%\Desktop\Rkill.txt FileKey1=%UserProfile%\Desktop|*rkill*.* FileKey2=%UserProfile%\Desktop\Rkill|*|REMOVESELF Tags=ccutil ID=Rkill * Author=Winapp2.ini Project [Roadkil's Unstoppable Copier *] Detect=HKCU\Software\Roadkil RegKey1=HKCU\Software\Roadkil|Source_Unstp RegKey2=HKCU\Software\Roadkil|Target_Unstp Tags=ccutil ID=Roadkil's Unstoppable Copier * Author=Winapp2.ini Project [Roblox *] DetectFile=%LocalAppData%\Roblox FileKey1=%LocalAppData%\Roblox\Downloads|*|RECURSE FileKey2=%LocalAppData%\Roblox\Logs|*|RECURSE FileKey3=%ProgramData%\Roblox\Downloads|*|RECURSE FileKey4=%UserProfile%\AppData\LocalLow\RbxLogs|*|RECURSE Tags=ccapps ID=Roblox * Author=Winapp2.ini Project [RoboBasket3 *] DetectFile=%AppData%\RoboBasket3 FileKey1=%AppData%\RoboBasket3|log.database Tags=ccutil ID=RoboBasket3 * Author=Winapp2.ini Project [Roccat Swarm *] DetectFile=%AppData%\ROCCAT\SWARM FileKey1=%AppData%\ROCCAT\SWARM\change_log|*|REMOVESELF FileKey2=%AppData%\ROCCAT\SWARM\log|*|RECURSE FileKey3=%ProgramFiles%\ROCCAT\ROCCAT Swarm|log.txt Tags=ccutil ID=Roccat Swarm * Author=Winapp2.ini Project [Rochard *] Detect=HKCU\Software\Valve\Steam\Apps\107800 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Rochard\Rochard_Data|Output_log.txt FileKey2=%UserProfile%\AppData\LocalLow\Recoil Games\Rochard|journal.txt Tags=ccapps ID=Rochard * Author=Winapp2.ini Project [Rock of Ages *] Detect1=HKCU\Software\Valve\Steam\Apps\22230 Detect2=HKLM\Software\ACE Team\Rock of Ages FileKey1=%ProgramFiles%\ATLUS\Rock of Ages\Prerequisites|*|REMOVESELF FileKey2=%ProgramFiles%\Steam\steamapps\common\Rock of Ages\Prerequisites|*|REMOVESELF Tags=ccapps ID=Rock of Ages * Author=Winapp2.ini Project [Rocket League *] Detect=HKCU\Software\Valve\Steam\Apps\252950 FileKey1=%UserProfile%\Documents\My Games\Rocket League\TAGame\Cache\WebCache|* FileKey2=%UserProfile%\Documents\My Games\Rocket League\TAGame\Logs|* Tags=ccapps ID=Rocket League * Author=Winapp2.ini Project [rocksdanister Lively Wallpaper *] DetectFile=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy FileKey1=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\LocalCache\Local\Lively Wallpaper\logs|* FileKey3=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\LocalCache\Local\Lively Wallpaper\UI|*.txt FileKey4=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\LocalCache\Local\Lively Wallpaper\WebView2|*|RECURSE FileKey5=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\Settings|*.log* FileKey6=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\12030rocksdanister.LivelyWallpaper_97hta09mmv6hy\TempState|*|REMOVESELF Tags=ccapps ID=rocksdanister Lively Wallpaper * Author=Winapp2.ini Project [Rockstar Games Launcher *] DetectFile=%UserProfile%\Documents\Rockstar Games FileKey1=%UserProfile%\Documents\Rockstar Games\Launcher|*.log FileKey2=%UserProfile%\Documents\Rockstar Games\Social Club|*.log Tags=ccapps ID=Rockstar Games Launcher * Author=Winapp2.ini Project [RoGlass *] DetectFile=%LocalAppData%\RoGlass FileKey1=%LocalAppData%\RoGlass|*cache FileKey2=%LocalAppData%\RoGlass\Logs|* Tags=ccapps ID=RoGlass * Author=Winapp2.ini Project [Roland Cloud Manager *] DetectFile=%AppData%\Roland Cloud\Cloud Manager FileKey1=%AppData%\Roland Cloud\Cache\WebEngineCache|Visited Links FileKey2=%AppData%\Roland Cloud\Cache\WebEngineCache\*Cache|* FileKey3=%AppData%\Roland Cloud\Cache\WebEngineCache\blob_storage|*|RECURSE FileKey4=%AppData%\Roland Cloud\Cloud Manager|*.log FileKey5=%AppData%\Roland Cloud\concerto\breakpad\dumps|*.dmp FileKey6=%AppData%\Roland Cloud\rcmhelper|*.log FileKey7=%AppData%\Roland Cloud\rcmservice|*.log FileKey8=%AppData%\Roland Cloud\shared|*.log FileKey9=%LocalAppData%\Roland Cloud\Cloud Manager*\Cache\QtWebEngine\Default\Cache|* FileKey10=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default|*-journal;*.old;LOG;QuotaManager;Visited Links|RECURSE FileKey11=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\*Cache|*|RECURSE FileKey12=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\blob_storage|*|RECURSE FileKey13=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\VideoDecodeStats|* Tags=ccmedia ID=Roland Cloud Manager * Author=Winapp2.ini Project [ROLI Connect *] DetectFile=%AppData%\ROLI Connect FileKey1=%AppData%\ROLI Connect|*-journal;log.log;Network Persistent State FileKey2=%AppData%\ROLI Connect\*Cache|*|RECURSE FileKey3=%AppData%\ROLI Connect\__update__|*Setup*.exe FileKey4=%AppData%\ROLI Connect\Logs|* Tags=ccmedia ID=ROLI Connect * Author=Winapp2.ini Project [RollBack Rx *] DetectFile=%ProgramFiles%\Shield FileKey1=%ProgramFiles%\Shield|*.log Tags=ccutil ID=RollBack Rx * Author=Winapp2.ini Project [ROM With a View - Director's Cut *] Detect=HKCU\Software\Moon Valley Software RegKey1=HKCU\Software\Moon Valley Software\CD Ultra\Recent File List RegKey2=HKCU\Software\Moon Valley Software\ROM With a View - Director's Cut\Recent File List Tags=ccmedia ID=ROM With a View - Director's Cut * Author=Winapp2.ini Project [Romain Petges Attribute Changer *] Detect1=HKCU\Software\Attribute Changer Detect2=HKCU\Software\Romain's Software\Attribute Changer RegKey1=HKCU\Software\Attribute Changer\File Settings|!DTDateMax RegKey2=HKCU\Software\Attribute Changer\File Settings|!DTDateMin RegKey3=HKCU\Software\Attribute Changer\File Settings|!DTTimeMax RegKey4=HKCU\Software\Attribute Changer\File Settings|!DTTimeMin RegKey5=HKCU\Software\Attribute Changer\File Settings|AccessedValue RegKey6=HKCU\Software\Attribute Changer\File Settings|CreatedValue RegKey7=HKCU\Software\Attribute Changer\File Settings|LimitDateMax RegKey8=HKCU\Software\Attribute Changer\File Settings|LimitDateMin RegKey9=HKCU\Software\Attribute Changer\File Settings|LimitTimeMax RegKey10=HKCU\Software\Attribute Changer\File Settings|LimitTimeMin RegKey11=HKCU\Software\Attribute Changer\File Settings|ModifiedValue RegKey12=HKCU\Software\Attribute Changer\File Settings|PhotoValue RegKey13=HKCU\Software\Attribute Changer\File Settings|RandomDateMax RegKey14=HKCU\Software\Attribute Changer\File Settings|RandomDateMin RegKey15=HKCU\Software\Attribute Changer\File Settings|RandomTimeMax RegKey16=HKCU\Software\Attribute Changer\File Settings|RandomTimeMin RegKey17=HKCU\Software\Attribute Changer\Folder Settings|!DTDateMax RegKey18=HKCU\Software\Attribute Changer\Folder Settings|!DTDateMin RegKey19=HKCU\Software\Attribute Changer\Folder Settings|!DTTimeMax RegKey20=HKCU\Software\Attribute Changer\Folder Settings|!DTTimeMin RegKey21=HKCU\Software\Attribute Changer\Folder Settings|AccessedValue RegKey22=HKCU\Software\Attribute Changer\Folder Settings|CreatedValue RegKey23=HKCU\Software\Attribute Changer\Folder Settings|LimitDateMax RegKey24=HKCU\Software\Attribute Changer\Folder Settings|LimitDateMin RegKey25=HKCU\Software\Attribute Changer\Folder Settings|LimitTimeMax RegKey26=HKCU\Software\Attribute Changer\Folder Settings|LimitTimeMin RegKey27=HKCU\Software\Attribute Changer\Folder Settings|ModifiedValue RegKey28=HKCU\Software\Attribute Changer\Folder Settings|RandomDateMax RegKey29=HKCU\Software\Attribute Changer\Folder Settings|RandomDateMin RegKey30=HKCU\Software\Attribute Changer\Folder Settings|RandomTimeMax RegKey31=HKCU\Software\Attribute Changer\Folder Settings|RandomTimeMin RegKey32=HKCU\Software\Attribute Changer\Global Settings|OtherExport RegKey33=HKCU\Software\Romain's Software\Attribute Changer\File Settings|AccessedDT RegKey34=HKCU\Software\Romain's Software\Attribute Changer\File Settings|CreatedDT RegKey35=HKCU\Software\Romain's Software\Attribute Changer\File Settings|FltMaxDate RegKey36=HKCU\Software\Romain's Software\Attribute Changer\File Settings|FltMaxTime RegKey37=HKCU\Software\Romain's Software\Attribute Changer\File Settings|FltMinDate RegKey38=HKCU\Software\Romain's Software\Attribute Changer\File Settings|FltMinTime RegKey39=HKCU\Software\Romain's Software\Attribute Changer\File Settings|ModifiedDT RegKey40=HKCU\Software\Romain's Software\Attribute Changer\File Settings|PictureDT RegKey41=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RandomMaxDate RegKey42=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RandomMaxTime RegKey43=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RandomMinDate RegKey44=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RandomMinTime RegKey45=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RLowerDT RegKey46=HKCU\Software\Romain's Software\Attribute Changer\File Settings|RUpperDT RegKey47=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|AccessedDT RegKey48=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|CreatedDT RegKey49=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|FltMaxDate RegKey50=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|FltMaxTime RegKey51=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|FltMinDate RegKey52=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|FltMinTime RegKey53=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|ModifiedDT RegKey54=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RandomMaxDate RegKey55=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RandomMaxTime RegKey56=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RandomMinDate RegKey57=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RandomMinTime RegKey58=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RLowerDT RegKey59=HKCU\Software\Romain's Software\Attribute Changer\Folder Settings|RUpperDT RegKey60=HKCU\Software\Romain's Software\Attribute Changer\Global Settings|PFolderFilter Tags=ccutil ID=Romain Petges Attribute Changer * Author=Winapp2.ini Project [Router Port Forwarding *] DetectFile=%ProgramFiles%\Router Port Forwarding FileKey1=%ProgramFiles%\Router Port Forwarding\bin\log|*.log Tags=ccutil ID=Router Port Forwarding * Author=Winapp2.ini Project [Roxio *] Detect=HKCU\Software\Roxio FileKey1=%AppData%\Roxio|*.log;*Log.txt FileKey2=%AppData%\Roxio Burn\Temp|*|RECURSE FileKey3=%AppData%\Roxio Log Files|*|RECURSE FileKey4=%AppData%\Roxio\Dragon\3.x\*Logs|*.log FileKey5=%AppData%\Roxio\Dragon\3.x\DiscInfoCache|*.tmp FileKey6=%AppData%\Roxio\MediaManager*|ItemThumbnails.dat FileKey7=%LocalAppData%|rx_*.Cache FileKey8=%ProgramData%\Roxio|*.log;cardinfo.* FileKey9=%WinDir%\System32\config\systemprofile\AppData\Roaming\Roxio Log Files|*|RECURSE FileKey10=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Roxio Log Files|*|RECURSE Tags=ccapps ID=Roxio * Author=Winapp2.ini Project [Roxio Creator Pro *] Detect1=HKCU\Software\Roxio\EMC13 Detect2=HKCU\Software\Roxio\EMC14 FileKey1=%UserProfile%\Documents\Roxio\Music Disc Creator|* RegKey1=HKCU\Software\Roxio\EMC13\VideoUI\RecentFiles\Catalogs RegKey2=HKCU\Software\Roxio\EMC14\Label Creator\Recent File List RegKey3=HKCU\Software\Roxio\EMC14\MusicDiscCreator\Directories RegKey4=HKCU\Software\Roxio\EMC14\MusicDiscCreator\MediaSelector RegKey5=HKCU\Software\Roxio\EMC14\PhotoSuite\RoxioPhotoSuite\MRUFiles RegKey6=HKCU\Software\Roxio\EMC14\SoundEdit\Directories RegKey7=HKCU\Software\Roxio\EMC14\SoundEdit\MediaSelector RegKey8=HKCU\Software\Roxio\EMC14\SoundEdit\WaveCache RegKey9=HKCU\Software\Roxio\EMC14\VideoConvert\Directories RegKey10=HKCU\Software\Roxio\EMC14\VideoConvert\MediaSelector RegKey11=HKCU\Software\Roxio\EMC14\VideoUI\RecentFiles\Albums RegKey12=HKCU\Software\Roxio\EMC14\VideoUI\RecentFiles\Catalogs RegKey13=HKCU\Software\Roxio\EMC14\VideoUI\RecentFiles\DVD Projects RegKey14=HKCU\Software\Roxio\EMC14\VideoUI\RecentFiles\Productions RegKey15=HKLM\Software\Roxio\EMC13\Common SDK\Users RegKey16=HKLM\Software\Roxio\EMC14\Common SDK\Users RegKey17=HKLM\Software\Wow6432Node\Roxio\EMC13\Common SDK\Users RegKey18=HKLM\Software\Wow6432Node\Roxio\EMC14\Common SDK\Users Tags=ccapps ID=Roxio Creator Pro * Author=Winapp2.ini Project [RPKG *] DetectFile=%LocalAppData%\rpkg FileKey1=%LocalAppData%\rpkg\db|*.old;LOG Tags=ccutil ID=RPKG * Author=Winapp2.ini Project [RssBandit *] DetectFile=%AppData%\RssBandit FileKey1=%AppData%\RssBandit|*.bak;*.log Tags=ccinternet ID=RssBandit * Author=Winapp2.ini Project [rtmpGUI *] DetectFile=%UserProfile%\.swfinfo FileKey1=%UserProfile%|.swfinfo Tags=ccutil ID=rtmpGUI * Author=Winapp2.ini Project [Rust *] Detect=HKCU\Software\Valve\Steam\Apps\252490 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Rust|debug_steamclient.txt;output_log.txt FileKey2=%ProgramFiles%\Steam\SteamApps\Common\Rust\temp|* Tags=ccapps ID=Rust * Author=Winapp2.ini Project [RuTracker Proxy *] DetectFile=%AppData%\rto-proxy FileKey1=%AppData%\rto-proxy|*-journal FileKey2=%AppData%\rto-proxy\*Cache|*|RECURSE Tags=ccinternet ID=RuTracker Proxy * Author=Winapp2.ini Project [SABnzbd *] DetectFile=%LocalAppData%\sabnzbd FileKey1=%LocalAppData%\SABnzbd|*.bak FileKey2=%LocalAppData%\sabnzbd\admin|history1.db;totals9.sab FileKey3=%LocalAppData%\sabnzbd\logs|* Tags=ccapps ID=SABnzbd * Author=Winapp2.ini Project [Safe Watch *] DetectFile=%UserProfile%\AppData\LocalLow\Safe-Watch-Updater FileKey1=%UserProfile%\AppData\LocalLow\Safe-Watch-Updater|*.exe Tags=ccinternet ID=Safe Watch * Author=Winapp2.ini Project [Sage ACT! *] Detect=HKLM\Software\ACT FileKey1=%ProgramData%\Sage Software, Inc\ACT! by Sage\ActUpdate|*|RECURSE Tags=ccapps ID=Sage ACT! * Author=Winapp2.ini Project [Sage Simply Accounting *] Detect=HKLM\Software\Sage Software\Simply Accounting FileKey1=%ProgramData%\Sage Software\Simply Accounting\Download|*|RECURSE Tags=ccapps ID=Sage Simply Accounting * Author=Winapp2.ini Project [SageThumbs *] DetectFile=%ProgramFiles%\SageThumbs\64\SageThumbs.dll FileKey1=%LocalAppData%|SageThumbs.* Tags=ccapps ID=SageThumbs * Author=Winapp2.ini Project [SAM Broadcaster *] Detect=HKCU\Software\SAMBC FileKey1=%LocalAppData%\SpacialAudio\SAMBC|*.log|RECURSE FileKey2=%LocalAppData%\SpacialAudio\SAMBC\backup|*|RECURSE Tags=ccmedia ID=SAM Broadcaster * Author=Winapp2.ini Project [Samsung Account *] DetectFile1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g DetectFile2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccountPluginforSa_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey9=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey10=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey11=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey12=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey13=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey14=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey15=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey17=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey18=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey19=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey20=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey22=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey23=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey25=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey26=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey27=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey28=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey29=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey30=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey31=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey32=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey33=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey34=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey35=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey36=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey37=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey38=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey39=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey40=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey41=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey42=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey43=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey44=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey45=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey46=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey47=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey48=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey49=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey50=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey51=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey52=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey53=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey54=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey55=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey56=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey57=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey58=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey59=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey60=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey61=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Stability|*|REMOVESELF FileKey62=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey63=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey64=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey65=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey66=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\LocalState\logs|* FileKey67=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\Settings|*.log* FileKey68=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey69=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey70=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccountPluginforSa_3c1yjt4zspk6g\AC|*|RECURSE FileKey71=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccountPluginforSa_3c1yjt4zspk6g\Settings|*.log* FileKey72=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccountPluginforSa_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey73=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungAccountPluginforSa_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Account * Author=Winapp2.ini Project [Samsung Air Command *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.AirCommand_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.AirCommand_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.AirCommand_wyx1vj98g3asy\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.AirCommand_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.AirCommand_wyx1vj98g3asy\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Air Command * Author=Winapp2.ini Project [Samsung Bixby *] DetectFile1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g DetectFile2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungIntelligenceVoiceS_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\LocalState\Microsoft\AppCenter\Errors|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\LocalState\Samsung\Bixby\Logs|*.log FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.Bixby_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungIntelligenceVoiceS_3c1yjt4zspk6g\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungIntelligenceVoiceS_3c1yjt4zspk6g\Settings|*.log* FileKey9=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungIntelligenceVoiceS_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungIntelligenceVoiceS_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey11=%ProgramData%\Samsung\Intelligence Voice Service\Logs|* Tags=ccapps ID=Samsung Bixby * Author=Winapp2.ini Project [Samsung Cloud *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\LocalState|*.logger FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\LocalState\logs|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Cloud * Author=Winapp2.ini Project [Samsung Device Care *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g\RoamingState\Samsung\SamsungDeviceCare\logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Device Care * Author=Winapp2.ini Project [Samsung Display Manager *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.432392D72213_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.432392D72213_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.432392D72213_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.432392D72213_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.432392D72213_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Display Manager * Author=Winapp2.ini Project [Samsung Find *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g\LocalState\logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungFind_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey6=%ProgramData%\Samsung\SamsungFind\log|* Tags=ccutil ID=Samsung Find * Author=Winapp2.ini Project [Samsung Flow *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungFlux_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungFlux_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungFlux_wyx1vj98g3asy\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungFlux_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungFlux_wyx1vj98g3asy\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Flow * Author=Winapp2.ini Project [Samsung Galaxy Book Settings *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.GalaxySetting_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.GalaxySetting_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.GalaxySetting_wyx1vj98g3asy\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.GalaxySetting_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.GalaxySetting_wyx1vj98g3asy\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Galaxy Book Settings * Author=Winapp2.ini Project [Samsung Galaxy Book Smart Switch *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Galaxy Book Smart Switch * Author=Winapp2.ini Project [Samsung Galaxy Buds *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.GalaxyBuds_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Galaxy Buds * Author=Winapp2.ini Project [Samsung Gallery *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\LocalState|*.xml FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\LocalState\Logs|*|RECURSE FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\LocalState\TempDownloadFilesService|*|RECURSE FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\Settings|*.log* FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PCGallery_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Gallery * Author=Winapp2.ini Project [Samsung Game Link *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungVSTLink_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungVSTLink_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungVSTLink_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungVSTLink_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungVSTLink_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey5=%ProgramData%\SamsungVST\Log|* Tags=ccapps ID=Samsung Game Link * Author=Winapp2.ini Project [Samsung HMD Odyssey Control *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.OdysseyControl_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.OdysseyControl_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.OdysseyControl_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.OdysseyControl_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.OdysseyControl_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey5=%ProgramFiles%\Samsung\Odyssey Control|*.tmp Tags=ccapps ID=Samsung HMD Odyssey Control * Author=Winapp2.ini Project [Samsung HMD Odyssey Experience *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g\LocalState|*.bak FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyExperien_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung HMD Odyssey Experience * Author=Winapp2.ini Project [Samsung HMD Odyssey Home *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\LocalState|*.xml FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\LocalState\ContentPackage|*.jpg;*.png FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\Settings|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungHMDOdysseyHome_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung HMD Odyssey Home * Author=Winapp2.ini Project [Samsung Internet Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|*Web Data FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Samsung\Internet\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Samsung Internet Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Samsung Internet Autoplay Preferences *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Samsung Internet Autoplay Preferences * Author=Winapp2.ini Project [Samsung Internet Bookmark Backups *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|Bookmarks.bak Tags=ccapps ID=Samsung Internet Bookmark Backups * Author=Winapp2.ini Project [Samsung Internet Bookmark Favicons *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|favicons* Tags=ccapps ID=Samsung Internet Bookmark Favicons * Author=Winapp2.ini Project [Samsung Internet Caches *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Samsung\Internet\User Data|Module Info Cache FileKey3=%LocalAppData%\Samsung\Internet\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Samsung\Internet\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Samsung\Internet\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Samsung\Internet\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Samsung\Internet\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Samsung\Internet\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Samsung\Internet\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Samsung\Internet\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Samsung\Internet\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Samsung\Internet\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Samsung\Internet\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Samsung\Internet\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Samsung\Internet\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Samsung\Internet\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Samsung\Internet\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Samsung\Internet\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Samsung\Internet\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Samsung Internet Caches * Author=Winapp2.ini Project [Samsung Internet Default App Handlers *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|PreferredApps Tags=ccapps ID=Samsung Internet Default App Handlers * Author=Winapp2.ini Project [Samsung Internet Download History *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Samsung Internet Download History * Author=Winapp2.ini Project [Samsung Internet DRM Data *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Samsung\Internet\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Samsung Internet DRM Data * Author=Winapp2.ini Project [Samsung Internet Extension Cookies *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|Extension Cookies Tags=ccapps ID=Samsung Internet Extension Cookies * Author=Winapp2.ini Project [Samsung Internet Pinned Tabs *] DetectFile=%LocalAppData%\Samsung\Internet\User Data RegKey1=HKCU\Software\Samsung\Internet\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Samsung Internet Pinned Tabs * Author=Winapp2.ini Project [Samsung Internet Privacy Sandbox *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data|*first_party_sets* FileKey2=%LocalAppData%\Samsung\Internet\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Samsung\Internet\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Samsung\Internet\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Samsung\Internet\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Samsung\Internet\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Samsung\Internet\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Samsung\Internet\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Samsung Internet Privacy Sandbox * Author=Winapp2.ini Project [Samsung Internet Progressive Web Apps *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Samsung Internet Progressive Web Apps * Author=Winapp2.ini Project [Samsung Internet Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|Login Data* Tags=ccapps ID=Samsung Internet Saved Usernames & Passwords * Author=Winapp2.ini Project [Samsung Internet Security & Threat Detection *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|DIPS* FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Samsung\Internet\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Samsung\Internet\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Samsung\Internet\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Samsung\Internet\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Samsung\Internet\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Samsung\Internet\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Samsung\Internet\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Samsung\Internet\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Samsung\Internet\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Samsung\Internet\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Samsung Internet Security & Threat Detection * Author=Winapp2.ini Project [Samsung Internet Shopping Insights *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Samsung\Internet\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Samsung\Internet\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Samsung\Internet\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Samsung Internet Shopping Insights * Author=Winapp2.ini Project [Samsung Internet Storage Quota Manager *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|QuotaManager Tags=ccapps ID=Samsung Internet Storage Quota Manager * Author=Winapp2.ini Project [Samsung Internet Sync Data *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Samsung Internet Sync Data * Author=Winapp2.ini Project [Samsung Internet Telemetry *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\Application|debug.log FileKey2=%LocalAppData%\Samsung\Internet\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Samsung\Internet\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Samsung\Internet\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Samsung\Internet\User Data\*|*.log FileKey6=%LocalAppData%\Samsung\Internet\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Samsung\Internet\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Samsung\Internet\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Samsung\Internet\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Samsung\Internet\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Samsung\Internet\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Samsung\Internet\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Samsung\Internet\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Samsung\Internet\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Samsung\Internet\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Samsung\Internet\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Samsung\Internet\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Samsung\Internet\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Samsung\Internet\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Samsung\Internet\Application|debug.log FileKey21=%ProgramFiles%\Samsung\Internet\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Samsung\Internet\BlBeacon|failed_count RegKey2=HKCU\Software\Samsung\Internet\BlBeacon|state RegKey3=HKCU\Software\Samsung\Internet\Installer|LastChecked RegKey4=HKCU\Software\Samsung\Internet\StabilityMetrics Tags=ccapps ID=Samsung Internet Telemetry * Author=Winapp2.ini Project [Samsung Internet Web Browsing Cookies *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Samsung Internet Web Browsing Cookies * Author=Winapp2.ini Project [Samsung Internet Web Browsing History *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Samsung Internet Web Browsing History * Author=Winapp2.ini Project [Samsung Internet Web Browsing Session *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Samsung Internet Web Browsing Session * Author=Winapp2.ini Project [Samsung Internet Web Storage *] DetectFile=%LocalAppData%\Samsung\Internet\User Data FileKey1=%LocalAppData%\Samsung\Internet\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Samsung\Internet\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Samsung\Internet\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Samsung\Internet\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Samsung\Internet\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Samsung\Internet\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Samsung\Internet\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Samsung\Internet\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Samsung Internet Web Storage * Author=Winapp2.ini Project [Samsung Kies *] Detect1=HKCU\Software\Samsung\Kies2.0 Detect2=HKCU\Software\Samsung\Kies3.0 Detect3=HKLM\Software\SAMSUNG\USB_DRIVER FileKey1=%AppData%\Samsung\Kies|*.mlca;*.mlme;*.mlpb;*.mlpgb|RECURSE FileKey2=%AppData%\Samsung\Kies*\BackupHistory|BackupHistory.xml FileKey3=%ProgramData%\Samsung\Device Error Recovery|* FileKey4=%ProgramData%\Samsung\Kies|Kiesairmessage.log FileKey5=%UserProfile%\Documents\Samsung\Kies*\Backup|*|RECURSE FileKey6=%UserProfile%\Documents\SelfMV|*.log Tags=ccutil ID=Samsung Kies * Author=Winapp2.ini Project [Samsung Knox Matrix *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g\LocalState\KMXAppService|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.KnoxMatrixforWindows_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Knox Matrix * Author=Winapp2.ini Project [Samsung Link Sharing *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g\LocalState\MetroLogs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.1412377A9806A_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Link Sharing * Author=Winapp2.ini Project [Samsung Live Message *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g\LocalState|*|RECURSE FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.LiveMessage_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Live Message * Author=Winapp2.ini Project [Samsung Live Wallpaper *] DetectFile=%LocalAppData%\Packages\Sidia.LiveWallpaper_wkpx6gdq8qyz8 FileKey1=%LocalAppData%\Packages\Sidia.LiveWallpaper_wkpx6gdq8qyz8\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Sidia.LiveWallpaper_wkpx6gdq8qyz8\Settings|*.log* FileKey3=%LocalAppData%\Packages\Sidia.LiveWallpaper_wkpx6gdq8qyz8\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Sidia.LiveWallpaper_wkpx6gdq8qyz8\TempState|*|REMOVESELF FileKey5=%Package\LiveWallpaperData\Log|* FileKey6=%Package\LiveWallpaperData\Temporary|* Tags=ccapps ID=Samsung Live Wallpaper * Author=Winapp2.ini Project [Samsung Magician *] Detect=HKLM\Software\Samsung Magician FileKey1=%AppData%\Samsung Magician\Cache\Cache_Data|*|RECURSE FileKey2=%AppData%\Samsung Magician\Code Cache|*|RECURSE FileKey3=%AppData%\Samsung Magician\DawnCache|*|RECURSE FileKey4=%AppData%\Samsung Magician\GPUCache|*|RECURSE FileKey5=%AppData%\Samsung Magician\Local Storage\leveldb|*.old FileKey6=%AppData%\Samsung Magician\Network|* FileKey7=%AppData%\Samsung Magician\Session Storage|*.old FileKey8=%ProgramData%\Samsung\Backup|*.exe FileKey9=%ProgramData%\Samsung\Samsung Magician|*.exe|RECURSE FileKey10=%ProgramData%\Samsung\Samsung Magician\PB|*.txt FileKey11=%ProgramFiles%\Samsung Magician\Logs|* FileKey12=%ProgramFiles%\Samsung\Samsung Magician\Log*|* FileKey13=%ProgramFiles%\Samsung\Samsung Magician\MigrationService|*.log FileKey14=%ProgramFiles%\Samsung\Samsung Magician\MigrationService\Logs|* FileKey15=%SystemDrive%\MagicianPerf*|*|REMOVESELF RegKey1=HKCU\Software\Local AppWizard-Generated Applications\SamsungMagician ExcludeKey1=FILE|%AppData%\Samsung Magician\|Local State ExcludeKey2=FILE|%AppData%\Samsung Magician\|Preferences Tags=ccutil ID=Samsung Magician * Author=Winapp2.ini Project [Samsung MSSCS *] Detect=HKLM\SOFTWARE\SAMSUNG FileKey1=%ProgramData%\Samsung\MSSCS|*.log Tags=ccutil ID=Samsung MSSCS * Author=Winapp2.ini Project [Samsung Notes *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\LocalState\Logs|*|RECURSE FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\LocalState\RendererCache|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\LocalState\SPenSDK30\cache|* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\LocalState\thumbnail|* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\Settings|*.log* FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungNotes_wyx1vj98g3asy\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Notes * Author=Winapp2.ini Project [Samsung Odyssey 3D Hub *] DetectFile=%LocalAppData%\Odyssey3DHub FileKey1=%UserProfile%\AppData%\LocalLow\Samsung\Odyssey3DHubUI|*.log Tags=ccapps ID=Samsung Odyssey 3D Hub * Author=Winapp2.ini Project [Samsung Parental Controls *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g\LocalState\logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungParentalControls_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey6=%ProgramData%\ParentalControls\Log|* Tags=ccutil ID=Samsung Parental Controls * Author=Winapp2.ini Project [Samsung Pass *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g\LocalState\Logs|*|RECURSE FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPass_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Pass * Author=Winapp2.ini Project [Samsung PENUP *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\LocalState\SPenSDK30\cache|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PENUP_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung PENUP * Author=Winapp2.ini Project [Samsung Phone *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\LocalState\Reports|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\LocalState\sessionData\*Cache*|*|RECURSE FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\Settings|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Phone * Author=Winapp2.ini Project [Samsung Printer Experience *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g\LocalState|*.xml FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Printer Experience * Author=Winapp2.ini Project [Samsung Private Share *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g\LocalState\LOGS_PrivateShare|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.PrivateShare_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccinternet ID=Samsung Private Share * Author=Winapp2.ini Project [Samsung Quick Search *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\LocalState\logs|*|RECURSE FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung Quick Search * Author=Winapp2.ini Project [Samsung Quick Share *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\LocalState\BuddyProfilePictures|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\LocalState\MetroLogs|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\LocalState\Samsung\*\Logs|* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\Settings|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_wyx1vj98g3asy\TempState|*|REMOVESELF FileKey8=%ProgramData%\Samsung\QuickShare\ServiceLogs|* Tags=ccutil ID=Samsung Quick Share * Author=Winapp2.ini Project [Samsung Recovery *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey5=%ProgramData%\Samsung\Recovery\log|*.log|RECURSE Tags=ccutil ID=Samsung Recovery * Author=Winapp2.ini Project [Samsung Screen Recorder *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\RoamingState\Samsung\ScreenRecorder\logs|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Screen Recorder * Author=Winapp2.ini Project [Samsung Search *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\LocalState\logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Search * Author=Winapp2.ini Project [Samsung Second Screen *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy\LocalState\Logger|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCoLtd.SecondScreen_wyx1vj98g3asy\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Second Screen * Author=Winapp2.ini Project [Samsung Settings *] DetectFile1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettings_3c1yjt4zspk6g DetectFile2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettings_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettings_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettings_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettings_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g\AC|*|RECURSE FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g\LocalState|*.log FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g\Settings|*.log* FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey9=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey10=%ProgramData%\Samsung|SamsungSettingsSetup.log Tags=ccutil ID=Samsung Settings * Author=Winapp2.ini Project [Samsung Smart Switch *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_3c1yjt4zspk6g FileKey1=%AppData%\Samsung\SmartSwitchPCtoPC\logs|* FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_3c1yjt4zspk6g\AC|*|RECURSE FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_3c1yjt4zspk6g\Settings|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey6=%ProgramFiles%\Samsung\SmartSwitch\log|* Tags=ccutil ID=Samsung Smart Switch * Author=Winapp2.ini Project [Samsung SmartThings *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\AppData\CacheStorage|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState|*cache*.* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView|*.log;*first_party_sets*;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version;Module Info Cache FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView|*-journal;*.pma;LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\*BrowserMetrics|*|REMOVESELF FileKey7=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\*Cache*|*|REMOVESELF FileKey8=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\AutoFill*|*|REMOVESELF FileKey9=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Avatars|*|REMOVESELF FileKey10=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\CertificateRevocation|*|REMOVESELF FileKey11=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\CookieReadinessList|*|REMOVESELF FileKey12=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Crash Reports|*|REMOVESELF FileKey13=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Crashpad|*|REMOVESELF FileKey14=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Crowd Deny|*|REMOVESELF FileKey15=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default|*.ldb;*.log;*Web Data;Bookmarks.bak;BrowsingTopics*;Conversions*;CURRENT;DIPS*;DownloadMetadata;Extension Cookies;favicons*;History*;InterestGroups;LOCK;MANIFEST-*;MediaDeviceSalts;Network Action Predictor*;PreferredApps;PrivateAggregation*;QuotaManager;ServerCertificate;SharedStorage*;shortcuts*;Top Sites*;Visited Links* FileKey16=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\*Cache*|*|REMOVESELF FileKey17=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\AutoFill*|*|REMOVESELF FileKey18=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\blob_storage|*|REMOVESELF FileKey19=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\BudgetDatabase|*|REMOVESELF FileKey20=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\chrome_cart_db|*|REMOVESELF FileKey21=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\ClientCertificates|*|REMOVESELF FileKey22=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\commerce_subscription_db|*|REMOVESELF FileKey23=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\coupon_db|*|REMOVESELF FileKey24=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\DataSharing|*|REMOVESELF FileKey25=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\discount*_db|*|REMOVESELF FileKey26=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Download Service|*|REMOVESELF FileKey27=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Extension State|*|REMOVESELF FileKey28=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Feature Engagement Tracker|*|REMOVESELF FileKey29=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\File System|*|REMOVESELF FileKey30=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\GCM Store|*|REMOVESELF FileKey31=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\JumpListIcons*|*|REMOVESELF FileKey32=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\MediaFoundationCdmStore|*|REMOVESELF FileKey33=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Network|Cookies*;Device Bound Sessions*;Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports*;TransportSecurity*;Trust Tokens* FileKey34=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\optimization*|*|REMOVESELF FileKey35=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\parcel_tracking_db|*|REMOVESELF FileKey36=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\PersistentOriginTrials|*|REMOVESELF FileKey37=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Platform Notifications|*|REMOVESELF FileKey38=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Safe Browsing Network|*|REMOVESELF FileKey39=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Service Worker|*|REMOVESELF FileKey40=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Sessions|*|REMOVESELF FileKey41=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Shared Dictionary\cache|*|REMOVESELF FileKey42=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\shared_proto_db|*|REMOVESELF FileKey43=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Site Characteristics Database|*|REMOVESELF FileKey44=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey45=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey46=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Sync Data|*|REMOVESELF FileKey47=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\VideoDecodeStats|*|REMOVESELF FileKey48=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\Web Applications|*|REMOVESELF FileKey49=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\WebRTC Logs|*|REMOVESELF FileKey50=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Default\WebrtcVideoStats|*|REMOVESELF FileKey51=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\FirstPartySetsPreloaded|*|REMOVESELF FileKey52=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Local Traces|*|REMOVESELF FileKey53=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\MEIPreload|*|REMOVESELF FileKey54=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Optimization*|*|REMOVESELF FileKey55=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\OriginTrials|*|REMOVESELF FileKey56=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\PKIMetadata|*|REMOVESELF FileKey57=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey58=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey59=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Safe Browsing|*|REMOVESELF FileKey60=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\SafetyTips|*|REMOVESELF FileKey61=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\SmartScreen|*|REMOVESELF FileKey62=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\SSLErrorAssistant|*|REMOVESELF FileKey63=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Stability|*|REMOVESELF FileKey64=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\Subresource Filter|*|REMOVESELF FileKey65=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\TrustTokenKeyCommitments|*|REMOVESELF FileKey66=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\WidevineCdm|*|REMOVESELF FileKey67=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\EBWebView\ZxcvbnData|*|REMOVESELF FileKey68=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\LocalState\logs|* FileKey69=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\Settings|*.log* FileKey70=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey71=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung SmartThings * Author=Winapp2.ini Project [Samsung Software Upgrade Assistant *] DetectFile=%LocalAppData%\MSU FileKey1=%LocalAppData%\MSU|*-logs.txt;*.log Tags=ccutil ID=Samsung Software Upgrade Assistant * Author=Winapp2.ini Project [Samsung Studio *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\LocalState\Logs|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\LocalState\ProjectThumbs|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccutil ID=Samsung Studio * Author=Winapp2.ini Project [Samsung Studio Plus *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\LocalState|_sessionState.xml FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\LocalState\Projects|*.png FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.StudioPlus_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Studio Plus * Author=Winapp2.ini Project [Samsung teamPL *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.873506AC0B4C_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.873506AC0B4C_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.873506AC0B4C_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.873506AC0B4C_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.873506AC0B4C_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccapps ID=Samsung teamPL * Author=Winapp2.ini Project [Samsung Update *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\LocalState\log|* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\Settings|*.log* FileKey5=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3c1yjt4zspk6g\TempState|*|REMOVESELF FileKey7=%ProgramData%\Samsung\SamsungUpdate3\log|* Tags=ccutil ID=Samsung Update * Author=Winapp2.ini Project [Samsung Whiteboard *] DetectFile=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungWhiteboard_3c1yjt4zspk6g FileKey1=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungWhiteboard_3c1yjt4zspk6g\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungWhiteboard_3c1yjt4zspk6g\Settings|*.log* FileKey3=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungWhiteboard_3c1yjt4zspk6g\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\SAMSUNGELECTRONICSCO.LTD.SamsungWhiteboard_3c1yjt4zspk6g\TempState|*|REMOVESELF Tags=ccmedia ID=Samsung Whiteboard * Author=Winapp2.ini Project [Sanctum *] Detect=HKCU\Software\Valve\Steam\Apps\91600 FileKey1=%UserProfile%\Documents\My Games\Sanctum\SanctumGame\Logs|* Tags=ccapps ID=Sanctum * Author=Winapp2.ini Project [Sandisk Installer *] DetectFile=%AppData%\com.sandisk.softwareInstaller FileKey1=%AppData%\com.sandisk.softwareInstaller\Logs|*|REMOVESELF Tags=ccutil ID=Sandisk Installer * Author=Winapp2.ini Project [Santa Ride! 2 *] DetectFile=%ProgramFiles%\Invictus Games\Santa Ride! 2 FileKey1=%ProgramFiles%\Invictus Games\Santa Ride! 2|*.log Tags=ccapps ID=Santa Ride! 2 * Author=Winapp2.ini Project [Santa's Rampage *] DetectFile=%ProgramFiles%\*Santa* Rampage FileKey1=%ProgramFiles%\*Santa* Rampage|*.diz;*.nfo;*.txt;*.url;dotNetFx40_Full_setup.exe|RECURSE FileKey2=%ProgramFiles%\*Santa* Rampage\Redist|*|REMOVESELF FileKey3=%ProgramFiles%\*Santa* Rampage\UDKGame\Logs|*|REMOVESELF ExcludeKey1=FILE|%ProgramFiles%\*Santa* Rampage\UDKGame\CookedPC\|Manifest.txt ExcludeKey2=PATH|%ProgramFiles%\*Santa* Rampage\Binaries\Win32\|* ExcludeKey3=PATH|%ProgramFiles%\*Santa* Rampage\Binaries\Win64\|* ExcludeKey4=PATH|%ProgramFiles%\*Santa* Rampage\UDKGame\Script\|* Tags=ccapps ID=Santa's Rampage * Author=Winapp2.ini Project [Sauerbraten *] DetectFile=%ProgramFiles%\Sauerbraten FileKey1=%ProgramFiles%\Sauerbraten\packages\base|*.bak|RECURSE FileKey2=%UserProfile%\Documents\My Games\Crash|*.log FileKey3=%UserProfile%\Documents\My Games\Sauerbraten|log.txt Tags=ccapps ID=Sauerbraten * Author=Winapp2.ini Project [SBCleaner *] DetectFile=%ProgramData%\CzechMex LLC\SBCleaner* FileKey1=%ProgramData%\CzechMex LLC\SBCleaner\Logs|*.LOG FileKey2=%ProgramData%\CzechMex LLC\SBCleanerFree\Logs|*.LOG Tags=ccutil ID=SBCleaner * Author=Winapp2.ini Project [SBMAV Disk Cleaner *] Detect=HKCU\Software\SBMAV Software\Disk Cleaner FileKey1=%AppData%\SBMAV Disk Cleaner|dcleaner.log FileKey2=%ProgramFiles%\SBMAV Disk Cleaner|*.rtf Tags=ccutil ID=SBMAV Disk Cleaner * Author=Winapp2.ini Project [ScanDefrag *] Detect=HKLM\Software\ScanDefrag FileKey1=%SystemDrive%\ScanDefrag|*.log FileKey2=%SystemDrive%\ScanDefrag\logs|*.txt Tags=ccutil ID=ScanDefrag * Author=Winapp2.ini Project [ScanSnap *] Detect=HKCU\Software\PFU\ScanToOffice DetectFile1=%CommonProgramFiles%\PFU\ScanSnap\ScanToOffice DetectFile2=%ProgramFiles%\PFU\ScanSnap FileKey1=%CommonProgramFiles%\PFU\ScanSnap\ScanToOffice|*.log|RECURSE FileKey2=%LocalAppData%\PFU|*.log|RECURSE FileKey3=%LocalAppData%\PFU\SSFolderTemp|*|RECURSE FileKey4=%ProgramFiles%\PFU|*.log|RECURSE FileKey5=%WinDir%\System32\config\systemprofile\AppData\Local\PFU|*.log|RECURSE FileKey6=%WinDir%\System32\config\systemprofile\AppData\Local\PFU\SSFolderTemp|*|RECURSE FileKey7=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\PFU|*.log|RECURSE FileKey8=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\PFU\SSFolderTemp|*|RECURSE RegKey1=HKCU\Software\PFU\ScanToOffice\History Tags=ccapps ID=ScanSnap * Author=Winapp2.ini Project [Scooter Software Beyond Compare *] DetectFile=%AppData%\Scooter Software\Beyond Compare* FileKey1=%AppData%\Scooter Software\Beyond Compare*|*.bak RegKey1=HKCU\Software\Scooter Software\Beyond Compare\Recent Tags=ccapps ID=Scooter Software Beyond Compare * Author=Winapp2.ini Project [Screenpresso *] DetectFile=%AppData%\Learnpulse\Screenpresso FileKey1=%AppData%\Learnpulse\Screenpresso|settings.copy.xml FileKey2=%UserProfile%\Pictures\Screenpresso\Thumbnails|*|RECURSE Tags=ccutil ID=Screenpresso * Author=Winapp2.ini Project [Scribus *] DetectFile=%AppData%\Scribus FileKey1=%AppData%\Scribus\scrapbook\tmp|*|RECURSE Tags=ccmedia ID=Scribus * Author=Winapp2.ini Project [Scrivener *] DetectFile=%LocalAppData%\LiteratureandLatte\Scrivener FileKey1=%LocalAppData%\LiteratureandLatte\Scrivener\Cache|*|RECURSE FileKey2=%LocalAppData%\LiteratureandLatte\Scrivener\QtWebEngine\Default|*.old;LOG|RECURSE FileKey3=%LocalAppData%\LiteratureandLatte\Scrivener\QtWebEngine\Default\GPUCache|* Tags=ccapps ID=Scrivener * Author=Winapp2.ini Project [ScummVM *] DetectFile=%AppData%\ScummVM FileKey1=%AppData%\ScummVM\Logs|* Tags=ccapps ID=ScummVM * Author=Winapp2.ini Project [SdfBrowser *] DetectFile=%AppData%\BokorBéla\SdfBrowser FileKey1=%AppData%\BokorBéla\SdfBrowser|*.log Tags=ccutil ID=SdfBrowser * Author=Winapp2.ini Project [Seagate Dashboard *] Detect=HKLM\Software\Seagate\Seagate Dashboard\CurrentVersion FileKey1=%AppData%\Seagate\Seagate Dashboard\logs|*.log* FileKey2=%WinDir%\System32\config\systemprofile\AppData\Roaming\Seagate\Seagate Dashboard\logs|SeagateDashboardService* FileKey3=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Seagate\Seagate Dashboard\logs|SeagateDashboardService* Tags=ccutil ID=Seagate Dashboard * Author=Winapp2.ini Project [Seagate Premium Recovery Suite *] Detect=HKCU\Software\Pixel8\Premium Recovery Suite FileKey1=%ProgramFiles%\Premium Recovery Suite\Logs|* Tags=ccapps ID=Seagate Premium Recovery Suite * Author=Winapp2.ini Project [Seagate SeaTools for Windows *] Detect=HKLM\Software\SeaToolsforWindows FileKey1=%ProgramFiles%\Seagate\SeaTools for Windows|*.log Tags=ccutil ID=Seagate SeaTools for Windows * Author=Winapp2.ini Project [SeaMonkey Autocomplete History *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|formhistory* Tags=ccapps ID=SeaMonkey Autocomplete History * Author=Winapp2.ini Project [SeaMonkey Autofill Data *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|autofill-profiles.json Tags=ccapps ID=SeaMonkey Autofill Data * Author=Winapp2.ini Project [SeaMonkey Bookmark Backups *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*\bookmarkbackups|* Tags=ccapps ID=SeaMonkey Bookmark Backups * Author=Winapp2.ini Project [SeaMonkey Bookmark Favicons *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|favicons* Tags=ccapps ID=SeaMonkey Bookmark Favicons * Author=Winapp2.ini Project [SeaMonkey Caches *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Mozilla\SeaMonkey\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Mozilla\SeaMonkey\Profiles\*\notificationstore|* FileKey4=%AppData%\Mozilla\SeaMonkey\Profiles\*\security_state|* FileKey5=%AppData%\Mozilla\SeaMonkey\Profiles\*\shader-cache|* FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Mozilla\SeaMonkey\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Mozilla\SeaMonkey\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Mozilla\SeaMonkey\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=SeaMonkey Caches * Author=Winapp2.ini Project [SeaMonkey Privacy Sandbox *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|credentialstate.sqlite Tags=ccapps ID=SeaMonkey Privacy Sandbox * Author=Winapp2.ini Project [SeaMonkey Saved Usernames & Passwords *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|key4.db;logins.json Tags=ccapps ID=SeaMonkey Saved Usernames & Passwords * Author=Winapp2.ini Project [SeaMonkey Synced Tabs *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|synced-tabs.db* Tags=ccapps ID=SeaMonkey Synced Tabs * Author=Winapp2.ini Project [SeaMonkey Telemetry *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey|*.log|RECURSE FileKey2=%AppData%\Mozilla\SeaMonkey\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Mozilla\SeaMonkey\Profiles\*\crashes|* FileKey4=%AppData%\Mozilla\SeaMonkey\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Mozilla\SeaMonkey\Profiles\*\minidumps|* FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Mozilla\SeaMonkey\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Mozilla\SeaMonkey\Profiles\*\weave\logs|* Tags=ccapps ID=SeaMonkey Telemetry * Author=Winapp2.ini Project [SeaMonkey Web Browsing Cookies *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|cookies* Tags=ccapps ID=SeaMonkey Web Browsing Cookies * Author=Winapp2.ini Project [SeaMonkey Web Browsing Session *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|session*.json* Tags=ccapps ID=SeaMonkey Web Browsing Session * Author=Winapp2.ini Project [SeaMonkey Web Browsing Session Backups *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*\sessionstore-backups|* Tags=ccapps ID=SeaMonkey Web Browsing Session Backups * Author=Winapp2.ini Project [SeaMonkey Web Storage *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=SeaMonkey Web Storage * Author=Winapp2.ini Project [SeaMonkey Website Permissions *] DetectFile=%AppData%\Mozilla\SeaMonkey\Profiles FileKey1=%AppData%\Mozilla\SeaMonkey\Profiles\*|permissions.sqlite Tags=ccapps ID=SeaMonkey Website Permissions * Author=Winapp2.ini Project [Second Copy *] Detect=HKCU\Software\Centered Systems\Second Copy 2000 DetectFile=%LocalAppData%\Centered Systems\Second Copy FileKey1=%LocalAppData%\Centered Systems\Second Copy|log*.* FileKey2=%ProgramFiles%\SecCopy|log*.rtf RegKey1=HKCU\Software\Centered Systems\Second Copy 2000\MRU Tags=ccutil ID=Second Copy * Author=Winapp2.ini Project [SecondLife *] DetectFile=%AppData%\SecondLife FileKey1=%AppData%\SecondLife\*|*.log;*.txt;screen_last.bmp;url_history.xml|RECURSE FileKey2=%AppData%\SecondLife\*\Browser_Profile\Cache|*|RECURSE FileKey3=%AppData%\SecondLife\*\cache|*|RECURSE FileKey4=%AppData%\SecondLife\cache|*|RECURSE FileKey5=%AppData%\SecondLife\Logs|* Tags=ccapps ID=SecondLife * Author=Winapp2.ini Project [SecuKitNXS *] DetectFile=%UserProfile%\AppData\LocalLow\KICA\nxClient FileKey1=%UserProfile%\AppData\LocalLow\KICA\nxClient\Log|* Tags=ccapps ID=SecuKitNXS * Author=Winapp2.ini Project [SecureCRT *] Detect=HKCU\Software\VanDyke\SecureCRT FileKey1=%AppData%\VanDyke\SecureCRT\Config|Recent File List.ini;Recent Script List.ini Tags=ccapps ID=SecureCRT * Author=Winapp2.ini Project [SecureDownloadManager *] Detect=HKCU\Software\e-academy Inc.\SecureDownloadManager FileKey1=%LocalAppData%\e-academy Inc\SecureDownloadManager|*.log RegKey1=HKCU\Software\e-academy Inc.\SecureDownloadManager\Recent File list Tags=ccinternet ID=SecureDownloadManager * Author=Winapp2.ini Project [Security Task Manager *] Detect=HKCU\Software\Neuber GbR\Security Task Manager RegKey1=HKCU\Software\Neuber GbR\Security Task Manager\Options|HistoryExe RegKey2=HKCU\Software\Neuber GbR\Security Task Manager\Options|HostKnown Tags=ccutil ID=Security Task Manager * Author=Winapp2.ini Project [SecurityXploded Directory Scanner *] Detect=HKCU\Software\SecurityXploded\DirectoryScanner RegKey1=HKCU\Software\SecurityXploded\DirectoryScanner|EndHostAddress RegKey2=HKCU\Software\SecurityXploded\DirectoryScanner|StartHostAddress Tags=ccutil ID=SecurityXploded Directory Scanner * Author=Winapp2.ini Project [SecurityXploded FTP Password Kracker *] Detect=HKCU\Software\FTP Password Kracker RegKey1=HKCU\Software\FTP Password Kracker|File RegKey2=HKCU\Software\FTP Password Kracker|Port RegKey3=HKCU\Software\FTP Password Kracker|ServerAddress RegKey4=HKCU\Software\FTP Password Kracker|Username Tags=ccutil ID=SecurityXploded FTP Password Kracker * Author=Winapp2.ini Project [SecurityXploded Hash Kracker *] Detect=HKCU\Software\SecurityXploded\HashKracker RegKey1=HKCU\Software\SecurityXploded\HashKracker|File RegKey2=HKCU\Software\SecurityXploded\HashKracker|Hash RegKey3=HKCU\Software\SecurityXploded\HashKracker|Type Tags=ccutil ID=SecurityXploded Hash Kracker * Author=Winapp2.ini Project [SecurityXploded LDAP Password Kracker *] Detect=HKCU\Software\SecurityXploded\LDAPPasswordKracker RegKey1=HKCU\Software\SecurityXploded\LDAPPasswordKracker|File RegKey2=HKCU\Software\SecurityXploded\LDAPPasswordKracker|Port RegKey3=HKCU\Software\SecurityXploded\LDAPPasswordKracker|ServerAddress RegKey4=HKCU\Software\SecurityXploded\LDAPPasswordKracker|Username Tags=ccutil ID=SecurityXploded LDAP Password Kracker * Author=Winapp2.ini Project [SecurityXploded LDAP Search *] Detect=HKCU\Software\LDAPSearch_Nag RegKey1=HKCU\Software\LDAPSearch_Nag|BaseDN RegKey2=HKCU\Software\LDAPSearch_Nag|CertPath RegKey3=HKCU\Software\LDAPSearch_Nag|IPAddress RegKey4=HKCU\Software\LDAPSearch_Nag|LoginDN RegKey5=HKCU\Software\LDAPSearch_Nag|Port Tags=ccutil ID=SecurityXploded LDAP Search * Author=Winapp2.ini Project [SecurityXploded Mysql Password Auditor *] Detect=HKCU\Software\SecurityXploded\MysqlPasswordAuditor RegKey1=HKCU\Software\SecurityXploded\MysqlPasswordAuditor|File RegKey2=HKCU\Software\SecurityXploded\MysqlPasswordAuditor|Port RegKey3=HKCU\Software\SecurityXploded\MysqlPasswordAuditor|ServerAddress RegKey4=HKCU\Software\SecurityXploded\MysqlPasswordAuditor|Username Tags=ccutil ID=SecurityXploded Mysql Password Auditor * Author=Winapp2.ini Project [SecurityXploded Net Database Scanner *] Detect=HKCU\Software\SecurityXploded\NetDatabaseScanner RegKey1=HKCU\Software\SecurityXploded\NetDatabaseScanner|DatabaseType RegKey2=HKCU\Software\SecurityXploded\NetDatabaseScanner|EndHostAddress RegKey3=HKCU\Software\SecurityXploded\NetDatabaseScanner|StartHostAddress Tags=ccutil ID=SecurityXploded Net Database Scanner * Author=Winapp2.ini Project [SecurityXploded Router Password Kracker *] Detect1=HKCU\Software\RouterPasswordKracker Detect2=HKCU\Software\SecurityXploded\RouterPasswordDecryptor RegKey1=HKCU\Software\RouterPasswordKracker|File RegKey2=HKCU\Software\RouterPasswordKracker|ServerAddress RegKey3=HKCU\Software\RouterPasswordKracker|Username RegKey4=HKCU\Software\SecurityXploded\RouterPasswordDecryptor|File RegKey5=HKCU\Software\SecurityXploded\RouterPasswordDecryptor|ServerAddress RegKey6=HKCU\Software\SecurityXploded\RouterPasswordDecryptor|Username Tags=ccutil ID=SecurityXploded Router Password Kracker * Author=Winapp2.ini Project [SecurityXploded Salted Hash Kracker *] Detect=HKCU\Software\SecurityXploded\SaltedHashKracker RegKey1=HKCU\Software\SecurityXploded\SaltedHashKracker|File RegKey2=HKCU\Software\SecurityXploded\SaltedHashKracker|Hash RegKey3=HKCU\Software\SecurityXploded\SaltedHashKracker|Salt RegKey4=HKCU\Software\SecurityXploded\SaltedHashKracker|Type Tags=ccutil ID=SecurityXploded Salted Hash Kracker * Author=Winapp2.ini Project [SecurityXploded SSL Certificate Scanner *] Detect1=HKCU\Software\SecurityXploded\SSLCertScanner Detect2=HKCU\Software\SSLCertScanner RegKey1=HKCU\Software\SecurityXploded\SSLCertScanner|Port RegKey2=HKCU\Software\SecurityXploded\SSLCertScanner|ServerAddress RegKey3=HKCU\Software\SSLCertScanner|Port RegKey4=HKCU\Software\SSLCertScanner|ServerAddress Tags=ccutil ID=SecurityXploded SSL Certificate Scanner * Author=Winapp2.ini Project [SecurityXploded Virus Total Scanner *] Detect=HKCU\Software\SecurityXploded\VirusTotalScanner RegKey1=HKCU\Software\SecurityXploded\VirusTotalScanner|File Tags=ccutil ID=SecurityXploded Virus Total Scanner * Author=Winapp2.ini Project [SecurityXploded Wi-Fi Network Monitor *] Detect1=HKCU\Software\SecurityXploded\WiFiNetworkMonitor Detect2=HKCU\Software\WiFi Network Monitor RegKey1=HKCU\Software\SecurityXploded\WiFiNetworkMonitor|EndHostAddress RegKey2=HKCU\Software\SecurityXploded\WiFiNetworkMonitor|StartHostAddress RegKey3=HKCU\Software\WiFi Network Monitor|EndHostAddress RegKey4=HKCU\Software\WiFi Network Monitor|StartHostAddress Tags=ccutil ID=SecurityXploded Wi-Fi Network Monitor * Author=Winapp2.ini Project [SecurityXploded Windows Password Kracker *] Detect=HKCU\Software\SecurityXploded\WindowsPasswordKracker RegKey1=HKCU\Software\SecurityXploded\WindowsPasswordKracker|File RegKey2=HKCU\Software\SecurityXploded\WindowsPasswordKracker|Hash Tags=ccutil ID=SecurityXploded Windows Password Kracker * Author=Winapp2.ini Project [SecurityXploded Windows Spy Keylogger *] Detect=HKCU\Software\WinSKApp RegKey1=HKCU\Software\WinSKApp Tags=ccutil ID=SecurityXploded Windows Spy Keylogger * Author=Winapp2.ini Project [SecuROM Diagnostics Tool *] Detect=HKCU\Software\SecuROM DetectFile1=%SystemDrive%\AnalysisLog.sr0 DetectFile2=%UserProfile%\Desktop\AnalysisLog.sr0 FileKey1=%AppData%\SecuROM\UserData|*.bak;*.tmp FileKey2=%SystemDrive%|AnalysisLog.sr0 FileKey3=%UserProfile%\Desktop|AnalysisLog.sr0 Tags=ccapps ID=SecuROM Diagnostics Tool * Author=Winapp2.ini Project [Send To Toys *] Detect=HKCU\Software\Gabriele Ponti\Send To Toys RegKey1=HKCU\Software\Gabriele Ponti\Send To Toys|LastFolder RegKey2=HKCU\Software\Gabriele Ponti\Send To Toys|RecentFolders Tags=ccutil ID=Send To Toys * Author=Winapp2.ini Project [Serato DJ *] DetectFile=%UserProfile%\Music\_Serato_ FileKey1=%UserProfile%\Music\_Serato_|*.log|RECURSE Tags=ccmedia ID=Serato DJ * Author=Winapp2.ini Project [Serious Sam *] DetectFile1=%ProgramFiles%\Serious Sam* DetectFile2=%ProgramFiles%\Steam\steamApps\Common\Serious Sam* FileKey1=%ProgramFiles%\Serious Sam*|*.log FileKey2=%ProgramFiles%\Serious Sam*\Temp|* FileKey3=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*|*.log FileKey4=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*\Log|*|RECURSE FileKey5=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*\Temp|* Tags=ccapps ID=Serious Sam * Author=Winapp2.ini Project [ServeToMe *] DetectFile=%AppData%\ProjectsWithLove\ServeToMe FileKey1=%AppData%\ProjectsWithLove\ServeToMe\Fontcache|* Tags=ccmedia ID=ServeToMe * Author=Winapp2.ini Project [Serviio *] Detect=HKLM\Software\Serviio FileKey1=%ProgramFiles%\Serviio\log|* Tags=ccutil ID=Serviio * Author=Winapp2.ini Project [Shareaza *] Detect=HKCU\Software\BHO Shareaza FileKey1=%LocalAppData%\Shareaza\Incomplete|* Tags=ccinternet ID=Shareaza * Author=Winapp2.ini Project [ShareX *] DetectFile1=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j DetectFile2=%ProgramFiles%\ShareX FileKey1=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\Settings|*.log* FileKey5=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\19568ShareX.ShareX_egrzcvs15399j\TempState|*|REMOVESELF FileKey7=%UserProfile%\Documents\ShareX|History.xml FileKey8=%UserProfile%\Documents\ShareX\Backup|*Config-*.json FileKey9=%UserProfile%\Documents\ShareX\Logs|*|RECURSE Tags=ccapps ID=ShareX * Author=Winapp2.ini Project [Shatter *] Detect=HKCU\Software\Valve\Steam\Apps\20820 FileKey1=%ProgramFiles%\Steam\steamapps\common\Shatter|log.txt Tags=ccapps ID=Shatter * Author=Winapp2.ini Project [Shattered Horizon *] DetectFile=%LocalAppData%\Futuremark\Shattered Horizon FileKey1=%LocalAppData%\Futuremark\Shattered Horizon\cache|*|REMOVESELF FileKey2=%LocalAppData%\Futuremark\Shattered Horizon\crash_dumps|* Tags=ccapps ID=Shattered Horizon * Author=Winapp2.ini Project [She and the Light Bearer *] Detect=HKCU\Software\Valve\Steam\Apps\658590 FileKey1=%UserProfile%\AppData\LocalLow\Mojiken\She and the Light Bearer|output_log.txt Tags=ccapps ID=She and the Light Bearer * Author=Winapp2.ini Project [ShellLess *] Detect=HKCU\Software\ShellLess1.10b RegKey1=HKCU\Software\ShellLess1.10b\ShellLess\Recent File List Tags=ccapps ID=ShellLess * Author=Winapp2.ini Project [Shift Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|*Web Data FileKey2=%LocalAppData%\Shift\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Shift\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Shift Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Shift Autoplay Preferences *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Shift Autoplay Preferences * Author=Winapp2.ini Project [Shift Bookmark Backups *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|Bookmarks.bak Tags=ccapps ID=Shift Bookmark Backups * Author=Winapp2.ini Project [Shift Bookmark Favicons *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|favicons* Tags=ccapps ID=Shift Bookmark Favicons * Author=Winapp2.ini Project [Shift Caches *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Shift\User Data|Module Info Cache FileKey3=%LocalAppData%\Shift\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Shift\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Shift\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Shift\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Shift\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Shift\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Shift\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Shift\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Shift\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Shift\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Shift\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Shift\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Shift\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Shift\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Shift\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Shift\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Shift\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Shift Caches * Author=Winapp2.ini Project [Shift Default App Handlers *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|PreferredApps Tags=ccapps ID=Shift Default App Handlers * Author=Winapp2.ini Project [Shift Download History *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Shift\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Shift Download History * Author=Winapp2.ini Project [Shift DRM Data *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Shift\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Shift DRM Data * Author=Winapp2.ini Project [Shift Extension Cookies *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|Extension Cookies Tags=ccapps ID=Shift Extension Cookies * Author=Winapp2.ini Project [Shift Pinned Tabs *] DetectFile=%LocalAppData%\Shift\User Data RegKey1=HKCU\Software\Shift\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Shift Pinned Tabs * Author=Winapp2.ini Project [Shift Privacy Sandbox *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data|*first_party_sets* FileKey2=%LocalAppData%\Shift\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Shift\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Shift\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Shift\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Shift\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Shift\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Shift\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Shift Privacy Sandbox * Author=Winapp2.ini Project [Shift Progressive Web Apps *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Shift Progressive Web Apps * Author=Winapp2.ini Project [Shift Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|Login Data* Tags=ccapps ID=Shift Saved Usernames & Passwords * Author=Winapp2.ini Project [Shift Security & Threat Detection *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|DIPS* FileKey2=%LocalAppData%\Shift\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Shift\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Shift\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Shift\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Shift\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Shift\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Shift\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Shift\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Shift\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Shift\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Shift\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Shift Security & Threat Detection * Author=Winapp2.ini Project [Shift Shopping Insights *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Shift\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Shift\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Shift\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Shift\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Shift Shopping Insights * Author=Winapp2.ini Project [Shift Storage Quota Manager *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|QuotaManager Tags=ccapps ID=Shift Storage Quota Manager * Author=Winapp2.ini Project [Shift Sync Data *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Shift Sync Data * Author=Winapp2.ini Project [Shift Telemetry *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\Application|debug.log FileKey2=%LocalAppData%\Shift\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Shift\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Shift\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Shift\User Data\*|*.log FileKey6=%LocalAppData%\Shift\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Shift\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Shift\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Shift\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Shift\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Shift\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Shift\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Shift\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Shift\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Shift\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Shift\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Shift\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Shift\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Shift\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Shift\Application|debug.log FileKey21=%ProgramFiles%\Shift\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Shift\BlBeacon|failed_count RegKey2=HKCU\Software\Shift\BlBeacon|state RegKey3=HKCU\Software\Shift\Installer|LastChecked RegKey4=HKCU\Software\Shift\StabilityMetrics Tags=ccapps ID=Shift Telemetry * Author=Winapp2.ini Project [Shift Web Browsing Cookies *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Shift Web Browsing Cookies * Author=Winapp2.ini Project [Shift Web Browsing History *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Shift Web Browsing History * Author=Winapp2.ini Project [Shift Web Browsing Session *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Shift\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Shift Web Browsing Session * Author=Winapp2.ini Project [Shift Web Storage *] DetectFile=%LocalAppData%\Shift\User Data FileKey1=%LocalAppData%\Shift\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Shift\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Shift\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Shift\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Shift\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Shift\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Shift\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Shift\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Shift Web Storage * Author=Winapp2.ini Project [Shogun2 *] DetectFile=%AppData%\The Creative Assembly\Shogun2 FileKey1=%AppData%\The Creative Assembly\Shogun2\*_cache|* FileKey2=%AppData%\The Creative Assembly\Shogun2\Logs|* FileKey3=%AppData%\The Creative Assembly\Shogun2\Temp|* Tags=ccapps ID=Shogun2 * Author=Winapp2.ini Project [ShooterGame *] DetectFile=%LocalAppData%\ShooterGame FileKey1=%LocalAppData%\ShooterGame\Saved\Logs|*|REMOVESELF FileKey2=%LocalAppData%\ShooterGame\Saved\WebCache*|*|REMOVESELF Tags=ccapps ID=ShooterGame * Author=Winapp2.ini Project [ShortKeys *] Detect=HKCU\Software\Insight Software Solutions\ShortKeys RegKey1=HKCU\Software\Insight Software Solutions\ShortKeys\MRU Tags=ccapps ID=ShortKeys * Author=Winapp2.ini Project [Should I Remove It? *] Detect=HKCU\Software\Reason FileKey1=%ProgramFiles%\Reason\Should I Remove It|programdata.dat RegKey1=HKCU\Software\Reason\ShouldIRemoveIt\Cache Tags=ccutil ID=Should I Remove It? * Author=Winapp2.ini Project [ShrewSoft VPN Client *] DetectFile=%ProgramFiles%\ShrewSoft\VPN Client FileKey1=%ProgramFiles%\ShrewSoft\VPN Client\debug|*.log Tags=ccinternet ID=ShrewSoft VPN Client * Author=Winapp2.ini Project [Shuffle Party *] DetectFile=%LocalAppData%\Packages\Microsoft.ShuffleParty_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.ShuffleParty_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.ShuffleParty_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.ShuffleParty_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.ShuffleParty_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccapps ID=Shuffle Party * Author=Winapp2.ini Project [SideQuest *] DetectFile=%AppData%\SideQuest FileKey1=%AppData%\SideQuest|*-journal;*.old;LOG;Network Persistent State;QuotaManager|RECURSE FileKey2=%AppData%\SideQuest\*Cache|*|RECURSE FileKey3=%AppData%\SideQuest\blob_storage|*|RECURSE FileKey4=%AppData%\SideQuest\tmp|* FileKey5=%AppData%\SideQuest\VideoDecodeStats|*|RECURSE FileKey6=%LocalAppData%\sidequest-updater|installer.exe Tags=ccapps ID=SideQuest * Author=Winapp2.ini Project [Sigma Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|*Web Data FileKey2=%LocalAppData%\Sigma\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Sigma\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Sigma Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Sigma Autoplay Preferences *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Sigma Autoplay Preferences * Author=Winapp2.ini Project [Sigma Bookmark Backups *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|Bookmarks.bak Tags=ccapps ID=Sigma Bookmark Backups * Author=Winapp2.ini Project [Sigma Bookmark Favicons *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|favicons* Tags=ccapps ID=Sigma Bookmark Favicons * Author=Winapp2.ini Project [Sigma Caches *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Sigma\User Data|Module Info Cache FileKey3=%LocalAppData%\Sigma\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Sigma\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Sigma\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Sigma\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Sigma\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Sigma\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Sigma\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Sigma\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Sigma\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Sigma\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Sigma\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Sigma\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Sigma\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Sigma\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Sigma\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Sigma\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Sigma\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Sigma Caches * Author=Winapp2.ini Project [Sigma Default App Handlers *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|PreferredApps Tags=ccapps ID=Sigma Default App Handlers * Author=Winapp2.ini Project [Sigma Download History *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Sigma\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Sigma Download History * Author=Winapp2.ini Project [Sigma DRM Data *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Sigma\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Sigma DRM Data * Author=Winapp2.ini Project [Sigma Extension Cookies *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|Extension Cookies Tags=ccapps ID=Sigma Extension Cookies * Author=Winapp2.ini Project [Sigma Pinned Tabs *] DetectFile=%LocalAppData%\Sigma\User Data RegKey1=HKCU\Software\Sigma\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Sigma Pinned Tabs * Author=Winapp2.ini Project [Sigma Privacy Sandbox *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data|*first_party_sets* FileKey2=%LocalAppData%\Sigma\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Sigma\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Sigma\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Sigma\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Sigma\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Sigma\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Sigma\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Sigma Privacy Sandbox * Author=Winapp2.ini Project [Sigma Progressive Web Apps *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Sigma Progressive Web Apps * Author=Winapp2.ini Project [Sigma Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|Login Data* Tags=ccapps ID=Sigma Saved Usernames & Passwords * Author=Winapp2.ini Project [Sigma Security & Threat Detection *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|DIPS* FileKey2=%LocalAppData%\Sigma\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Sigma\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Sigma\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Sigma\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Sigma\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Sigma\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Sigma\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Sigma\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Sigma\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Sigma\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Sigma\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Sigma Security & Threat Detection * Author=Winapp2.ini Project [Sigma Shopping Insights *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Sigma\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Sigma\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Sigma\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Sigma\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Sigma Shopping Insights * Author=Winapp2.ini Project [Sigma Storage Quota Manager *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|QuotaManager Tags=ccapps ID=Sigma Storage Quota Manager * Author=Winapp2.ini Project [Sigma Sync Data *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Sigma Sync Data * Author=Winapp2.ini Project [Sigma Telemetry *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\Application|debug.log FileKey2=%LocalAppData%\Sigma\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Sigma\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Sigma\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Sigma\User Data\*|*.log FileKey6=%LocalAppData%\Sigma\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Sigma\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Sigma\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Sigma\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Sigma\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Sigma\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Sigma\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Sigma\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Sigma\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Sigma\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Sigma\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Sigma\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Sigma\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Sigma\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Sigma\Application|debug.log FileKey21=%ProgramFiles%\Sigma\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Sigma\BlBeacon|failed_count RegKey2=HKCU\Software\Sigma\BlBeacon|state RegKey3=HKCU\Software\Sigma\Installer|LastChecked RegKey4=HKCU\Software\Sigma\StabilityMetrics Tags=ccapps ID=Sigma Telemetry * Author=Winapp2.ini Project [Sigma Web Browsing Cookies *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Sigma Web Browsing Cookies * Author=Winapp2.ini Project [Sigma Web Browsing History *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Sigma Web Browsing History * Author=Winapp2.ini Project [Sigma Web Browsing Session *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Sigma\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Sigma Web Browsing Session * Author=Winapp2.ini Project [Sigma Web Storage *] DetectFile=%LocalAppData%\Sigma\User Data FileKey1=%LocalAppData%\Sigma\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Sigma\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Sigma\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Sigma\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Sigma\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Sigma\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Sigma\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Sigma\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Sigma Web Storage * Author=Winapp2.ini Project [Signal Messenger *] DetectFile=%AppData%\Signal FileKey1=%AppData%\Signal|*-journal;*.old;LOG;Network Persistent State;QuotaManager|RECURSE FileKey2=%AppData%\Signal\*Cache|*|RECURSE FileKey3=%AppData%\Signal\blob_storage|*|RECURSE FileKey4=%AppData%\Signal\Crashpad|*|RECURSE FileKey5=%AppData%\Signal\Logs|* FileKey6=%AppData%\Signal\Temp|* FileKey7=%LocalAppData%\Signal-Desktop-Updater|installer.exe Tags=ccinternet ID=Signal Messenger * Author=Winapp2.ini Project [SignKorea *] DetectFile=%UserProfile%\AppData\LocalLow\SignKorea\SKCert* FileKey1=%UserProfile%\AppData\LocalLow\SignKorea\*\Log|*|RECURSE Tags=ccapps ID=SignKorea * Author=Winapp2.ini Project [SigParser *] DetectFile=%ProgramFiles%\UpdateStar\SigParser FileKey1=%AppData%\UpdateStar GmbH\SigParser\3.0.4898.22300|*.log Tags=ccutil ID=SigParser * Author=Winapp2.ini Project [Silent Hunter III *] Detect=HKCU\Software\Valve\Steam\Apps\15210 DetectFile=%ProgramFiles%\Ubisoft\SilentHunterIII FileKey1=%ProgramFiles%\Steam\SteamApps\Common\SilentHunterIII|*.log|RECURSE FileKey2=%ProgramFiles%\Ubisoft\SilentHunterIII|*.log|RECURSE Tags=ccapps ID=Silent Hunter III * Author=Winapp2.ini Project [Silhouette Studio *] DetectFile=%AppData%\com.aspexsoftware.s* FileKey1=%AppData%\com.aspexsoftware.Silhouette_Studio\installers|* FileKey2=%AppData%\com.aspexsoftware.ss_bluetooth|*.bluetooth.txt FileKey3=%AppData%\com.aspexsoftware.studio_helper|log Tags=ccapps ID=Silhouette Studio * Author=Winapp2.ini Project [SimCity 4 *] Detect=HKLM\Software\Maxis\SimCity 4 FileKey1=%ProgramFiles%\Maxis\Exception Reports|*.mdmp;*.txt FileKey2=%ProgramFiles%\Maxis\HTTPCache|* FileKey3=%ProgramFiles%\Maxis\SimCity 4 Deluxe|*-log.txt FileKey4=%ProgramFiles%\Maxis\SimCity 4 Deluxe\Apps|*.txt FileKey5=%UserProfile%\Documents\SimCity 4\Exception Reports|*.mdmp;*.txt FileKey6=%UserProfile%\Documents\SimCity 4\HTTPCache|* Tags=ccapps ID=SimCity 4 * Author=Winapp2.ini Project [SimCity Societies *] DetectFile=%UserProfile%\Documents\SimCity Societies FileKey1=%UserProfile%\Documents\SimCity Societies\Logs|* Tags=ccapps ID=SimCity Societies * Author=Winapp2.ini Project [Similarity *] DetectFile=%AppData%\Similarity FileKey1=%AppData%\Similarity|cache.dat FileKey2=%AppData%\Similarity\logs|*|RECURSE Tags=ccmedia ID=Similarity * Author=Winapp2.ini Project [SIMS RACER *] DetectFile1=%ProgramData%\SIMS\RACER DetectFile2=%ProgramFiles%\SIMS\RACER DetectFile3=%SystemDrive%\SIMS\RACER FileKey1=%ProgramData%\SIMS\RACER|QLOG.txt FileKey2=%ProgramFiles%\SIMS\RACER|QLOG.txt FileKey3=%SystemDrive%\SIMS\RACER|QLOG.txt Tags=ccapps ID=SIMS RACER * Author=Winapp2.ini Project [Sins of a Solar Empire Rebellion *] DetectFile=%UserProfile%\Documents\My Games\Ironclad Games\Sins of a Solar Empire Rebellion FileKey1=%UserProfile%\Documents\My Games\Ironclad Games\Sins of a Solar Empire Rebellion\Cache|* Tags=ccapps ID=Sins of a Solar Empire Rebellion * Author=Winapp2.ini Project [SIP Workbench VoIP Protocol Analyzer *] Detect=HKCU\Software\BreakPoint\SIP Workbench RegKey1=HKCU\Software\BreakPoint\SIP Workbench|file1 RegKey2=HKCU\Software\BreakPoint\SIP Workbench|file2 RegKey3=HKCU\Software\BreakPoint\SIP Workbench|file3 RegKey4=HKCU\Software\BreakPoint\SIP Workbench|file4 RegKey5=HKCU\Software\BreakPoint\SIP Workbench|file5 RegKey6=HKCU\Software\BreakPoint\SIP Workbench|file6 RegKey7=HKCU\Software\BreakPoint\SIP Workbench|file7 RegKey8=HKCU\Software\BreakPoint\SIP Workbench|file8 RegKey9=HKCU\Software\BreakPoint\SIP Workbench|file9 Tags=ccutil ID=SIP Workbench VoIP Protocol Analyzer * Author=Winapp2.ini Project [SiSense *] DetectFile=%AppData%\SiSense FileKey1=%AppData%\SiSense\Prism\logs|* FileKey2=%ProgramData%\SiSense|*log|RECURSE FileKey3=%ProgramData%\SiSense\Logs|*|RECURSE Tags=ccapps ID=SiSense * Author=Winapp2.ini Project [SketchUp Make *] Detect=HKCU\Software\SketchUp DetectFile1=%AppData%\SketchUp\SketchUp* DetectFile2=%AppData%\Trimble Connect for Sketchup FileKey1=%AppData%\SketchUp\SketchUp*\SketchUp|~*.tmp FileKey2=%AppData%\SketchUp\SketchUp*\WebCache|*-journal;*.old;data_*;debug.log;f_*;index;LOG;Visited Links|RECURSE FileKey3=%AppData%\SketchUp\SketchUp*\WebCache\Cache|* FileKey4=%AppData%\SketchUp\SketchUp*\WebCache\GPUCache|* FileKey5=%AppData%\Trimble Connect for Sketchup\Logs|* FileKey6=%LocalAppData%\SketchUp\SketchUp*\SketchUp|*log-sketchup.txt RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List RegKey2=HKCU\Software\SketchUp\SketchUp 2014\Recent File List RegKey3=HKCU\Software\SketchUp\SketchUp 2015\Recent File List RegKey4=HKCU\Software\SketchUp\SketchUp 2016\Recent File List Tags=ccapps ID=SketchUp Make * Author=Winapp2.ini Project [Sky Go *] DetectFile=%AppData%\Sky\Sky Go FileKey1=%AppData%\Sky Go|*-journal|RECURSE FileKey2=%AppData%\Sky Go\GPUCache|* Tags=ccmedia ID=Sky Go * Author=Winapp2.ini Project [Skyrim Script Extender *] DetectFile=%UserProfile%\Documents\My Games\Skyrim\SKSE FileKey1=%UserProfile%\Documents\My Games\Skyrim\SKSE|*.log Tags=ccapps ID=Skyrim Script Extender * Author=Winapp2.ini Project [Slack *] DetectFile=%AppData%\Slack FileKey1=%AppData%\Slack\*Cache|*|RECURSE FileKey2=%AppData%\Slack\logs|*|RECURSE FileKey3=%AppData%\Slack\Service Worker\*Cache*|*|RECURSE Tags=ccapps ID=Slack * Author=Winapp2.ini Project [Sleeping Dogs *] Detect=HKCU\Software\Valve\Steam\Apps\202170 FileKey1=%ProgramFiles%\Steam\Steamapps\common\SleepingDogs|Log*.txt Tags=ccapps ID=Sleeping Dogs * Author=Winapp2.ini Project [Sleipnir Autofill Data & Search Engine Preferences *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|*Web Data FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\AutoFill*|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\AutoFill*|*|REMOVESELF Tags=ccapps ID=Sleipnir Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Sleipnir Autoplay Preferences *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\MEIPreload|*|REMOVESELF Tags=ccapps ID=Sleipnir Autoplay Preferences * Author=Winapp2.ini Project [Sleipnir Bookmark Backups *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client|favorite*.bak FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\client\backup|favorite*.json FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|Bookmarks.bak Tags=ccapps ID=Sleipnir Bookmark Backups * Author=Winapp2.ini Project [Sleipnir Bookmark Favicons *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client\favicon|*|REMOVESELF FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|favicons* Tags=ccapps ID=Sleipnir Bookmark Favicons * Author=Winapp2.ini Project [Sleipnir Caches *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client|siteupdates.json FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\client\passconnect\serviceicons|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\client\sideupdates_image|*|REMOVESELF FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\client\thumbnail|*|REMOVESELF FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\client\url_image|*|REMOVESELF FileKey6=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer|*-journal|RECURSE FileKey7=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer|Module Info Cache FileKey8=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey9=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\*Cache*|*|REMOVESELF FileKey10=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\blob_storage|*|REMOVESELF FileKey11=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\BudgetDatabase|*|REMOVESELF FileKey12=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Download Service|*|REMOVESELF FileKey13=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\File System|*|REMOVESELF FileKey14=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\GCM Store|*|REMOVESELF FileKey15=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\JumpListIcons*|*|REMOVESELF FileKey16=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\optimization*|*|REMOVESELF FileKey17=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Platform Notifications|*|REMOVESELF FileKey18=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Service Worker|*|REMOVESELF FileKey19=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Shared Dictionary\cache|*|REMOVESELF FileKey20=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey21=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey22=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*Cache*|*|REMOVESELF FileKey23=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Avatars|*|REMOVESELF FileKey24=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Optimization*|*|REMOVESELF FileKey25=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\headlinereader\temp|*|REMOVESELF Tags=ccapps ID=Sleipnir Caches * Author=Winapp2.ini Project [Sleipnir Default App Handlers *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client|uri-action.json FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|PreferredApps Tags=ccapps ID=Sleipnir Default App Handlers * Author=Winapp2.ini Project [Sleipnir Download History *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|DownloadMetadata FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Sleipnir Download History * Author=Winapp2.ini Project [Sleipnir DRM Data *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Sleipnir DRM Data * Author=Winapp2.ini Project [Sleipnir Extension Cookies *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|Extension Cookies Tags=ccapps ID=Sleipnir Extension Cookies * Author=Winapp2.ini Project [Sleipnir Preferences Backups *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client|user.ini.old Tags=ccapps ID=Sleipnir Preferences Backups * Author=Winapp2.ini Project [Sleipnir Privacy Sandbox *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer|*first_party_sets* FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Network|Trust Tokens* FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\CookieReadinessList|*|REMOVESELF FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Sleipnir Privacy Sandbox * Author=Winapp2.ini Project [Sleipnir Progressive Web Apps *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Sleipnir Progressive Web Apps * Author=Winapp2.ini Project [Sleipnir Saved Usernames & Passwords *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|Login Data* Tags=ccapps ID=Sleipnir Saved Usernames & Passwords * Author=Winapp2.ini Project [Sleipnir Security & Threat Detection *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|DIPS* FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\ClientCertificates|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Network|TransportSecurity* FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Safe Browsing Network|*|REMOVESELF FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\CertificateRevocation|*|REMOVESELF FileKey6=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Crowd Deny|*|REMOVESELF FileKey7=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\PKIMetadata|*|REMOVESELF FileKey8=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Safe Browsing|*|REMOVESELF FileKey9=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\SafetyTips|*|REMOVESELF FileKey10=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\SSLErrorAssistant|*|REMOVESELF FileKey11=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Subresource Filter|*|REMOVESELF FileKey12=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Sleipnir Security & Threat Detection * Author=Winapp2.ini Project [Sleipnir Shopping Insights *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\chrome_cart_db|*|REMOVESELF FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\commerce_subscription_db|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\coupon_db|*|REMOVESELF FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\discount*_db|*|REMOVESELF FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Sleipnir Shopping Insights * Author=Winapp2.ini Project [Sleipnir Storage Quota Manager *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|QuotaManager Tags=ccapps ID=Sleipnir Storage Quota Manager * Author=Winapp2.ini Project [Sleipnir Sync Data *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Sleipnir Sync Data * Author=Winapp2.ini Project [Sleipnir Telemetry *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\Application|debug.log FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\Application\SetupMetrics|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer|*.pma;LOG;LOG.old|RECURSE FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|*.log FileKey6=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\DataSharing|*|REMOVESELF FileKey7=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Site Characteristics Database|*|REMOVESELF FileKey11=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\VideoDecodeStats|*|REMOVESELF FileKey12=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\WebRTC Logs|*|REMOVESELF FileKey13=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*BrowserMetrics|*|REMOVESELF FileKey15=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Crash Reports|*|REMOVESELF FileKey16=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Crashpad|*|REMOVESELF FileKey17=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Local Traces|*|REMOVESELF FileKey18=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\OriginTrials|*|REMOVESELF FileKey19=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Fenrir Inc\Sleipnir5\setting\modules\Application|debug.log FileKey21=%ProgramFiles%\Fenrir Inc\Sleipnir5\setting\modules\Application\SetupMetrics|*|REMOVESELF Tags=ccapps ID=Sleipnir Telemetry * Author=Winapp2.ini Project [Sleipnir Web Browsing Cookies *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Sleipnir Web Browsing Cookies * Author=Winapp2.ini Project [Sleipnir Web Browsing History *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Sleipnir Web Browsing History * Author=Winapp2.ini Project [Sleipnir Web Browsing Session *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client|*tab.json FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Extension State|*|REMOVESELF FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Sessions|*|REMOVESELF Tags=ccapps ID=Sleipnir Web Browsing Session * Author=Winapp2.ini Project [Sleipnir Web Browsing Session Backups *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\client\backup|tab* Tags=ccapps ID=Sleipnir Web Browsing Session Backups * Author=Winapp2.ini Project [Sleipnir Web Storage *] DetectFile=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer FileKey1=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\IndexedDB|*|REMOVESELF FileKey2=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Local Storage\*\IndexedDB\https*|* FileKey3=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Local Storage\*\Session Storage|* FileKey4=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\Session Storage|*|REMOVESELF FileKey8=%AppData%\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Sleipnir Web Storage * Author=Winapp2.ini Project [Slender: The Arrival *] Detect=HKCU\Software\Valve\Steam\Apps\252330 FileKey1=%ProgramFiles%\Steam\steamapps\common\Slender - The Arrival\Slender - The Arrival_Data|output_log.txt Tags=ccapps ID=Slender: The Arrival * Author=Winapp2.ini Project [Slim PDF Reader *] DetectFile=%LocalAppData%\Investintech.com Inc\SPR FileKey1=%LocalAppData%\Investintech.com Inc\SPR\*|*.log Tags=ccapps ID=Slim PDF Reader * Author=Winapp2.ini Project [Smart Explorer *] Detect=HKCU\Software\Smartque\Smart Explorer RegKey1=HKCU\Software\Smartque\Smart Explorer\Opened Pages RegKey2=HKCU\Software\Smartque\Smart Explorer\Recent Pages Tags=ccapps ID=Smart Explorer * Author=Winapp2.ini Project [Smart Install Maker *] Detect=HKCU\Software\InstallBuilders\Smart Install Maker RegKey1=HKCU\Software\InstallBuilders\Smart Install Maker\Reopen Tags=ccutil ID=Smart Install Maker * Author=Winapp2.ini Project [Smart PDF Creator Pro *] DetectFile=%AppData%\Smart PDF Creator Pro FileKey1=%AppData%\Smart PDF Creator Pro|Smart PDF Creator Pro_log*.* Tags=ccutil ID=Smart PDF Creator Pro * Author=Winapp2.ini Project [Smart Privacy Protector *] Detect=HKCU\Software\Smart Privacy Protector RegKey1=HKCU\Software\Smart Privacy Protector|SetupName Tags=ccutil ID=Smart Privacy Protector * Author=Winapp2.ini Project [SmartDrive-Wiz *] DetectFile=%ProgramFiles%\Opoku\SmartDrive-Wiz FileKey1=%ProgramFiles%\Opoku\SmartDrive-Wiz\Log|* Tags=ccutil ID=SmartDrive-Wiz * Author=Winapp2.ini Project [SmartFTP *] Detect=HKCU\Software\SmartFTP FileKey1=%AppData%\SmartFTP\Client 2.0\Log|*|RECURSE Tags=ccinternet ID=SmartFTP * Author=Winapp2.ini Project [SmartSynchronize *] DetectFile=%AppData%\syntevo\SmartSynchronize FileKey1=%AppData%\syntevo\SmartSynchronize\*\Logs|* Tags=ccutil ID=SmartSynchronize * Author=Winapp2.ini Project [SMPlayer *] DetectFile1=%LocalAppData%\Packages\55144RicardoVillalba.SMPlayerMediaPlayer_0jd1krfsa5x8y DetectFile2=%UserProfile%\.smplayer FileKey1=%LocalAppData%\Packages\55144RicardoVillalba.SMPlayerMediaPlayer_0jd1krfsa5x8y\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\55144RicardoVillalba.SMPlayerMediaPlayer_0jd1krfsa5x8y\Settings|*.log* FileKey3=%LocalAppData%\Packages\55144RicardoVillalba.SMPlayerMediaPlayer_0jd1krfsa5x8y\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\55144RicardoVillalba.SMPlayerMediaPlayer_0jd1krfsa5x8y\TempState|*|REMOVESELF FileKey5=%UserProfile%\.smplayer\file_settings|*|RECURSE Tags=ccmedia ID=SMPlayer * Author=Winapp2.ini Project [Snagit *] Detect=HKCU\Software\TechSmith\Snagit FileKey1=%LocalAppData%\TechSmith\Logs|*.log FileKey2=%LocalAppData%\TechSmith\Snagit|Tray.bin FileKey3=%LocalAppData%\TechSmith\Snagit\*\NativeCrashReporting\Reports|*.dmp|RECURSE FileKey4=%LocalAppData%\TechSmith\Snagit\*\WebView2Cache\EBWebView\*\GPUCache|*|REMOVESELF FileKey5=%LocalAppData%\TechSmith\Snagit\CrashDumps|*|RECURSE FileKey6=%LocalAppData%\TechSmith\Snagit\DataStore\AppIcons|*.ico FileKey7=%LocalAppData%\TechSmith\Snagit\DataStore\WebSiteIcons|*.ico FileKey8=%LocalAppData%\TechSmith\Snagit\License|*.log FileKey9=%LocalAppData%\TechSmith\Snagit\Thumbnails|*|RECURSE FileKey10=%LocalAppData%\TechSmith\Snagit\TrackerbirdFiles|*.log* FileKey11=%ProgramData%\TechSmith\Uploader|*.log FileKey12=%Public%\TechSmith\Snagit\License|*.cache;*.log FileKey13=%UserProfile%\Documents|SnagitDebug.log FileKey14=%UserProfile%\Documents\Snagit|*.snagx FileKey15=%UserProfile%\Documents\Snagit\.metadata|*|RECURSE RegKey1=HKCU\Software\TechSmith\Snagit\9|StampCustomFolder RegKey2=HKCU\Software\TechSmith\Snagit\10|StampCustomFolder RegKey3=HKCU\Software\TechSmith\Snagit\11|CaptureCount RegKey4=HKCU\Software\TechSmith\Snagit\11|CaptureOpenCount RegKey5=HKCU\Software\TechSmith\Snagit\11|OutputDirLastUsed RegKey6=HKCU\Software\TechSmith\Snagit\11|VidOutputDirLastUsed RegKey7=HKCU\Software\TechSmith\Snagit\11\SnagItEditor\Tray|Thumbnailsize RegKey8=HKCU\Software\TechSmith\Snagit\12|CaptureCount RegKey9=HKCU\Software\TechSmith\Snagit\12|CaptureOpenCount RegKey10=HKCU\Software\TechSmith\Snagit\12|OutputDirLastUsed RegKey11=HKCU\Software\TechSmith\Snagit\12|VidOutputDirLastUsed RegKey12=HKCU\Software\TechSmith\SnagIt\12\Recent Captures RegKey13=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List RegKey14=HKCU\Software\TechSmith\Snagit\12\SnagItEditor\Tray|Thumbnailsize RegKey15=HKCU\Software\TechSmith\Snagit\13|CaptureCount RegKey16=HKCU\Software\TechSmith\Snagit\13|CaptureOpenCount RegKey17=HKCU\Software\TechSmith\Snagit\13|OutputDirLastUsed RegKey18=HKCU\Software\TechSmith\Snagit\13|VidOutputDirLastUsed RegKey19=HKCU\Software\TechSmith\Snagit\13\Recent Captures RegKey20=HKCU\Software\TechSmith\Snagit\13\SnagitEditor\Recent File List RegKey21=HKCU\Software\TechSmith\Snagit\13\SnagItEditor\Tray|Thumbnailsize RegKey22=HKCU\Software\TechSmith\Snagit\18|CaptureCount RegKey23=HKCU\Software\TechSmith\Snagit\18|CaptureOpenCount RegKey24=HKCU\Software\TechSmith\Snagit\18|OutputDirLastUsed RegKey25=HKCU\Software\TechSmith\Snagit\18|VidOutputDirLastUsed RegKey26=HKCU\Software\TechSmith\Snagit\18\Recent Captures RegKey27=HKCU\Software\TechSmith\Snagit\18\SnagitEditor\Recent File List RegKey28=HKCU\Software\TechSmith\Snagit\18\SnagItEditor\Tray|Thumbnailsize RegKey29=HKCU\Software\TechSmith\Snagit\19|CaptureCount RegKey30=HKCU\Software\TechSmith\Snagit\19|CaptureOpenCount RegKey31=HKCU\Software\TechSmith\Snagit\19|OutputDirLastUsed RegKey32=HKCU\Software\TechSmith\Snagit\19|VidOutputDirLastUsed RegKey33=HKCU\Software\TechSmith\Snagit\19\Recent Captures RegKey34=HKCU\Software\TechSmith\Snagit\19\SnagitEditor\Recent File List RegKey35=HKCU\Software\TechSmith\Snagit\19\SnagItEditor\Tray|Thumbnailsize RegKey36=HKCU\Software\TechSmith\Snagit\20|CaptureCount RegKey37=HKCU\Software\TechSmith\Snagit\20|CaptureOpenCount RegKey38=HKCU\Software\TechSmith\Snagit\20|OutputDirLastUsed RegKey39=HKCU\Software\TechSmith\Snagit\20|VidOutputDirLastUsed RegKey40=HKCU\Software\TechSmith\Snagit\20\Recent Captures RegKey41=HKCU\Software\TechSmith\Snagit\20\SnagitEditor\Recent File List RegKey42=HKCU\Software\TechSmith\Snagit\20\SnagItEditor\Tray|Thumbnailsize RegKey43=HKCU\Software\TechSmith\Snagit\21|CaptureCount RegKey44=HKCU\Software\TechSmith\Snagit\21|CaptureOpenCount RegKey45=HKCU\Software\TechSmith\Snagit\21|OutputDirLastUsed RegKey46=HKCU\Software\TechSmith\Snagit\21|VidOutputDirLastUsed RegKey47=HKCU\Software\TechSmith\Snagit\21\Recent Captures RegKey48=HKCU\Software\TechSmith\Snagit\21\SnagitEditor\Recent File List RegKey49=HKCU\Software\TechSmith\Snagit\21\SnagItEditor\Tray|Thumbnailsize RegKey50=HKCU\Software\TechSmith\Snagit\22|CaptureCount RegKey51=HKCU\Software\TechSmith\Snagit\22|CaptureOpenCount RegKey52=HKCU\Software\TechSmith\Snagit\22|OutputDirLastUsed RegKey53=HKCU\Software\TechSmith\Snagit\22|VidOutputDirLastUsed RegKey54=HKCU\Software\TechSmith\Snagit\22\Recent Captures RegKey55=HKCU\Software\TechSmith\Snagit\22\SnagitEditor\Recent File List RegKey56=HKCU\Software\TechSmith\Snagit\22\SnagItEditor\Tray|Thumbnailsize Tags=ccapps ID=Snagit * Author=Winapp2.ini Project [Snapfish Picture Mover *] DetectFile=%AppData%\PictureMover FileKey1=%AppData%\PictureMover\Log|* Tags=ccmedia ID=Snapfish Picture Mover * Author=Winapp2.ini Project [Sniper: Art of Victory *] Detect=HKCU\Software\Valve\Steam\Apps\271500 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Sniper Art of Victory\logs|* Tags=ccapps ID=Sniper: Art of Victory * Author=Winapp2.ini Project [Sniper: Ghost Warrior *] Detect=HKCU\Software\Valve\Steam\Apps\34830 FileKey1=%UserProfile%\Documents\Sniper - Ghost Warrior\out\logs|* Tags=ccapps ID=Sniper: Ghost Warrior * Author=Winapp2.ini Project [Snuggle Truck *] Detect=HKCU\Software\Valve\Steam\Apps\111100 FileKey1=%ProgramFiles%\Steam\steamapps\common\snuggle truck\Snuggle Truck_Data|output_log.txt Tags=ccapps ID=Snuggle Truck * Author=Winapp2.ini Project [Sobees *] DetectFile=%AppData%\sobees Ltd\Sobees FileKey1=%AppData%\sobees Ltd\Sobees\tmp\imagecache|*|RECURSE Tags=ccinternet ID=Sobees * Author=Winapp2.ini Project [Sobolsoft Remove Metadata In Multiple Files Software *] Detect=HKCU\Software\VB and VBA Program Settings\Sobolsoft\Remove Metadata In Multiple Files Software RegKey1=HKCU\Software\VB and VBA Program Settings\Sobolsoft\Remove Metadata In Multiple Files Software|Output Folder RegKey2=HKCU\Software\VB and VBA Program Settings\Sobolsoft\Remove Metadata In Multiple Files Software|Snapshot Tags=ccutil ID=Sobolsoft Remove Metadata In Multiple Files Software * Author=Winapp2.ini Project [SocialFolders *] DetectFile=%LocalAppData%\ftopia\SocialFolders FileKey1=%LocalAppData%\ftopia\SocialFolders\Cache|*|RECURSE FileKey2=%LocalAppData%\ftopia\SocialFolders\Dumps|*|RECURSE Tags=ccinternet ID=SocialFolders * Author=Winapp2.ini Project [Soda PDF *] DetectFile=%AppData%\Soda PDF* FileKey1=%AppData%\Soda PDF*\Logs|* Tags=ccapps ID=Soda PDF * Author=Winapp2.ini Project [Soda Player *] DetectFile=%LocalAppData%\sodaplayer FileKey1=%AppData%\Soda Player|Cookies* FileKey2=%AppData%\Soda Player\*Cache|* FileKey3=%AppData%\Soda Player\acestream\engine|*.log FileKey4=%AppData%\Soda Player\Local Storage|* FileKey5=%LocalAppData%\sodaplayer|SquirrelSetup.log FileKey6=%SystemDrive%\_acestream_cache_|*|REMOVESELF Tags=ccmedia ID=Soda Player * Author=Winapp2.ini Project [Soft Organizer *] DetectFile=%ProgramFiles%\Soft Organizer FileKey1=%ProgramFiles%\Soft Organizer|*.txt Tags=ccutil ID=Soft Organizer * Author=Winapp2.ini Project [SoftCafe MenuPro *] DetectFile=%AppData%\SoftCafe\MenuPro FileKey1=%AppData%\SoftCafe\MenuPro|*.tmp Tags=ccapps ID=SoftCafe MenuPro * Author=Winapp2.ini Project [SoftCDN YouTube Downloader *] DetectFile=%AppData%\SoftCDN FileKey1=%AppData%\SoftCDN|*.log Tags=ccinternet ID=SoftCDN YouTube Downloader * Author=Winapp2.ini Project [SoftEther VPN *] Detect=HKCU\Software\SoftEther Project\SoftEther VPN FileKey1=%ProgramFiles%\SoftEther VPN Client|installer.cache FileKey2=%ProgramFiles%\SoftEther VPN Client\backup.vpn_client.config|*.config FileKey3=%ProgramFiles%\SoftEther VPN Client\client_log|* FileKey4=%ProgramFiles%\SoftEther VPN Client\vpn_debug|* Tags=ccinternet ID=SoftEther VPN * Author=Winapp2.ini Project [Softros Process Blocker *] Detect=HKLM\Software\Policies\Softros\Process Blocker FileKey1=%ProgramFiles%\Softros Systems\Process Blocker|*Log.txt Tags=ccutil ID=Softros Process Blocker * Author=Winapp2.ini Project [SoftThinks CD Creator *] Detect=HKLM\Software\SoftThinks FileKey1=%WinDir%\CREATOR|*.log Tags=ccapps ID=SoftThinks CD Creator * Author=Winapp2.ini Project [Softube Central *] DetectFile=%AppData%\Softube*Central FileKey1=%AppData%\Softube*Central\Logs|* FileKey2=%AppData%\SoftubeCentral|*-journal;*.old;LOG;log.log;Network Persistent State|RECURSE FileKey3=%AppData%\SoftubeCentral\*Cache|*|RECURSE FileKey4=%AppData%\SoftubeCentral\blob_storage|*|RECURSE FileKey5=%AppData%\SoftubeCentral\Softube Central\Logs|* Tags=ccmedia ID=Softube Central * Author=Winapp2.ini Project [Software Informer *] DetectFile=%AppData%\Software Informer FileKey1=%AppData%\Software Informer\cache\icons|*.tmp Tags=ccmedia ID=Software Informer * Author=Winapp2.ini Project [SoftwareOK BarcodeOK *] Detect=HKCU\Software\BarcodeOK ist OK\BarcodeOK RegKey1=HKCU\Software\BarcodeOK ist OK\BarcodeOK\Recent File List Tags=ccutil ID=SoftwareOK BarcodeOK * Author=Winapp2.ini Project [Solarix *] Detect=HKCU\Software\Valve\Steam\Apps\284990 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Solarix\UDKGame\Logs|* Tags=ccapps ID=Solarix * Author=Winapp2.ini Project [SolarWinds Wake-On-Lan *] Detect=HKCU\Software\VB and VBA Program Settings\Wake-On-Lan FileKey1=%ProgramData%\SolarWinds\VB\Banners|*.bmp FileKey2=%ProgramFiles%\SolarWinds\Free Tools\Installs|Wake-On-LAN.LOG RegKey1=HKCU\Software\VB and VBA Program Settings\Wake-On-Lan\IP Broadcast RegKey2=HKCU\Software\VB and VBA Program Settings\Wake-On-Lan\MAC Address Tags=ccinternet ID=SolarWinds Wake-On-Lan * Author=Winapp2.ini Project [Solid Edge *] Detect1=HKCU\Software\Unigraphics Solutions\Solid Edge\Version 109 Detect2=HKCU\Software\Unigraphics Solutions\Solid Edge\Version 110 RegKey1=HKCU\Software\Unigraphics Solutions\Solid Edge\Version 109\MRUex RegKey2=HKCU\Software\Unigraphics Solutions\Solid Edge\Version 110\MRUex Tags=ccapps ID=Solid Edge * Author=Winapp2.ini Project [SolidWorks *] Detect=HKCU\Software\Solidworks RegKey1=HKCU\Software\Solidworks\SolidWorks 2012\Recent File List RegKey2=HKCU\Software\SolidWorks\SolidWorks 2013\Recent File List RegKey3=HKCU\Software\Solidworks\SolidWorks 2014\Recent File List RegKey4=HKCU\Software\SolidWorks\Solidworks 2015\Recent File List RegKey5=HKCU\Software\SolidWorks\Solidworks 2016\Recent File List RegKey6=HKCU\Software\SolidWorks\SOLIDWORKS 2017\Recent File List RegKey7=HKCU\Software\Solidworks\SOLIDWORKS 2018\Recent File List RegKey8=HKCU\Software\Solidworks\SOLIDWORKS 2018\Recent Folder List RegKey9=HKCU\Software\Solidworks\SOLIDWORKS 2019\Recent File List RegKey10=HKCU\Software\Solidworks\SOLIDWORKS 2019\Recent Folder List RegKey11=HKCU\Software\SolidWorks\SOLIDWORKS 2020\Recent File List RegKey12=HKCU\Software\SolidWorks\SOLIDWORKS 2020\Recent Folder List Tags=ccapps ID=SolidWorks * Author=Winapp2.ini Project [Solus *] DetectFile=%LocalAppData%\Solus FileKey1=%LocalAppData%\Solus\Saved\Config\CrashReportClient|*|RECURSE FileKey2=%LocalAppData%\Solus\Saved\Logs|* Tags=ccapps ID=Solus * Author=Winapp2.ini Project [Solvusoft WinSweeper *] Detect=HKCU\Software\WinSweeper2 RegKey1=HKCU\Software\WinSweeper2|LastScan Tags=ccutil ID=Solvusoft WinSweeper * Author=Winapp2.ini Project [Solvusoft WinThruster *] Detect=HKCU\Software\WinThruster DetectFile=%AppData%\WinThruster FileKey1=%AppData%\WinThruster\Backup|* FileKey2=%AppData%\WinThruster\Log|* FileKey3=%AppData%\WinThruster\Undo|* RegKey1=HKCU\Software\WinThruster|InstallerName RegKey2=HKCU\Software\WinThruster|LastScanDate RegKey3=HKCU\Software\WinThruster|SizeToClean Tags=ccutil ID=Solvusoft WinThruster * Author=Winapp2.ini Project [Solway Control3 *] Detect=HKCU\Software\SolwaySoftware\Control3 RegKey1=HKCU\Software\SolwaySoftware\Control3|LastUserName RegKey2=HKCU\Software\SolwaySoftware\Control3|LeftDefDir RegKey3=HKCU\Software\SolwaySoftware\Control3|MiddleDefDir RegKey4=HKCU\Software\SolwaySoftware\Control3|RightDefDir Tags=ccutil ID=Solway Control3 * Author=Winapp2.ini Project [Solway Disk Investigator *] Detect=HKLM\Software\SolwaySoftware\DiskInvestigator RegKey1=HKLM\Software\SolwaySoftware\DiskInvestigator|Drive Tags=ccutil ID=Solway Disk Investigator * Author=Winapp2.ini Project [Solway Password Kernel *] Detect=HKCU\Software\SolwaySoftware\PasswordKernel RegKey1=HKCU\Software\SolwaySoftware\PasswordKernel|LastFile Tags=ccapps ID=Solway Password Kernel * Author=Winapp2.ini Project [SOMA *] Detect=HKCU\Software\Valve\Steam\Apps\282140 FileKey1=%UserProfile%\Documents\My Games\Soma\Main|*.log Tags=ccapps ID=SOMA * Author=Winapp2.ini Project [Sonata *] DetectFile=%ProgramFiles%\Sonata FileKey1=%LocalAppData%\Sonata\temp|*|RECURSE FileKey2=%ProgramFiles%\Sonata\update|*|RECURSE Tags=ccutil ID=Sonata * Author=Winapp2.ini Project [SongKong *] DetectFile=%AppData%\SongKong FileKey1=%AppData%\SongKong\Logs|*|RECURSE Tags=ccmedia ID=SongKong * Author=Winapp2.ini Project [Sonic Visualiser *] Detect=HKCU\Software\sonic-visualiser DetectFile=%UserProfile%\.Sonic Visualiser FileKey1=%AppData%\sonic-visualiser\Sonic Visualiser\cache|* FileKey2=%AppData%\sonic-visualiser\Sonic Visualiser\log|* FileKey3=%UserProfile%\.Sonic Visualiser\cache|* RegKey1=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-0 RegKey2=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-1 RegKey3=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-2 RegKey4=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-3 RegKey5=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-4 RegKey6=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-5 RegKey7=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-6 RegKey8=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-7 RegKey9=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-8 RegKey10=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-9 RegKey11=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-10 RegKey12=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-11 RegKey13=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-12 RegKey14=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-13 RegKey15=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-14 RegKey16=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-15 RegKey17=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-16 RegKey18=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-17 RegKey19=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-18 RegKey20=HKCU\Software\sonic-visualiser\Sonic Visualiser\RecentFiles|recent-19 Tags=ccmedia ID=Sonic Visualiser * Author=Winapp2.ini Project [Sonique *] Detect=HKCU\Software\MediaScience\Sonique RegKey1=HKCU\Software\MediaScience\Sonique\Play_History RegKey2=HKCU\Software\MediaScience\Sonique\URL_History Tags=ccmedia ID=Sonique * Author=Winapp2.ini Project [Sony Magic Update *] DetectFile=%AppData%\Sony Corporation\Auto Magic Update Client FileKey1=%AppData%\Sony Corporation\Auto Magic Update Client|*.log Tags=ccutil ID=Sony Magic Update * Author=Winapp2.ini Project [Sony Media Go *] Detect=HKCU\Software\Sony Corporation\Media Go FileKey1=%AppData%\Sony\Media Go|*.bkd FileKey2=%AppData%\Sony\Media Go Installer|*.log FileKey3=%AppData%\Sony\Media Go\gnsdk|*.log FileKey4=%LocalAppData%\Sony\ErrorReport|* FileKey5=%LocalAppData%\Sony\Media Go Video Playback engine\logging|*.cflog Tags=ccapps ID=Sony Media Go * Author=Winapp2.ini Project [Sony Media Manager *] DetectFile=%AppData%\Sony\Media Manager FileKey1=%AppData%\Sony\Media Manager|*.log;*log.txt FileKey2=%AppData%\Sony\Media Manager\Thumbnails|*|RECURSE Tags=ccmedia ID=Sony Media Manager * Author=Winapp2.ini Project [Sony Mobile Emma *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Emma FileKey1=%ProgramFiles%\Sony Mobile\Emma\log|* FileKey2=%ProgramFiles%\Sony Mobile\Emma\temp|* FileKey3=%ProgramFiles%\Sony Mobile\Emma\workspace\.metadata|.log Tags=ccapps ID=Sony Mobile Emma * Author=Winapp2.ini Project [Sony Sound Organizer *] DetectFile=%AppData%\Sony Corporation\Sound Organizer FileKey1=%AppData%\Sony Corporation\Sound Organizer|*.log Tags=ccutil ID=Sony Sound Organizer * Author=Winapp2.ini Project [Sony VAIO *] Detect=HKLM\Software\Sony Corporation FileKey1=%ProgramData%\Sony Corporation\VAIO *|*.log;Log.txt Tags=ccutil ID=Sony VAIO * Author=Winapp2.ini Project [Sony Xperia Companion *] DetectFile=%UserProfile%\Documents\Sony\Xperia Companion FileKey1=%UserProfile%\Documents\Sony\Xperia Companion\Autoupdate|*.exe FileKey2=%UserProfile%\Documents\Sony\Xperia Companion\Cache|* FileKey3=%UserProfile%\Documents\Sony\Xperia Companion\Logs|* Tags=ccutil ID=Sony Xperia Companion * Author=Winapp2.ini Project [Sony Xperia Flashtool *] Detect=HKLM\Software\Flashtool FileKey1=%SystemDrive%\Flashtool|*.log Tags=ccutil ID=Sony Xperia Flashtool * Author=Winapp2.ini Project [Sorcery! Parts 1 and 2 *] Detect=HKCU\Software\Valve\Steam\Apps\411000 FileKey1=%LocalAppData%\inkle\Sorcery|*.log Tags=ccapps ID=Sorcery! Parts 1 and 2 * Author=Winapp2.ini Project [Soulseek *] DetectFile=%ProgramFiles%\Soulseek* FileKey1=%ProgramFiles%\Soulseek*|search.cfg RegKey1=HKCU\Software\SoulSeek\SoulSeek\Recent File List RegKey2=HKCU\Software\Soulseek2\config|search Tags=ccinternet ID=Soulseek * Author=Winapp2.ini Project [Soulseek Chat History *] DetectFile=%ProgramFiles%\Soulseek* FileKey1=%LocalAppData%\Soulseek Chat Logs\*|*.log FileKey2=%LocalAppData%\SoulseekQt\Soulseek Chat Logs|*.log|RECURSE FileKey3=%ProgramFiles%\Soulseek*\*Chat_Logs|*.txt FileKey4=%UserProfile%\Documents\Soulseek Chat Logs\Private|*.txt Tags=ccinternet ID=Soulseek Chat History * Author=Winapp2.ini Project [SoundMAX *] DetectFile=%ProgramFiles%\Analog Devices\SoundMAX FileKey1=%ProgramFiles%\Analog Devices\SoundMAX|SMax.log* Tags=ccmedia ID=SoundMAX * Author=Winapp2.ini Project [Space Engineers *] Detect=HKCU\Software\Valve\Steam\Apps\244850 FileKey1=%AppData%\SpaceEngineers|*.log Tags=ccapps ID=Space Engineers * Author=Winapp2.ini Project [SpeedFan *] Detect=HKCU\Software\SpeedFan FileKey1=%ProgramFiles%\SpeedFan|debug.nfo;SFLog*.csv FileKey2=%WinDir%\System32|initdebug.nfo FileKey3=%WinDir%\SysWOW64|initdebug.nfo Tags=ccutil ID=SpeedFan * Author=Winapp2.ini Project [SpeedRunners *] Detect=HKCU\Software\Valve\Steam\Apps\207140 FileKey1=%AppData%|SpeedRunnersLog.txt;TargetInvocationLog.txt Tags=ccapps ID=SpeedRunners * Author=Winapp2.ini Project [SpeedyComputer *] DetectFile=%AppData%\SpeedyComputer FileKey1=%AppData%\SpeedyComputer\Log|*|RECURSE Tags=ccutil ID=SpeedyComputer * Author=Winapp2.ini Project [Spider Player *] DetectFile=%AppData%\Spider Player FileKey1=%AppData%\Spider Player|URLHistory.xml Tags=ccmedia ID=Spider Player * Author=Winapp2.ini Project [SpiderOak *] DetectFile=%AppData%\SpiderOak FileKey1=%AppData%\SpiderOak|*.log|RECURSE FileKey2=%AppData%\SpiderOak\download_cache|* Tags=ccutil ID=SpiderOak * Author=Winapp2.ini Project [Spiral Knights *] Detect=HKCU\Software\Valve\Steam\Apps\99900 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Spiral Knights|*.log Tags=ccapps ID=Spiral Knights * Author=Winapp2.ini Project [Spitfire Audio *] DetectFile1=%AppData%\com.spitfireaudio DetectFile2=%AppData%\Spitfire Audio FileKey1=%AppData%\com.spitfireaudio|*.log FileKey2=%AppData%\Spitfire Audio\settings|*.log Tags=ccmedia ID=Spitfire Audio * Author=Winapp2.ini Project [Spitkiss *] DetectFile=%UserProfile%\AppData\LocalLow\Triple Topping Games\Spitkiss FileKey1=%UserProfile%\AppData\LocalLow\Triple Topping Games\Spitkiss|*txt FileKey2=%UserProfile%\AppData\LocalLow\Triple Topping Games\Spitkiss\Unity|*|REMOVESELF Tags=ccapps ID=Spitkiss * Author=Winapp2.ini Project [SPlayer *] DetectFile=%AppData%\SPlayer FileKey1=%AppData%\SPlayer|default.mpcpl;local.db Tags=ccmedia ID=SPlayer * Author=Winapp2.ini Project [Splice *] Detect=HKCU\Software\Valve\Steam\Apps\209790 FileKey1=%ProgramFiles%\Steam\steamapps\common\splice|output_log.txt FileKey2=%ProgramFiles%\Steam\steamapps\common\Splice\Splice_Data|output_log.txt FileKey3=%UserProfile%\Documents|GALog.txt Tags=ccapps ID=Splice * Author=Winapp2.ini Project [SpongeBob Diner Dash *] DetectFile=%ProgramFiles%\SpongeBob Diner Dash FileKey1=%ProgramFiles%\SpongeBob Diner Dash|logfile.* Tags=ccapps ID=SpongeBob Diner Dash * Author=Winapp2.ini Project [Spooky Mall *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Spooky Mall1.0 FileKey1=%ProgramData%\SpookyMall|*.xml_log FileKey2=%ProgramFiles%\Foxy Games\Spooky Mall|*.log Tags=ccapps ID=Spooky Mall * Author=Winapp2.ini Project [SporTV *] DetectFile=%LocalAppData%\SporTV FileKey1=%LocalAppData%\SporTV\Logs|* Tags=ccapps ID=SporTV * Author=Winapp2.ini Project [Spotflux *] Detect=HKLM\Software\Spotflux DetectFile=%ProgramFiles%\Spotflux FileKey1=%AppData%\.spotflux|*.log Tags=ccapps ID=Spotflux * Author=Winapp2.ini Project [Spotify - Downloaded Songs *] DetectFile1=%AppData%\Spotify DetectFile2=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0 FileKey1=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\LocalState\Spotify\Storage|*|REMOVESELF FileKey2=%LocalAppData%\Spotify\Storage|*|REMOVESELF Tags=ccapps ID=Spotify - Downloaded Songs * Author=Winapp2.ini Project [Spotify *] DetectFile1=%AppData%\Spotify DetectFile2=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0 FileKey1=%AppData%\Spotify|*.log FileKey2=%AppData%\Spotify\users\*|ad-state-storage.bnk;frequency.pb;local-files.bnk;local_sync_state;watch-sources.bnk FileKey3=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\LocalCache\Spotify|*|REMOVESELF FileKey5=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\LocalState\Users\*|ad-state-storage.bnk;cached;context_player_state_restore FileKey6=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\Settings|*.log* FileKey7=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium|*.log* FileKey8=%LocalAppData%\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\TempState|*|REMOVESELF FileKey9=%LocalAppData%\Spotify|*|REMOVESELF ExcludeKey1=PATH|%LocalAppData%\Spotify\Storage\*\|* Tags=ccapps ID=Spotify * Author=Winapp2.ini Project [Spoutcraft *] DetectFile=%AppData%\.spoutcraft FileKey1=%AppData%\.spoutcraft|*.log FileKey2=%AppData%\.spoutcraft\logs|* Tags=ccapps ID=Spoutcraft * Author=Winapp2.ini Project [Sprint Hero RUU *] DetectFile=%SystemDrive%\ruu_log FileKey1=%SystemDrive%\ruu_log|*|REMOVESELF Tags=ccmedia ID=Sprint Hero RUU * Author=Winapp2.ini Project [Spybot AntiBeacon *] DetectFile=%LocalAppData%\Safer-Networking Ltd\Spybot* FileKey1=%LocalAppData%\Safer-Networking Ltd\Spybot*|*.log;Spybot Lab.txt Tags=ccutil ID=Spybot AntiBeacon * Author=Winapp2.ini Project [Spybot Search and Destroy *] Detect1=HKCU\Software\Safer Networking Limited\Spybot - Search & Destroy 2 Detect2=HKLM\Software\Safer Networking Limited\SpybotSnD FileKey1=%ProgramData%\Spybot - Search & Destroy\Logs|*|RECURSE FileKey2=%ProgramData%\Spybot - Search & Destroy\System Configuration Snapshots|*|REMOVESELF FileKey3=%ProgramFiles%\Spybot - Search & Destroy 2\Updates|*|RECURSE FileKey4=%ProgramFiles%\Spybot - Search & Destroy\Updates|*.zip FileKey5=%UserProfile%\Documents\ProcAlyzer Dumps|*|REMOVESELF ExcludeKey1=FILE|%ProgramFiles%\Spybot - Search & Destroy 2\Updates\Downloads\|updates.uid Tags=ccutil ID=Spybot Search and Destroy * Author=Winapp2.ini Project [Spybot Search and Destroy Backups *] Detect=HKLM\Software\Safer Networking Limited\SpybotSnD FileKey1=%ProgramData%\Spybot - Search & Destroy\Backups|*|RECURSE FileKey2=%ProgramData%\Spybot - Search & Destroy\Recovery|*|RECURSE FileKey3=%ProgramData%\Spybot - Search & Destroy\Snapshots*|*|RECURSE FileKey4=%WinDir%\System32\drivers\etc|hosts.*.backup Tags=ccutil ID=Spybot Search and Destroy Backups * Author=Winapp2.ini Project [SpyHunter *] DetectFile=%ProgramFiles%\EnigmaSoft\SpyHunter FileKey1=%ProgramFiles%\EnigmaSoft\SpyHunter\Logs|* Tags=ccutil ID=SpyHunter * Author=Winapp2.ini Project [SpyShelter *] DetectFile=%AppData%\SpyShelter FileKey1=%AppData%\SpyShelter|shelter-log.txt Tags=ccutil ID=SpyShelter * Author=Winapp2.ini Project [SpywareBlaster Update File *] DetectFile=%ProgramFiles%\SpywareBlaster FileKey1=%ProgramFiles%\SpywareBlaster|spywareblasterupgrade_latest.exe Tags=ccutil ID=SpywareBlaster Update File * Author=Winapp2.ini Project [SQL Anywhere 11 *] DetectFile=%ProgramData%\SQL Anywhere 11 FileKey1=%ProgramData%\SQL Anywhere 11\Diagnostics|*.crash_log;*.dmp Tags=ccapps ID=SQL Anywhere 11 * Author=Winapp2.ini Project [SQLite Expert 3 *] Detect1=HKCU\Software\SQLite Expert\Personal\3.x Detect2=HKCU\Software\SQLite Expert\Professional\3.x RegKey1=HKCU\Software\SQLite Expert\Personal\3.x\DB RegKey2=HKCU\Software\SQLite Expert\Professional\3.x\DB Tags=ccutil ID=SQLite Expert 3 * Author=Winapp2.ini Project [SQLiteMan *] Detect=HKCU\Software\yarpen.cz\sqliteman RegKey1=HKCU\Software\yarpen.cz\sqliteman|lastDatabase Tags=ccapps ID=SQLiteMan * Author=Winapp2.ini Project [Squirrel.Windows *] DetectFile=%LocalAppData%\SquirrelTemp FileKey1=%LocalAppData%\SquirrelTemp|*|REMOVESELF Tags=ccapps ID=Squirrel.Windows * Author=Winapp2.ini Project [Star Citizen *] DetectFile1=%AppData%\rsilauncher DetectFile2=%LocalAppData%\Star Citizen FileKey1=%AppData%\RSI Launcher|*|RECURSE FileKey2=%AppData%\rsilauncher|*.jpg;*.log FileKey3=%AppData%\rsilauncher\*Cache|* FileKey4=%AppData%\rsilauncher\*update*|* FileKey5=%LocalAppData%\Star Citizen|* FileKey6=%ProgramFiles%\Roberts Space Industries\StarCitizen\LIVE|*.log|RECURSE Tags=ccapps ID=Star Citizen * Author=Winapp2.ini Project [Star Downloader *] Detect=HKCU\Software\Star Downloader FileKey1=%ProgramFiles%\Star Downloader|LastURLs;serverstats.txt FileKey2=%ProgramFiles%\Star Downloader\Partial Downloads|*|RECURSE Tags=ccapps ID=Star Downloader * Author=Winapp2.ini Project [Star Swarm Stress Test *] Detect=HKCU\Software\Valve\Steam\Apps\267130 FileKey1=%UserProfile%\Documents\Star Swarm|output*.txt Tags=ccapps ID=Star Swarm Stress Test * Author=Winapp2.ini Project [Star Trek Online *] Detect1=HKCU\Software\Cryptic\Star Trek Online Detect2=HKCU\Software\Valve\Steam\Apps\9900 FileKey1=%ProgramFiles%\Steam\Steamapps\Common\star trek online\Star Trek Online\*\cache|* FileKey2=%ProgramFiles%\steam\steamapps\common\star trek online\star trek online\*\logs\GameClient|* FileKey3=%Public%\Games\Cryptic Studios\Star Trek Online\*\Cache|* FileKey4=%Public%\Games\Cryptic Studios\Star Trek Online\*\Logs\GameClient|* Tags=ccapps ID=Star Trek Online * Author=Winapp2.ini Project [Star Wars: Battlefront II *] Detect=HKCU\Software\Valve\Steam\Apps\6060 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Star Wars BattleFront II|update*.txt Tags=ccapps ID=Star Wars: Battlefront II * Author=Winapp2.ini Project [Star Wars: The Force Unleashed *] DetectFile=%LocalAppData%\LucasArts\Star Wars The Force Unleashed* FileKey1=%LocalAppData%\LucasArts\Star Wars The Force Unleashed*|* Tags=ccapps ID=Star Wars: The Force Unleashed * Author=Winapp2.ini Project [Star Wars: The Old Republic *] Detect=HKLM\Software\BioWare\Star Wars-The Old Republic FileKey1=%LocalAppData%\SWTOR\CrashDump\swtor|* FileKey2=%ProgramFiles%\EA Games\Star Wars - The Old Republic\__Installer|InstallLog.txt FileKey3=%ProgramFiles%\EA Games\Star Wars - The Old Republic\logs|* FileKey4=%ProgramFiles%\EA Games\Star Wars - The Old Republic\swtor\retailclient\swtor\logs|* FileKey5=%ProgramFiles%\Electronic Arts\BioWare\Star Wars-The Old Republic\betatest\retailclient\Temp|*.log FileKey6=%ProgramFiles%\Electronic Arts\BioWare\Star Wars-The Old Republic\logs|*.log FileKey7=%ProgramFiles%\Electronic Arts\BioWare\Star Wars-The Old Republic\swtor\retailclient\swtor\logs|*.log FileKey8=%UserProfile%\Documents|*Install STAR WARS The Old Republic.log Tags=ccapps ID=Star Wars: The Old Republic * Author=Winapp2.ini Project [StarCraft I/II *] Detect1=HKCU\Software\Blizzard Entertainment\Starcraft Detect2=HKLM\Software\Blizzard Entertainment\StarCraft II FileKey1=%AppData%\Blizzard\StarCraft|*Log.txt FileKey2=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies|*-journal;*.old;LOG;Visited Links|RECURSE FileKey3=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies\*Cache|* FileKey4=%UserProfile%\Documents\StarCraft II\*Logs|*|RECURSE FileKey5=%UserProfile%\Documents\StarCraft\Errors|* RegKey1=HKCU\Software\Blizzard Entertainment\StarCraft II Editor\Recent Files Tags=ccapps ID=StarCraft I/II * Author=Winapp2.ini Project [Stardew Valley *] DetectFile=%AppData%\StardewValley FileKey1=%AppData%\StardewValley\ErrorLogs|*.txt Tags=ccapps ID=Stardew Valley * Author=Winapp2.ini Project [Stardock Fences *] Detect1=HKLM\Software\Stardock\Misc\Fences Detect2=HKLM\Software\Stardock\Misc\Fences2 DetectFile=%LocalAppData%\Stardock\Fences* FileKey1=%AppData%\Stardock\Fences\TroubleshootingLog|*.dat;*.txt FileKey2=%LocalAppData%\Stardock\Fences*|*Log.txt FileKey3=%ProgramData%\Stardock\Fences*|Cache.dat FileKey4=%ProgramFiles%\Stardock\Fences|*.txt Tags=ccutil ID=Stardock Fences * Author=Winapp2.ini Project [Stardock ObjectDock Plus *] DetectFile=%ProgramFiles%\Stardock\ObjectDock Plus FileKey1=%AppData%\Stardock|*|REMOVESELF FileKey2=%LocalAppData%\ODUI|*|REMOVESELF FileKey3=%LocalAppData%\Stardock\ObjectDockPlus|*Backup.ini FileKey4=%ProgramData%\Stardock|*|RECURSE Tags=ccutil ID=Stardock ObjectDock Plus * Author=Winapp2.ini Project [Stardock Start11 *] DetectFile=%ProgramFiles%\Stardock\Start11 FileKey1=%LocalAppData%\StarDock\Start11|SasLog.txt FileKey2=%ProgramData%\StarDock\Start11\Update|*.exe Tags=ccutil ID=Stardock Start11 * Author=Winapp2.ini Project [StarMoney *] DetectFile=%ProgramData%\StarMoney* FileKey1=%ProgramData%\StarMoney *|*.log|RECURSE Tags=ccapps ID=StarMoney * Author=Winapp2.ini Project [StarOffice *] DetectFile=%ProgramFiles%\Sun\StarOffice* FileKey1=%AppData%\StarOffice*\user\registry\data\org\openoffice\Office|Common.xcu Tags=ccapps ID=StarOffice * Author=Winapp2.ini Project [Start Menu Reviver *] Detect=HKLM\Software\Start Menu Reviver FileKey1=%ProgramFiles%\ReviverSoft\Start Menu Reviver\Logs|* Tags=ccutil ID=Start Menu Reviver * Author=Winapp2.ini Project [Startup Panic *] DetectFile=%UserProfile%\AppData\LocalLow\Algorock\Startup Panic FileKey1=%UserProfile%\AppData\LocalLow\Algorock\Startup Panic|*.log FileKey2=%UserProfile%\AppData\LocalLow\Algorock\Startup Panic\Unity|*|REMOVESELF Tags=ccapps ID=Startup Panic * Author=Winapp2.ini Project [Staxel *] Detect=HKCU\Software\Valve\Steam\Apps\405710 FileKey1=%ProgramFiles%\Steam\Steamapps\common\shared\Staxel\bin\cache|* FileKey2=%ProgramFiles%\Steam\Steamapps\common\shared\Staxel\bin\cookies|* FileKey3=%ProgramFiles%\Steam\Steamapps\common\shared\Staxel\bin\crashlogs|* Tags=ccapps ID=Staxel * Author=Winapp2.ini Project [STDU Explorer *] Detect=HKCU\Software\STDUtility\STDUExplorerApp RegKey1=HKCU\Software\STDUtility\STDUExplorerApp\PathMRUList Tags=ccapps ID=STDU Explorer * Author=Winapp2.ini Project [STDU Viewer *] DetectFile=%ProgramFiles%\STDU Viewer FileKey1=%LocalAppData%\STDUViewer|browse.cache;FilesViewerState.xml;STDUSessions.xml FileKey2=%ProgramFiles%\STDU Viewer|browse.cache;FilesViewerState.xml;STDUSessions.xml Tags=ccapps ID=STDU Viewer * Author=Winapp2.ini Project [Steam *] Detect=HKCU\Software\Valve\Steam FileKey1=%AppData%\SteamVR\Logs|*|REMOVESELF FileKey2=%CommonProgramFiles%\Steam|*_log.txt FileKey3=%LocalAppData%\Steam\htmlcache|*|REMOVESELF FileKey4=%ProgramData%\Steam\RLD!\*|last.txt FileKey5=%ProgramFiles%\Steam|*.log;*.old FileKey6=%ProgramFiles%\Steam\appcache\httpcache|*|REMOVESELF FileKey7=%ProgramFiles%\Steam\bin\cef\*|debug.log FileKey8=%ProgramFiles%\Steam\config\*cache|* FileKey9=%ProgramFiles%\Steam\depotcache|* FileKey10=%ProgramFiles%\Steam\dumps|*|RECURSE FileKey11=%ProgramFiles%\Steam\logs|* FileKey12=%ProgramFiles%\Steam\music\_database|*|RECURSE FileKey13=%ProgramFiles%\Steam\tenfoot\config\httpcache|*|RECURSE FileKey14=%ProgramFiles%\Steam\tenfoot\config\images\web|*|RECURSE FileKey15=%ProgramFiles%\Steam\userdata\*\*|RemoveEmptyFoldersOnly|REMOVESELF FileKey16=%ProgramFiles%\Steam\userdata\*\*\local|socache.dt FileKey17=%ProgramFiles%\Steam\userdata\*\*msgcache|*|RECURSE FileKey18=%ProgramFiles%\Steam\userdata\*\config\*cache|*|RECURSE FileKey19=%ProgramFiles%\Steam\vr\runtime\logs|*|RECURSE Tags=ccapps ID=Steam * Author=Winapp2.ini Project [Steam Games *] Detect=HKCU\Software\Valve\Steam FileKey1=%ProgramFiles%\Steam\steamapps|*.dmp;*.icns;*.log;*.mdmp;*.tmp;.DS_Store;logfile.*|RECURSE FileKey2=%ProgramFiles%\Steam\steamapps\common\*\*\downloads|*|RECURSE FileKey3=%ProgramFiles%\Steam\steamapps\common\*\Cache|*|RECURSE FileKey4=%ProgramFiles%\Steam\steamapps\common\*\config\html|*|RECURSE FileKey5=%ProgramFiles%\Steam\steamapps\common\*\DebugData|*|RECURSE FileKey6=%ProgramFiles%\Steam\steamapps\downloading|*|RECURSE FileKey7=%ProgramFiles%\Steam\steamapps\shadercache|*|RECURSE FileKey8=%ProgramFiles%\Steam\steamapps\temp|*|RECURSE FileKey9=%ProgramFiles%\Steam\steamapps\workshop\downloads|*|RECURSE FileKey10=%ProgramFiles%\Steam\steamapps\workshop\temp|*|RECURSE ExcludeKey1=PATH|%ProgramFiles%\Steam\steamapps\common\Supreme Ruler 1936\Cache\|* ExcludeKey2=PATH|%ProgramFiles%\Steam\steamapps\common\Supreme Ruler Cold War\Cache\|* ExcludeKey3=PATH|%ProgramFiles%\Steam\steamapps\common\Supreme Ruler Ultimate\Cache\|* Tags=ccapps ID=Steam Games * Author=Winapp2.ini Project [Steam Installers *] Detect=HKCU\Software\Valve\Steam Warning=This entry should only be enabled after you have launched each of your installed Steam games at least once. Deleting these files before then may cause Steam to think the game's installation is broken. After the first launch, these files become useless. FileKey1=%ProgramFiles%\Steam\Steamapps\common|*.cab;*.msp;*.msu;*.vdk;*d3dx11*.cat;*d3dx11*.inf;*inst*.vdf;*NetFx*.*;*pbsvc*.exe;*redist*.exe;*redist.msi*;*setup*.exe;*setup*.msi;*UPlay*Installer*.exe;*vc*red*.exe;*vc*red.msi;ac3filter*.exe;AdbeRdr*.*;bitmap2substance_installer.exe;cmp.bat;d3d*.exe;D3D*Install*.dll;D3D*Install.exe;directx*.exe;dosbox*.tar.gz;DSETUP*.DLL;DSInstaller.exe;EAappInstaller.exe;eadm-installer.exe;eula.*.*;firewallinstallhelper.dll;GamesExplorerIntegrationTool.exe;gameuxinstallhelper.dll;GDFInstall.exe;globdata.ini;install.exe;install.ini;install.res.*.dll;locdata.*.ini;mcpp*.*;Microsoft .NET Framework*.bat;Microsoft .NET Framework*.cmd;Microsoft Visual C++ *.cmd;msxml6.msi;NDP*.exe;oalinst.exe;p4vinst*.exe;perforce*.exe;PhysX*.exe;PhysX*.msi;prompt.bat;PVRTexTool.exe;python*.msi;RGB9RAST*.msi;setupres.*.dll;SPInstaller.exe;umdf.exe;wapres.*.dll;WIC*.exe;Windows*-KB*.exe;windowsdesktop-runtime-*-win-x64.exe;WindowsInstaller*.exe;WMF*Dist*.exe;wmp11-windowsxp-x86-enu.exe;wmpappcompat.exe;XPSEPC*.exe|RECURSE ExcludeKey1=FILE|%ProgramFiles%\Steam\Steamapps\common\SteamVR\tools\steamvr_room_setup\win64\|steamvr_room_setup.exe Tags=ccapps ID=Steam Installers * Author=Winapp2.ini Project [Steam Packages *] Detect=HKCU\Software\Valve\Steam FileKey1=%ProgramFiles%\Steam\package|*.zip.* Tags=ccapps ID=Steam Packages * Author=Winapp2.ini Project [SteamWorld Dig *] Detect=HKCU\Software\Valve\Steam\Apps\252410 FileKey1=%ProgramFiles%\Steam\Steamapps\common\SteamWorld Dig|*.mdmp Tags=ccapps ID=SteamWorld Dig * Author=Winapp2.ini Project [SteamWorld Dig 2 *] Detect=HKCU\Software\Valve\Steam\Apps\571310 FileKey1=%UserProfile%\Documents\My Games\SteamWorld Dig 2\*|log.txt Tags=ccapps ID=SteamWorld Dig 2 * Author=Winapp2.ini Project [Steed *] DetectFile=%ProgramData%\Steed FileKey1=%ProgramData%\Steed\Logs|*|REMOVESELF Tags=ccinternet ID=Steed * Author=Winapp2.ini Project [SteelSeries *] DetectFile=%ProgramData%\SteelSeries FileKey1=%AppData%\SteelSeries-Engine-*-Client|*.old;LOG|RECURSE FileKey2=%AppData%\SteelSeries-Engine-*-Client\*Cache|*|RECURSE FileKey3=%AppData%\SteelSeries-Engine-*-Client\blob_storage|*|RECURSE FileKey4=%ProgramData%\SteelSeries\SteelSeries Engine*\Logs|*|REMOVESELF FileKey5=%ProgramFiles%\SteelSeries\SteelSeries Engine*|*.log Tags=ccutil ID=SteelSeries * Author=Winapp2.ini Project [Steinberg Cubase *] DetectFile=%ProgramFiles%\Steinberg\Cubase* FileKey1=%ProgramFiles%\Steinberg\Cubase*|*.log Tags=ccmedia ID=Steinberg Cubase * Author=Winapp2.ini Project [Stellar Phoenix Registry Manager *] DetectFile=%ProgramFiles%\Stellar Phoenix Registry Manager FileKey1=%SystemDrive%|LogReport.txt Tags=ccutil ID=Stellar Phoenix Registry Manager * Author=Winapp2.ini Project [Stellaris *] DetectFile=%UserProfile%\Documents\Paradox Interactive\Stellaris FileKey1=%UserProfile%\Documents\Paradox Interactive\Stellaris\.launcher-cache|* FileKey2=%UserProfile%\Documents\Paradox Interactive\Stellaris\_backup_*\ShaderCache\dx*|*|REMOVESELF FileKey3=%UserProfile%\Documents\Paradox Interactive\Stellaris\Cache|* FileKey4=%UserProfile%\Documents\Paradox Interactive\Stellaris\Crashes|*|REMOVESELF FileKey5=%UserProfile%\Documents\Paradox Interactive\Stellaris\Dumps|* FileKey6=%UserProfile%\Documents\Paradox Interactive\Stellaris\Logs|* FileKey7=%UserProfile%\Documents\Paradox Interactive\Stellaris\Screenshots|*.png FileKey8=%UserProfile%\Documents\Paradox Interactive\Stellaris\ShaderCache\dx*|*|REMOVESELF Tags=ccapps ID=Stellaris * Author=Winapp2.ini Project [Stellarium *] DetectFile=%AppData%\Stellarium FileKey1=%AppData%\Stellarium|log.txt FileKey2=%LocalAppData%\Stellarium\Cache|*|RECURSE FileKey3=%LocalAppData%\stellarium\stellarium\cache|*|RECURSE Tags=ccapps ID=Stellarium * Author=Winapp2.ini Project [StepMania *] DetectFile=%AppData%\StepMania* FileKey1=%AppData%\Stepmania*\Logs|* Tags=ccapps ID=StepMania * Author=Winapp2.ini Project [SterJo NetStalker *] DetectFile=%LocalAppData%\SterJo NetStalker FileKey1=%LocalAppData%\SterJo NetStalker|dscnt.exe;History.sjh FileKey2=%LocalAppData%\SterJo NetStalker\Logs|* Tags=ccinternet ID=SterJo NetStalker * Author=Winapp2.ini Project [STOIK Smart Resizer *] Detect1=HKCU\Software\STOIK Smart Resizer 1.0\STOIK Smart Resizer Detect2=HKCU\Software\STOIK Smart Resizer 2.0\STOIK Smart Resizer Detect3=HKCU\Software\STOIK Smart Resizer 3.0\STOIK Smart Resizer RegKey1=HKCU\Software\STOIK Smart Resizer 1.0\STOIK Smart Resizer\Recent File List RegKey2=HKCU\Software\STOIK Smart Resizer 2.0\STOIK Smart Resizer\Recent File List RegKey3=HKCU\Software\STOIK Smart Resizer 3.0\STOIK Smart Resizer\Recent File List Tags=ccmedia ID=STOIK Smart Resizer * Author=Winapp2.ini Project [STOIK Video Converter 2 *] Detect=HKCU\Software\STOIK FileKey1=%AppData%\STOIK\videopak2|*.ini Tags=ccmedia ID=STOIK Video Converter 2 * Author=Winapp2.ini Project [Stranded Deep *] DetectFile=%UserProfile%\AppData\LocalLow\Beam Team Games\Stranded Deep FileKey1=%UserProfile%\AppData\LocalLow\Beam Team Games\Stranded Deep|*.log Tags=ccapps ID=Stranded Deep * Author=Winapp2.ini Project [Stranglehold *] DetectFile=%LocalAppData%\Midway\Stranglehold FileKey1=%LocalAppData%\Midway\Stranglehold|*.log|RECURSE FileKey2=%LocalAppData%\Midway\Stranglehold\Cache|*|REMOVESELF Tags=ccapps ID=Stranglehold * Author=Winapp2.ini Project [Stream-Cloner *] Detect=HKCU\Software\Stream-Cloner FileKey1=%AppData%\Stream-Cloner|*.log;IeRecentVisit.txt FileKey2=%AppData%\Stream-Cloner\Cap_images|*|REMOVESELF FileKey3=%AppData%\Stream-Cloner\thumbs|*|REMOVESELF Tags=ccmedia ID=Stream-Cloner * Author=Winapp2.ini Project [Stremio *] DetectFile=%LocalAppData%\Smart Code LTD\Stremio FileKey1=%AppData%\Stremio\Stremio-Server\Stremio-Cache|*|RECURSE FileKey2=%LocalAppData%\Smart Code LTD\Stremio\Cache|*|RECURSE FileKey3=%LocalAppData%\Smart Code LTD\Stremio\QtWebEngine\Default|*-journal;LOG;LOG.old;Origin Bound Certs;QuotaManager;Visited Links|RECURSE FileKey4=%LocalAppData%\Smart Code LTD\Stremio\QtWebEngine\Default\Service Worker\*Cache*|*|RECURSE Tags=ccinternet ID=Stremio * Author=Winapp2.ini Project [Stronghold Crusader *] DetectFile=%ProgramFiles%\Firefly Studios\Stronghold Crusader FileKey1=%ProgramFiles%\Firefly Studios\Stronghold Crusader\gfx|*log.txt Tags=ccapps ID=Stronghold Crusader * Author=Winapp2.ini Project [StudioLine Photo Basic *] Detect=HKCU\Software\StudioLine\StudioLine Photo Basic DetectFile=%ProgramFiles%\StudioLine Photo Basic FileKey1=%ProgramData%\H&M System Software\StudioLine Photo Basic 3|*.bak;*.dmp;*.log RegKey1=HKCU\Software\H&&M System Software\Twain\Recent File List RegKey2=HKCU\Software\StudioLine\StudioLine Photo Basic\WindowPositions Tags=ccmedia ID=StudioLine Photo Basic * Author=Winapp2.ini Project [SubiT *] DetectFile=%AppData%\SubiT FileKey1=%AppData%\SubiT\settings|crash.log Tags=ccmedia ID=SubiT * Author=Winapp2.ini Project [Sublime Text Backups *] DetectFile=%AppData%\Sublime Text* FileKey1=%AppData%\Sublime Text 3\Backup|*|REMOVESELF Tags=ccutil ID=Sublime Text Backups * Author=Winapp2.ini Project [Sublime Text Session *] DetectFile=%AppData%\Sublime Text* FileKey1=%AppData%\Sublime Text 2\Settings|*.sublime_session FileKey2=%AppData%\Sublime Text 3\Local|Session.sublime_session FileKey3=%AppData%\Sublime Text\Options|* Tags=ccutil ID=Sublime Text Session * Author=Winapp2.ini Project [Success Story *] DetectFile=%AppData%\Shape Games\SuccessStory FileKey1=%AppData%\Shape Games\SuccessStory\logs|* Tags=ccapps ID=Success Story * Author=Winapp2.ini Project [SumatraPDF *] DetectFile1=%AppData%\SumatraPDF DetectFile2=%LocalAppData%\SumatraPDF DetectFile3=%SystemDrive%\PortableApps\SumatraPDFPortable FileKey1=%AppData%\SumatraPDF\sumatrapdfcache|* FileKey2=%LocalAppData%\SumatraPDF\sumatrapdfcache|* FileKey3=%SystemDrive%\PortableApps\SumatraPDFPortable\Data\settings\sumatrapdfcache|* Tags=ccutil ID=SumatraPDF * Author=Winapp2.ini Project [Sundered *] DetectFile=%UserProfile%\AppData\LocalLow\Thunder Lotus Games\Sundered FileKey1=%ProgramFiles%\Steam\Steamapps\common\sundered\sundered_data|*log.txt FileKey2=%UserProfile%\AppData\LocalLow\Thunder Lotus Games\Sundered|*txt Tags=ccapps ID=Sundered * Author=Winapp2.ini Project [SuniSoft Registry Clean Expert *] Detect=HKCU\Software\SuniSoft\IncUpdate\Registry Clean Expert FileKey1=%ProgramFiles%\Registry Clean Expert|fixlog.ini Tags=ccutil ID=SuniSoft Registry Clean Expert * Author=Winapp2.ini Project [SUPERAntiSpyware *] Detect1=HKCU\Software\SUPERAntiSpyware.com\SUPERAntiSpyware Detect2=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware FileKey1=%ProgramData%\!SASCORE\AppLogs|*.dmp;*.SDB FileKey2=%ProgramData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP FileKey3=%ProgramFiles%\SUPERAntiSpyware|*.tmp Tags=ccutil ID=SUPERAntiSpyware * Author=Winapp2.ini Project [SuperEasy Software Driver Updater *] Detect=HKLM\Software\SuperEasy Software FileKey1=%AppData%\SuperEasy Software\Driver Updater|*.log Tags=ccmedia ID=SuperEasy Software Driver Updater * Author=Winapp2.ini Project [Superliminal *] DetectFile=%UserProfile%\AppData\LocalLow\PillowCastle\Superliminal* FileKey1=%UserProfile%\AppData\LocalLow\PillowCastle\Superliminal*|*.log Tags=ccapps ID=Superliminal * Author=Winapp2.ini Project [Supermium Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|*Web Data FileKey2=%LocalAppData%\Supermium\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Supermium\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Supermium Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Supermium Autoplay Preferences *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Supermium Autoplay Preferences * Author=Winapp2.ini Project [Supermium Bookmark Backups *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|Bookmarks.bak Tags=ccapps ID=Supermium Bookmark Backups * Author=Winapp2.ini Project [Supermium Bookmark Favicons *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|favicons* Tags=ccapps ID=Supermium Bookmark Favicons * Author=Winapp2.ini Project [Supermium Caches *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Supermium\User Data|Module Info Cache FileKey3=%LocalAppData%\Supermium\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Supermium\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Supermium\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Supermium\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Supermium\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Supermium\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Supermium\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Supermium\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Supermium\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Supermium\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Supermium\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Supermium\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Supermium\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Supermium\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Supermium\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Supermium\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Supermium\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Supermium Caches * Author=Winapp2.ini Project [Supermium Default App Handlers *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|PreferredApps Tags=ccapps ID=Supermium Default App Handlers * Author=Winapp2.ini Project [Supermium Download History *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Supermium\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Supermium Download History * Author=Winapp2.ini Project [Supermium DRM Data *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Supermium\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Supermium DRM Data * Author=Winapp2.ini Project [Supermium Extension Cookies *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|Extension Cookies Tags=ccapps ID=Supermium Extension Cookies * Author=Winapp2.ini Project [Supermium Pinned Tabs *] DetectFile=%LocalAppData%\Supermium\User Data RegKey1=HKCU\Software\Supermium\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Supermium Pinned Tabs * Author=Winapp2.ini Project [Supermium Privacy Sandbox *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data|*first_party_sets* FileKey2=%LocalAppData%\Supermium\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Supermium\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Supermium\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Supermium\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Supermium\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Supermium\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Supermium\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Supermium Privacy Sandbox * Author=Winapp2.ini Project [Supermium Progressive Web Apps *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Supermium Progressive Web Apps * Author=Winapp2.ini Project [Supermium Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|Login Data* Tags=ccapps ID=Supermium Saved Usernames & Passwords * Author=Winapp2.ini Project [Supermium Security & Threat Detection *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|DIPS* FileKey2=%LocalAppData%\Supermium\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Supermium\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Supermium\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Supermium\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Supermium\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Supermium\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Supermium\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Supermium\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Supermium\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Supermium\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Supermium\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Supermium Security & Threat Detection * Author=Winapp2.ini Project [Supermium Shopping Insights *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Supermium\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Supermium\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Supermium\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Supermium\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Supermium Shopping Insights * Author=Winapp2.ini Project [Supermium Storage Quota Manager *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|QuotaManager Tags=ccapps ID=Supermium Storage Quota Manager * Author=Winapp2.ini Project [Supermium Sync Data *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Supermium Sync Data * Author=Winapp2.ini Project [Supermium Telemetry *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\Application|debug.log FileKey2=%LocalAppData%\Supermium\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Supermium\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Supermium\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Supermium\User Data\*|*.log FileKey6=%LocalAppData%\Supermium\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Supermium\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Supermium\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Supermium\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Supermium\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Supermium\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Supermium\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Supermium\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Supermium\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Supermium\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Supermium\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Supermium\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Supermium\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Supermium\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Supermium\Application|debug.log FileKey21=%ProgramFiles%\Supermium\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Supermium\BlBeacon|failed_count RegKey2=HKCU\Software\Supermium\BlBeacon|state RegKey3=HKCU\Software\Supermium\Installer|LastChecked RegKey4=HKCU\Software\Supermium\StabilityMetrics Tags=ccapps ID=Supermium Telemetry * Author=Winapp2.ini Project [Supermium Web Browsing Cookies *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Supermium Web Browsing Cookies * Author=Winapp2.ini Project [Supermium Web Browsing History *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Supermium Web Browsing History * Author=Winapp2.ini Project [Supermium Web Browsing Session *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Supermium\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Supermium Web Browsing Session * Author=Winapp2.ini Project [Supermium Web Storage *] DetectFile=%LocalAppData%\Supermium\User Data FileKey1=%LocalAppData%\Supermium\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Supermium\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Supermium\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Supermium\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Supermium\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Supermium\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Supermium\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Supermium\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Supermium Web Storage * Author=Winapp2.ini Project [SuperMP3Download *] DetectFile=%ProgramFiles%\SuperMp3Download FileKey1=%ProgramData%\SuperMP3Download|downloadlist.sav FileKey2=%ProgramData%\SuperMP3Download\Downloading|*|RECURSE Tags=ccmedia ID=SuperMP3Download * Author=Winapp2.ini Project [Superstar Racing *] DetectFile=%LocalAppData%\Chat Republic Games\Superstar Racing FileKey1=%LocalAppData%\Chat Republic Games\Superstar Racing|log*.* Tags=ccapps ID=Superstar Racing * Author=Winapp2.ini Project [SuperSync *] DetectFile=%AppData%\SuperSync FileKey1=%AppData%\SuperSync\logs|* FileKey2=%AppData%\SuperSync\tmp|*|RECURSE Tags=ccmedia ID=SuperSync * Author=Winapp2.ini Project [SuperWinMenu *] DetectFile=%AppData%\SuperWinMenu FileKey1=%AppData%\SuperWinMenu|*.lastused Tags=ccutil ID=SuperWinMenu * Author=Winapp2.ini Project [Surfshark VPN *] DetectFile=%AppData%\Surfshark FileKey1=%AppData%\Surfshark|*.log FileKey2=%LocalAppData%\Surfshark\EventsCache|*|RECURSE FileKey3=%ProgramData%\Surfshark|*.log FileKey4=%ProgramData%\Surfshark\EventsCache|*|RECURSE Tags=ccinternet ID=Surfshark VPN * Author=Winapp2.ini Project [SuuntoLink *] DetectFile=%AppData%\SuuntoLink FileKey1=%AppData%\SuuntoLink|*.dmp;*.log FileKey2=%AppData%\SuuntoLink\*Cache|* FileKey3=%AppData%\SuuntoLink\Feedback|*.dmp;*.log FileKey4=%AppData%\SuuntoLink\Logs|* FileKey5=%AppData%\SuuntoLink\webrtc_event_logs|* FileKey6=%LocalAppData%\SuuntoLink|*.log|RECURSE Tags=ccutil ID=SuuntoLink * Author=Winapp2.ini Project [Swiff Player *] Detect=HKCU\Software\GlobFX Technologies\Swiff Player RegKey1=HKCU\Software\GlobFX Technologies\Swiff Player\Recent File List Tags=ccmedia ID=Swiff Player * Author=Winapp2.ini Project [Swift *] Detect=HKCU\Software\Swift FileKey1=%AppData%\Swift\Avatars|*|RECURSE FileKey2=%AppData%\Swift\Crashes|*|RECURSE Tags=ccinternet ID=Swift * Author=Winapp2.ini Project [Syberfix Helpdesk *] DetectFile=%LocalAppData%\Syberfix\UserSaved\Helpdesk* FileKey1=%LocalAppData%\SyberFix\UserSaved\Helpdesk *|*.log Tags=ccapps ID=Syberfix Helpdesk * Author=Winapp2.ini Project [Sylpheed *] DetectFile=%AppData%\Sylpheed FileKey1=%AppData%\Sylpheed|*.bak*;*.log Tags=ccinternet ID=Sylpheed * Author=Winapp2.ini Project [Symantec Ghost *] Detect=HKCU\Software\Symantec\Symantec Ghost RegKey1=HKCU\Software\Symantec\Symantec Ghost\Explorer\Ghost Explorer\Recent File List Tags=ccutil ID=Symantec Ghost * Author=Winapp2.ini Project [Symantec SymSilent *] DetectFile=%Public%\Symantec\SymSilent FileKey1=%Public%\Symantec\SymSilent\ccLog|* Tags=ccutil ID=Symantec SymSilent * Author=Winapp2.ini Project [SyncBackFree *] Detect=HKCU\Software\2BrightSparks\SyncBackFree FileKey1=%LocalAppData%\2BrightSparks\SyncBackFree\Logs|* Tags=ccutil ID=SyncBackFree * Author=Winapp2.ini Project [Synchronize It! *] Detect=HKCU\Software\grigsoft.com\Synchronize It! RegKey1=HKCU\Software\grigsoft.com\Synchronize It!\Combos RegKey2=HKCU\Software\grigsoft.com\Synchronize It!\Synchronize It!\Combos Tags=ccapps ID=Synchronize It! * Author=Winapp2.ini Project [Syncovery *] Detect=HKCU\Software\Syncovery FileKey1=%ProgramData%\Syncovery\Logs|*.log|RECURSE Tags=ccutil ID=Syncovery * Author=Winapp2.ini Project [Syncthing *] DetectFile=%LocalAppData%\Syncthing FileKey1=%LocalAppData%\Syncthing|*.log;*.xml.v* FileKey2=%ProgramFiles%\Syncthing|*.old Tags=ccinternet ID=Syncthing * Author=Winapp2.ini Project [SyncTrayzor *] DetectFile=%AppData%\SyncTrayzor FileKey1=%AppData%\SyncTrayzor|*.old FileKey2=%AppData%\SyncTrayzor\logs|*|REMOVESELF Tags=ccinternet ID=SyncTrayzor * Author=Winapp2.ini Project [Synthesia *] Detect=HKCU\Software\Classes\synthesia FileKey1=%AppData%\Synthesia|log*.txt;recentSongs.xml Tags=ccapps ID=Synthesia * Author=Winapp2.ini Project [Sysinternals DebugView *] Detect=HKCU\Software\Sysinternals\DbgView RegKey1=HKCU\Software\Sysinternals\DbgView|Recent Tags=ccutil ID=Sysinternals DebugView * Author=Winapp2.ini Project [Sysinternals Process Explorer *] Detect1=HKCU\Software\Sysinternals\Process Explorer Detect2=HKU\.DEFAULT\Software\Sysinternals\Process Explorer Detect3=HKU\S-1-5-18\Software\Sysinternals\Process Explorer RegKey1=HKCU\Software\Sysinternals\Process Explorer|SymbolPath RegKey2=HKU\.DEFAULT\Software\Sysinternals\Process Explorer|SymbolPath RegKey3=HKU\S-1-5-18\Software\Sysinternals\Process Explorer|SymbolPath Tags=ccutil ID=Sysinternals Process Explorer * Author=Winapp2.ini Project [Sysinternals Process Monitor *] Detect=HKCU\Software\Sysinternals\Process Monitor RegKey1=HKCU\Software\Sysinternals\Process Monitor|Logfile RegKey2=HKCU\Software\Sysinternals\Process Monitor|SourcePath Tags=ccutil ID=Sysinternals Process Monitor * Author=Winapp2.ini Project [Sysinternals VMMap *] Detect=HKCU\Software\Sysinternals\VMMap RegKey1=HKCU\Software\Sysinternals\VMMap|SourcePath Tags=ccutil ID=Sysinternals VMMap * Author=Winapp2.ini Project [Sysinternals ZoomIt *] Detect=HKCU\Software\Sysinternals\ZoomIt RegKey1=HKCU\Software\Sysinternals\ZoomIt|FilePath Tags=ccutil ID=Sysinternals ZoomIt * Author=Winapp2.ini Project [System Driver Installation Files *] DetectFile=%SystemDrive%\Drivers FileKey1=%SystemDrive%\Drivers|*|REMOVESELF Tags=ccwindows ID=System Driver Installation Files * Author=Winapp2.ini Project [System Explorer *] DetectFile=%ProgramFiles%\System Explorer FileKey1=%ProgramData%\SystemExplorer\snapshots|*.ses Tags=ccutil ID=System Explorer * Author=Winapp2.ini Project [System Mechanic *] Detect=HKCU\Software\iolo\System Mechanic FileKey1=%AppData%\iolo\SafetyNet\Temp|* FileKey2=%AppData%\iolo\System Snapshots Data|* FileKey3=%AppData%\ioloGovernor\logs|*|REMOVESELF FileKey4=%ProgramData%\iolo|*.txt;*.xml FileKey5=%ProgramData%\Iolo Technologies\Logs|* FileKey6=%ProgramData%\iolo\ACRSummaryFiles|*|REMOVESELF FileKey7=%ProgramData%\iolo\logs|*|REMOVESELF FileKey8=%ProgramData%\iolo\TempResources|*|REMOVESELF FileKey9=%ProgramFiles%\iolo\System Mechanic|*.txt;*.xml FileKey10=%SystemDrive%\Documents and Settings\LocalService\*\iolo|*|REMOVESELF FileKey11=%WinDir%\System32\config|iolo App.evt Tags=ccutil ID=System Mechanic * Author=Winapp2.ini Project [System Tray Cleaner *] Detect=HKCU\Software\Innovative Solutions\System Tray Cleaner DetectFile=%ProgramFiles%\Innovative Solutions\System Tray Cleaner FileKey1=%LocalAppData%\Innovative Solutions\System Tray Cleaner\Process_information_cache|* FileKey2=%ProgramFiles%\Innovative Solutions\System Tray Cleaner\Process_information_database|*.iscrt RegKey1=HKCU\Software\Innovative Solutions\System Tray Cleaner\TrayApplications Tags=ccutil ID=System Tray Cleaner * Author=Winapp2.ini Project [SystemScheduler *] DetectFile=%ProgramFiles%\SystemScheduler FileKey1=%ProgramFiles%\SystemScheduler|LogFile.TXT FileKey2=%ProgramFiles%\SystemScheduler\Events|* Tags=ccutil ID=SystemScheduler * Author=Winapp2.ini Project [SystemTools Exporter *] Detect=HKCU\Software\SystemTools\Exporter RegKey1=HKCU\Software\SystemTools\Exporter\Recent File List Tags=ccutil ID=SystemTools Exporter * Author=Winapp2.ini Project [SysTools AD Browser *] DetectFile=%ProgramFiles%\SysTools AD Browser FileKey1=%ProgramFiles%\SysTools AD Browser|Setup Log*.txt Tags=ccutil ID=SysTools AD Browser * Author=Winapp2.ini Project [SysTools PDF Unlocker *] DetectFile=%ProgramFiles%\SysTools PDF Unlocker FileKey1=%ProgramFiles%\SysTools PDF Unlocker|*.log;Setup Log*.txt Tags=ccapps ID=SysTools PDF Unlocker * Author=Winapp2.ini Project [SysTracer *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SysTracer FileKey1=%ProgramFiles%\SysTracer|SysTracerLog.txt FileKey2=%ProgramFiles%\SysTracer\tmp|*|REMOVESELF Tags=ccutil ID=SysTracer * Author=Winapp2.ini Project [Systweak Advanced PC Cleanup *] Detect=HKCU\Software\Systweak\Advanced PC Cleanup DetectFile=%ProgramFiles%\Advanced PC Cleanup FileKey1=%AppData%\Advanced PC Cleanup|*Log.txt FileKey2=%ProgramFiles%\Advanced PC Cleanup|*log.txt Tags=ccutil ID=Systweak Advanced PC Cleanup * Author=Winapp2.ini Project [Systweak Advanced System Optimizer 3 *] Detect=HKLM\Software\Systweak\ASO3 DetectFile=%ProgramFiles%\Advanced System Optimizer 3 FileKey1=%AppData%\Systweak\ASO3\Driver Updater|*.log FileKey2=%AppData%\Systweak\ASO3\Registry Cleaner|*.log Tags=ccutil ID=Systweak Advanced System Optimizer 3 * Author=Winapp2.ini Project [Systweak Advanced System Protector *] Detect=HKCU\Software\Systweak\Advanced System Protector DetectFile=%ProgramFiles%\Advanced System Protector FileKey1=%AppData%\Systweak\Advanced System Protector|*.log;*log.txt|RECURSE FileKey2=%AppData%\Systweak\Advanced System Protector\Logs|*.xml Tags=ccutil ID=Systweak Advanced System Protector * Author=Winapp2.ini Project [Systweak RegClean Pro *] Detect=HKCU\Software\Systweak\RegClean Pro DetectFile=%AppData%\Systweak\RegClean Pro FileKey1=%AppData%\Systweak\RegClean Pro\Version*|*.log;backup*.bin FileKey2=%AppData%\Systweak\RegClean Pro\Version*\update|* FileKey3=%ProgramFiles%\RCP|*log.txt Tags=ccutil ID=Systweak RegClean Pro * Author=Winapp2.ini Project [Tag&Rename *] Detect1=HKCU\Software\Softpointer\Tag&Rename Detect2=HKCU\Software\Softpointer\Tag&Rename2 Detect3=HKCU\Software\Softpointer\Tag&Rename3 RegKey1=HKCU\Software\Softpointer\Tag&Rename\Config|FCurrentFolder RegKey2=HKCU\Software\Softpointer\Tag&Rename\Config|FHistoryList RegKey3=HKCU\Software\Softpointer\Tag&Rename2\Config|FCurrentFolder RegKey4=HKCU\Software\Softpointer\Tag&Rename2\Config|FHistoryList RegKey5=HKCU\Software\Softpointer\Tag&Rename3\Config|FCurrentFolder RegKey6=HKCU\Software\Softpointer\Tag&Rename3\Config|FHistoryList RegKey7=HKCU\Software\Softpointer\Tag&Rename3\Config|FileListHeader Tags=ccutil ID=Tag&Rename * Author=Winapp2.ini Project [Task ForceQuit Pro *] DetectFile=%ProgramData%\Softorino\Task ForceQuit Pro* FileKey1=%ProgramData%\Softorino\Task ForceQuit Pro*\Logs|* FileKey2=%ProgramData%\Softorino\Task ForceQuit Pro*\Update|* Tags=ccutil ID=Task ForceQuit Pro * Author=Winapp2.ini Project [TAudio Converter *] DetectFile=%AppData%\TAC FileKey1=%AppData%\TAC|log_main.txt Tags=ccmedia ID=TAudio Converter * Author=Winapp2.ini Project [TDIMon *] Detect=HKCU\Software\Systems Internals\Tdimon RegKey1=HKCU\Software\Systems Internals\Tdimon|Recent Tags=ccutil ID=TDIMon * Author=Winapp2.ini Project [Team Fortress 2 *] Detect=HKCU\Software\Valve\Steam\Apps\440 FileKey1=%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\config\cookies|*|RECURSE FileKey2=%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\config\html\AppCache|*|RECURSE FileKey3=%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\tf\cache|*|RECURSE FileKey4=%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\tf\download\user_custom|*|RECURSE FileKey5=%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\tf\materials\temp|*.vtf|RECURSE Tags=ccapps ID=Team Fortress 2 * Author=Winapp2.ini Project [TeamLink *] DetectFile=%AppData%\Team*Link FileKey1=%AppData%\Team-Link|*-journal;*.old;LOG;Network Persistent State;QuotaManager;Visited Links|RECURSE FileKey2=%AppData%\Team-Link\*Cache|*|RECURSE FileKey3=%AppData%\Team-Link\blob_storage|*|RECURSE FileKey4=%AppData%\TeamLink\Logs|* FileKey5=%LocalAppData%\Team-Link-Updater|installer.exe Tags=ccinternet ID=TeamLink * Author=Winapp2.ini Project [TeamSpeak 3 *] Detect=HKCU\Software\TeamSpeak 3 Client FileKey1=%LocalAppData%\TeamSpeak 3 Client\config\logs|* FileKey2=%ProgramFiles%\TeamSpeak 3 Client\config\logs|* Tags=ccinternet ID=TeamSpeak 3 * Author=Winapp2.ini Project [TeamSpeak 3 Chats *] Detect=HKCU\Software\TeamSpeak 3 Client FileKey1=%AppData%\TS3Client\chats|*|REMOVESELF Tags=ccinternet ID=TeamSpeak 3 Chats * Author=Winapp2.ini Project [TeamViewer *] Detect=HKCU\Software\TeamViewer DetectFile1=%AppData%\TeamViewer DetectFile2=%ProgramFiles%\TeamViewer\Version* FileKey1=%AppData%\TeamViewer|*.log;*.mdmp FileKey2=%LocalAppData%\TeamViewer\*Cache|*|RECURSE FileKey3=%LocalAppData%\TeamViewer\Database|tvchatfilecache.db FileKey4=%ProgramFiles%\TeamViewer|*.log;*.tmp;Connections_incoming.txt|RECURSE FileKey5=%ProgramFiles%\TeamViewer\Version*|*.log FileKey6=%WinDir%\System32|TeamViewer*_Hooks.log RegKey1=HKCU\Software\TeamViewer\Version5|Last_Machine_Connections RegKey2=HKCU\Software\TeamViewer\Version5.1|Last_Machine_Connections RegKey3=HKCU\Software\TeamViewer\Version6|Last_Machine_Connections RegKey4=HKCU\Software\TeamViewer\Version7|Last_Machine_Connections RegKey5=HKCU\Software\TeamViewer\Version8|Last_Machine_Connections RegKey6=HKCU\Software\TeamViewer\Version9|Last_Machine_Connections Tags=ccutil ID=TeamViewer * Author=Winapp2.ini Project [Technic Launcher *] DetectFile=%AppData%\.technic* FileKey1=%AppData%\.technic*|*.log;*.old;*.tmp|RECURSE FileKey2=%AppData%\.technic*\*\logs|*|RECURSE FileKey3=%AppData%\.technic*\cache|* FileKey4=%AppData%\.technic*\temp|*|RECURSE Tags=ccapps ID=Technic Launcher * Author=Winapp2.ini Project [Technic Launcher Backups *] DetectFile=%AppData%\.technic* FileKey1=%AppData%\.technic*\*\Backups|*|RECURSE Tags=ccapps ID=Technic Launcher Backups * Author=Winapp2.ini Project [TechSmith DubIt *] Detect=HKCU\Software\TechSmith\DubIt FileKey1=%ProgramFiles%\TechSmith\DubIt|*.gid RegKey1=HKCU\Software\TechSmith\DubIt\Recent Audio Files RegKey2=HKCU\Software\TechSmith\DubIt\Recent Video Files Tags=ccmedia ID=TechSmith DubIt * Author=Winapp2.ini Project [TEdit *] DetectFile=%AppData%\TEdit FileKey1=%AppData%\TEdit\undo|*|RECURSE Tags=ccapps ID=TEdit * Author=Winapp2.ini Project [Teeworlds *] DetectFile=%AppData%\Teeworlds FileKey1=%AppData%\Teeworlds\dumps|*|REMOVESELF FileKey2=%AppData%\Teeworlds\tmp|*|REMOVESELF Tags=ccapps ID=Teeworlds * Author=Winapp2.ini Project [Teeworlds Downloads/Maps *] DetectFile=%AppData%\Teeworlds FileKey1=%AppData%\Teeworlds\downloaded*|*|REMOVESELF FileKey2=%AppData%\Teeworlds\maps|*|REMOVESELF Tags=ccapps ID=Teeworlds Downloads/Maps * Author=Winapp2.ini Project [Telegram Desktop *] DetectFile1=%AppData%\Telegram Desktop DetectFile2=%ProgramFiles%\Telegram Desktop FileKey1=%AppData%\Telegram Desktop|log*.txt FileKey2=%AppData%\Telegram Desktop\tdata\dumps|*.dmp FileKey3=%AppData%\Telegram Desktop\tdata\User_Data\*Cache|*|RECURSE FileKey4=%AppData%\Telegram Desktop\tupdates\Temp|*|RECURSE FileKey5=%ProgramFiles%\Telegram Desktop|log*.txt FileKey6=%ProgramFiles%\Telegram Desktop\tdata\dumps|*.dmp FileKey7=%ProgramFiles%\Telegram Desktop\tdata\User_Data\*Cache|*|RECURSE FileKey8=%ProgramFiles%\Telegram Desktop\tupdates\Temp|*|RECURSE Tags=ccinternet ID=Telegram Desktop * Author=Winapp2.ini Project [Telerik Fiddler Everywhere *] DetectFile=%AppData%\Fiddler Everywhere FileKey1=%AppData%\Fiddler Everywhere\Logs|* Tags=ccutil ID=Telerik Fiddler Everywhere * Author=Winapp2.ini Project [Tencent AndroidServer *] DetectFile=%AppData%\Tencent\AndroidServer FileKey1=%AppData%\Tencent\AndroidServer|*.log.xml Tags=ccapps ID=Tencent AndroidServer * Author=Winapp2.ini Project [Tencent QQ *] DetectFile=%UserProfile%\Documents\Tencent Files FileKey1=%ProgramData%\Tencent Files\QQ\Misc|*|RECURSE FileKey2=%UserProfile%\Documents\Tencent Files|*|RECURSE Tags=ccinternet ID=Tencent QQ * Author=Winapp2.ini Project [Tencent WeChat *] DetectFile1=%AppData%\Tencent\WeChat DetectFile2=%LocalAppData%\Tencent\BrowsingService FileKey1=%AppData%\Tencent\Logs|* FileKey2=%AppData%\Tencent\WeChat\bak|* FileKey3=%AppData%\Tencent\WeChat\Log|*|RECURSE FileKey4=%LocalAppData%\Tencent\BrowsingService\TGB_Market|*.log FileKey5=%LocalAppData%\Tencent\BrowsingService\unkwown|*.log FileKey6=%LocalAppData%\Tencent\BrowsingService\wechat|*.log Tags=ccinternet ID=Tencent WeChat * Author=Winapp2.ini Project [Tencent WeChat Work *] Detect=HKCU\Software\Tencent\WXWork FileKey1=%AppData%\Tencent\WXWork\Data\*\Cache\File\*|MEMORY.DMP FileKey2=%AppData%\Tencent\WXWork\Data\*\Cache\Image\*|WXWorkCapture_*.jpg FileKey3=%AppData%\Tencent\WXWork\Log|*|RECURSE Tags=ccinternet ID=Tencent WeChat Work * Author=Winapp2.ini Project [TeraCopy *] Detect=HKCU\Software\Code Sector\TeraCopy FileKey1=%AppData%\TeraCopy|FileList.dat;Transfer.log FileKey2=%AppData%\TeraCopy\History|* FileKey3=%ProgramFiles%\TeraCopy|FileList.dat;Transfer.log RegKey1=HKCU\Software\Code Sector\TeraCopy|LastTargetFolder Tags=ccutil ID=TeraCopy * Author=Winapp2.ini Project [Terasology *] DetectFile=%AppData%\.terasology FileKey1=%AppData%\.terasology|*.log FileKey2=%AppData%\.terasology\logs|*|REMOVESELF Tags=ccapps ID=Terasology * Author=Winapp2.ini Project [Terminal Studio *] DetectFile=%AppData%\Terminal Studio FileKey1=%AppData%\Terminal Studio|*Log.txt Tags=ccmedia ID=Terminal Studio * Author=Winapp2.ini Project [Terraria *] Detect=HKCU\Software\Valve\Steam\Apps\105600 FileKey1=%ProgramFiles%\Steam\steamapps\common\terraria|client-crashlog.txt FileKey2=%UserProfile%\Documents\My Games\Terraria|*.bak|RECURSE Tags=ccapps ID=Terraria * Author=Winapp2.ini Project [Tesla Legacy *] DetectFile=%LocalAppData%\Astar Games\Tesla Legacy FileKey1=%LocalAppData%\Astar Games\Tesla Legacy|*.log Tags=ccapps ID=Tesla Legacy * Author=Winapp2.ini Project [TeXnicCenter *] Detect1=HKCU\Software\ToolsCenter\TeXnicCenter Detect2=HKCU\Software\ToolsCenter\TeXnicCenterNT RegKey1=HKCU\Software\ToolsCenter\TeXnicCenter\Recent File List RegKey2=HKCU\Software\ToolsCenter\TeXnicCenter\Recent Project List RegKey3=HKCU\Software\ToolsCenter\TeXnicCenter\Session RegKey4=HKCU\Software\ToolsCenter\TeXnicCenter\Settings\Options|LastOpenedFolder RegKey5=HKCU\Software\ToolsCenter\TeXnicCenterNT\Recent File List RegKey6=HKCU\Software\ToolsCenter\TeXnicCenterNT\Recent Project List RegKey7=HKCU\Software\ToolsCenter\TeXnicCenterNT\Session RegKey8=HKCU\Software\ToolsCenter\TeXnicCenterNT\Settings\Options|LastOpenedFolder Tags=ccapps ID=TeXnicCenter * Author=Winapp2.ini Project [TGCM *] DetectFile=%AppData%\TGCMLog FileKey1=%AppData%\TGCMLog|*log.txt Tags=ccmedia ID=TGCM * Author=Winapp2.ini Project [TGRMN Software Bulk Rename Utility *] Detect=HKCU\Software\TGRMN Software\Bulk Rename Utility RegKey1=HKCU\Software\TGRMN Software\Bulk Rename Utility\Recent File List RegKey2=HKCU\Software\TGRMN Software\Bulk Rename Utility\Settings|last_path_selected Tags=ccutil ID=TGRMN Software Bulk Rename Utility * Author=Winapp2.ini Project [The Bat *] Detect=HKCU\Software\RIT\The Bat! FileKey1=%AppData%\The Bat!\cache|* Tags=ccinternet ID=The Bat * Author=Winapp2.ini Project [The Binding of Isaac *] DetectFile=%UserProfile%\Documents\My Games\Binding of Isaac* FileKey1=%UserProfile%\Documents\My Games\Binding of Isaac*|*.dmp;isaacv*.txt;log.txt Tags=ccapps ID=The Binding of Isaac * Author=Winapp2.ini Project [The Clumsys 2: The Butterfly Effect *] DetectFile=%LocalAppData%\BanzaiInteractive\Clumsys2 FileKey1=%AppData%\BanzaiInteractive\Clumsys2|logfile.txt Tags=ccapps ID=The Clumsys 2: The Butterfly Effect * Author=Winapp2.ini Project [The Creative Assembly Launcher *] DetectFile=%AppData%\The Creative Assembly\Launcher FileKey1=%AppData%\The Creative Assembly\Launcher|*.log;*_logs.txt FileKey2=%AppData%\The Creative Assembly\Launcher\electron|*.old;LOG|RECURSE FileKey3=%AppData%\The Creative Assembly\Launcher\electron\Cache|* FileKey4=%AppData%\The Creative Assembly\Launcher\electron\Service Worker\*Cache*|*|RECURSE FileKey5=%AppData%\The Creative Assembly\Launcher\Logs|* Tags=ccapps ID=The Creative Assembly Launcher * Author=Winapp2.ini Project [The Da Vinci Code *] DetectFile=%ProgramFiles%\2K Games\The Da Vinci Code FileKey1=%ProgramFiles%\2K Games\The Da Vinci Code\_bin|*.log Tags=ccapps ID=The Da Vinci Code * Author=Winapp2.ini Project [The Dream Machine *] Detect=HKCU\Software\Valve\Steam\Apps\94300 FileKey1=%ProgramFiles%\Steam\steamapps\common\The Dream Machine\the_dream_machine.app|*|REMOVESELF Tags=ccapps ID=The Dream Machine * Author=Winapp2.ini Project [The Elder Scrolls Online *] DetectFile=%UserProfile%\Documents\Elder Scrolls Online FileKey1=%UserProfile%\Documents\Elder Scrolls Online\Errors|* FileKey2=%UserProfile%\Documents\Elder Scrolls Online\Logs|* Tags=ccapps ID=The Elder Scrolls Online * Author=Winapp2.ini Project [The Lord of the Rings Online Launcher *] DetectFile=%LocalAppData%\Turbine\The Lord of the Rings Online\Launcher FileKey1=%LocalAppData%\The Lord Of The Rings Online|*.log FileKey2=%LocalAppData%\Turbine|*.log|RECURSE Tags=ccapps ID=The Lord of the Rings Online Launcher * Author=Winapp2.ini Project [The Mighty Quest for Epic Loot *] Detect=HKCU\Software\Valve\Steam\Apps\239220 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\The Mighty Quest For Epic Loot\CrashReport|* FileKey2=%ProgramFiles%\Steam\SteamApps\Common\The Mighty Quest For Epic Loot\Log|* Tags=ccapps ID=The Mighty Quest for Epic Loot * Author=Winapp2.ini Project [The Mystery of the Mary Celeste *] DetectFile=%AppData%\Merscom\The Mystery of the Mary Celeste FileKey1=%AppData%\Merscom\The Mystery of the Mary Celeste|logfile.txt Tags=ccapps ID=The Mystery of the Mary Celeste * Author=Winapp2.ini Project [The Outer Worlds *] DetectFile=%LocalAppData%\Indiana FileKey1=%LocalAppData%\Indiana\Saved\Logs|* Tags=ccapps ID=The Outer Worlds * Author=Winapp2.ini Project [The Rise of Atlantis *] DetectFile1=%ProgramData%\Playrix Entertainment\The Rise of Atlantis DetectFile2=%ProgramData%\TERMINAL Studio\The Rise of Atlantis FileKey1=%ProgramData%\Playrix Entertainment\The Rise of Atlantis|log.htm* FileKey2=%ProgramData%\Terminal Studio\The Rise of Atlantis|log.htm* Tags=ccapps ID=The Rise of Atlantis * Author=Winapp2.ini Project [The SemWare Editor Professional *] DetectFile=%SystemDrive%\TSEPro FileKey1=%SystemDrive%\TSEPro|tsefiles.dat;tsehist.dat Tags=ccutil ID=The SemWare Editor Professional * Author=Winapp2.ini Project [The Sims 3 *] Detect=HKCU\Software\Electronic Arts\Sims 3 FileKey1=%UserProfile%\Documents\Electronic Arts\The Sims 3|*.log;*.mdmp;xcpt*.txt|RECURSE Tags=ccapps ID=The Sims 3 * Author=Winapp2.ini Project [The Sims 3 Cache *] Detect=HKCU\Software\Electronic Arts\Sims 3 FileKey1=%UserProfile%\Documents\Electronic Arts\The Sims 3|CASPartCache.package;compositorCache.package;scriptCache.package;simCompositorCache.package;socialCache.package FileKey2=%UserProfile%\Documents\Electronic Arts\The Sims 3\Thumbnails|* FileKey3=%UserProfile%\Documents\Electronic Arts\The Sims 3\WorldCaches|* Tags=ccapps ID=The Sims 3 Cache * Author=Winapp2.ini Project [The Sims 3 DCBackup *] Detect=HKCU\Software\Electronic Arts\Sims 3 FileKey1=%UserProfile%\Documents\Electronic arts\The sims 3\DCBackup|*.package ExcludeKey1=FILE|%UserProfile%\Documents\electronic arts\The sims 3\DCBackup\|ccmerged.package Tags=ccapps ID=The Sims 3 DCBackup * Author=Winapp2.ini Project [The Sims 4 *] DetectFile=%UserProfile%\Documents\Electronic Arts\The Sims 4 FileKey1=%UserProfile%\Documents\Electronic Arts\The Sims 4|*.log;*.txt Tags=ccapps ID=The Sims 4 * Author=Winapp2.ini Project [The Sims Medieval *] Detect=HKLM\Software\Electronic Arts\The Sims Medieval FileKey1=%UserProfile%\Documents\Electronic Arts\The Sims Medieval|*.log;*.xml|RECURSE Tags=ccapps ID=The Sims Medieval * Author=Winapp2.ini Project [The Surge *] Detect=HKCU\Software\Valve\Steam\Apps\378540 FileKey1=%UserProfile%\Documents\The Surge\logs|*.txt Tags=ccapps ID=The Surge * Author=Winapp2.ini Project [The Swords of Ditto *] DetectFile=%LocalAppData%\The_Swords_of_Ditto FileKey1=%LocalAppData%\The_Swords_of_Ditto|*.log Tags=ccapps ID=The Swords of Ditto * Author=Winapp2.ini Project [The Talos Principle *] Detect=HKCU\Software\Valve\Steam\Apps\257510 FileKey1=%ProgramFiles%\Steam\steamapps\common\The Talos Principle\Log|*|RECURSE Tags=ccapps ID=The Talos Principle * Author=Winapp2.ini Project [The Tiny Bang Story *] Detect=HKCU\Software\Valve\Steam\Apps\96000 FileKey1=%AppData%\Colibri Games\The Tiny Bang Story|logfile.txt Tags=ccapps ID=The Tiny Bang Story * Author=Winapp2.ini Project [The Witcher *] DetectFile=%LocalAppData%\The Witcher* FileKey1=%LocalAppData%\The Witcher*\Logs|* FileKey2=%LocalAppData%\The Witcher*\Temp|*|RECURSE Tags=ccapps ID=The Witcher * Author=Winapp2.ini Project [The Witcher 3 Backups *] Detect=HKCU\Software\Valve\Steam\Apps\292030 FileKey1=%UserProfile%\Documents\The Witcher 3|*.bak Tags=ccapps ID=The Witcher 3 Backups * Author=Winapp2.ini Project [Thomas Was Alone *] Detect=HKCU\Software\Valve\Steam\Apps\220780 FileKey1=%ProgramFiles%\Steam\Steamapps\common\thomaswasalone\ThomasWasAlone_Data|output_log.txt Tags=ccapps ID=Thomas Was Alone * Author=Winapp2.ini Project [Thorium Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|*Web Data FileKey2=%LocalAppData%\Thorium\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Thorium\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Thorium Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Thorium Autoplay Preferences *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Thorium Autoplay Preferences * Author=Winapp2.ini Project [Thorium Bookmark Backups *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|Bookmarks.bak Tags=ccapps ID=Thorium Bookmark Backups * Author=Winapp2.ini Project [Thorium Bookmark Favicons *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|favicons* Tags=ccapps ID=Thorium Bookmark Favicons * Author=Winapp2.ini Project [Thorium Caches *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Thorium\User Data|Module Info Cache FileKey3=%LocalAppData%\Thorium\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Thorium\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Thorium\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Thorium\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Thorium\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Thorium\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Thorium\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Thorium\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Thorium\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Thorium\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Thorium\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Thorium\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Thorium\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Thorium\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Thorium\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Thorium\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Thorium\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Thorium Caches * Author=Winapp2.ini Project [Thorium Default App Handlers *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|PreferredApps Tags=ccapps ID=Thorium Default App Handlers * Author=Winapp2.ini Project [Thorium Download History *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Thorium\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Thorium Download History * Author=Winapp2.ini Project [Thorium DRM Data *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Thorium\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Thorium DRM Data * Author=Winapp2.ini Project [Thorium Extension Cookies *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|Extension Cookies Tags=ccapps ID=Thorium Extension Cookies * Author=Winapp2.ini Project [Thorium Pinned Tabs *] DetectFile=%LocalAppData%\Thorium\User Data RegKey1=HKCU\Software\Thorium\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Thorium Pinned Tabs * Author=Winapp2.ini Project [Thorium Privacy Sandbox *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data|*first_party_sets* FileKey2=%LocalAppData%\Thorium\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Thorium\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Thorium\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Thorium\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Thorium\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Thorium\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Thorium\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Thorium Privacy Sandbox * Author=Winapp2.ini Project [Thorium Progressive Web Apps *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Thorium Progressive Web Apps * Author=Winapp2.ini Project [Thorium Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|Login Data* Tags=ccapps ID=Thorium Saved Usernames & Passwords * Author=Winapp2.ini Project [Thorium Security & Threat Detection *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|DIPS* FileKey2=%LocalAppData%\Thorium\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Thorium\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Thorium\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Thorium\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Thorium\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Thorium\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Thorium\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Thorium\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Thorium\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Thorium\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Thorium\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Thorium Security & Threat Detection * Author=Winapp2.ini Project [Thorium Shopping Insights *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Thorium\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Thorium\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Thorium\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Thorium\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Thorium Shopping Insights * Author=Winapp2.ini Project [Thorium Storage Quota Manager *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|QuotaManager Tags=ccapps ID=Thorium Storage Quota Manager * Author=Winapp2.ini Project [Thorium Sync Data *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Thorium Sync Data * Author=Winapp2.ini Project [Thorium Telemetry *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\Application|debug.log FileKey2=%LocalAppData%\Thorium\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Thorium\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Thorium\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Thorium\User Data\*|*.log FileKey6=%LocalAppData%\Thorium\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Thorium\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Thorium\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Thorium\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Thorium\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Thorium\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Thorium\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Thorium\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Thorium\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Thorium\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Thorium\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Thorium\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Thorium\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Thorium\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Thorium\Application|debug.log FileKey21=%ProgramFiles%\Thorium\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Thorium\BlBeacon|failed_count RegKey2=HKCU\Software\Thorium\BlBeacon|state RegKey3=HKCU\Software\Thorium\Installer|LastChecked RegKey4=HKCU\Software\Thorium\StabilityMetrics Tags=ccapps ID=Thorium Telemetry * Author=Winapp2.ini Project [Thorium Web Browsing Cookies *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Thorium Web Browsing Cookies * Author=Winapp2.ini Project [Thorium Web Browsing History *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Thorium Web Browsing History * Author=Winapp2.ini Project [Thorium Web Browsing Session *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Thorium\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Thorium Web Browsing Session * Author=Winapp2.ini Project [Thorium Web Storage *] DetectFile=%LocalAppData%\Thorium\User Data FileKey1=%LocalAppData%\Thorium\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Thorium\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Thorium\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Thorium\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Thorium\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Thorium\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Thorium\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Thorium\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Thorium Web Storage * Author=Winapp2.ini Project [ThumbsPlus *] Detect=HKCU\Software\Cerious Software Inc. FileKey1=%AppData%\Thumbsplus|*.7z;*.bak;*.dmp;*.exc;*.log;*.png FileKey2=%ProgramFiles%\Thumbsplus *\Bin|*.log Tags=ccmedia ID=ThumbsPlus * Author=Winapp2.ini Project [Thunderbird Autocomplete History *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|formhistory* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|formhistory* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|formhistory* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|formhistory* Tags=Thunderbird,Email ID=Thunderbird Autocomplete History * Author=Winapp2.ini Project [Thunderbird Autofill Data *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|autofill-profiles.json FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|autofill-profiles.json FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|autofill-profiles.json FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|autofill-profiles.json Tags=Thunderbird,Email ID=Thunderbird Autofill Data * Author=Winapp2.ini Project [Thunderbird Bookmark Backups *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*\bookmarkbackups|* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\bookmarkbackups|* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\bookmarkbackups|* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\bookmarkbackups|* Tags=Thunderbird,Email ID=Thunderbird Bookmark Backups * Author=Winapp2.ini Project [Thunderbird Bookmark Favicons *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|favicons* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|favicons* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|favicons* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|favicons* Tags=Thunderbird,Email ID=Thunderbird Bookmark Favicons * Author=Winapp2.ini Project [Thunderbird Caches *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Thunderbird\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Thunderbird\Profiles\*\notificationstore|* FileKey4=%AppData%\Thunderbird\Profiles\*\security_state|* FileKey5=%AppData%\Thunderbird\Profiles\*\shader-cache|* FileKey6=%AppData%\Thunderbird\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|*.corrupt|RECURSE FileKey8=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey9=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\*cache*|*|REMOVESELF FileKey10=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey11=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\notificationstore|* FileKey12=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\security_state|* FileKey13=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\shader-cache|* FileKey14=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\storage\temporary|*|RECURSE FileKey15=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\thumbnails|*|REMOVESELF FileKey16=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|*.corrupt|RECURSE FileKey17=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey18=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\*cache*|*|REMOVESELF FileKey19=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey20=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\notificationstore|* FileKey21=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\security_state|* FileKey22=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\shader-cache|* FileKey23=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\storage\temporary|*|RECURSE FileKey24=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\thumbnails|*|REMOVESELF FileKey25=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|*.corrupt|RECURSE FileKey26=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey27=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\*cache*|*|REMOVESELF FileKey28=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey29=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\notificationstore|* FileKey30=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\security_state|* FileKey31=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\shader-cache|* FileKey32=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\storage\temporary|*|RECURSE FileKey33=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\thumbnails|*|REMOVESELF FileKey34=%LocalAppData%\Thunderbird\Profiles\*\*cache*|*|REMOVESELF FileKey35=%LocalAppData%\Thunderbird\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey36=%LocalAppData%\Thunderbird\Profiles\*\thumbnails|*|REMOVESELF Tags=Thunderbird,Email ID=Thunderbird Caches * Author=Winapp2.ini Project [Thunderbird Privacy Sandbox *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|credentialstate.sqlite FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|credentialstate.sqlite FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|credentialstate.sqlite FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|credentialstate.sqlite Tags=Thunderbird,Email ID=Thunderbird Privacy Sandbox * Author=Winapp2.ini Project [Thunderbird Saved Usernames & Passwords *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|key4.db;logins.json FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|key4.db;logins.json FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|key4.db;logins.json FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|key4.db;logins.json Tags=Thunderbird,Email ID=Thunderbird Saved Usernames & Passwords * Author=Winapp2.ini Project [Thunderbird Synced Tabs *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|synced-tabs.db* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|synced-tabs.db* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|synced-tabs.db* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|synced-tabs.db* Tags=Thunderbird,Email ID=Thunderbird Synced Tabs * Author=Winapp2.ini Project [Thunderbird Telemetry *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird|*.log|RECURSE FileKey2=%AppData%\Thunderbird\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Thunderbird\Profiles\*\crashes|* FileKey4=%AppData%\Thunderbird\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Thunderbird\Profiles\*\minidumps|* FileKey6=%AppData%\Thunderbird\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Thunderbird\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Thunderbird\Profiles\*\weave\logs|* FileKey9=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird|*.log|RECURSE FileKey10=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey11=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\crashes|* FileKey12=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\datareporting|*|REMOVESELF FileKey13=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\minidumps|* FileKey14=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\saved-telemetry-pings|* FileKey15=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-logs|* FileKey16=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\weave\logs|* FileKey17=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird|*.log|RECURSE FileKey18=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey19=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\crashes|* FileKey20=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\datareporting|*|REMOVESELF FileKey21=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\minidumps|* FileKey22=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\saved-telemetry-pings|* FileKey23=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-logs|* FileKey24=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\weave\logs|* FileKey25=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird|*.log|RECURSE FileKey26=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey27=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\crashes|* FileKey28=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\datareporting|*|REMOVESELF FileKey29=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\minidumps|* FileKey30=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\saved-telemetry-pings|* FileKey31=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-logs|* FileKey32=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\weave\logs|* Tags=Thunderbird,Email ID=Thunderbird Telemetry * Author=Winapp2.ini Project [Thunderbird Web Browsing Cookies *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|cookies* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|cookies* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|cookies* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|cookies* Tags=Thunderbird,Email ID=Thunderbird Web Browsing Cookies * Author=Winapp2.ini Project [Thunderbird Web Browsing Session *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|session*.json* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|session*.json* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|session*.json* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|session*.json* Tags=Thunderbird,Email ID=Thunderbird Web Browsing Session * Author=Winapp2.ini Project [Thunderbird Web Browsing Session Backups *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*\sessionstore-backups|* FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-backups|* FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-backups|* FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*\sessionstore-backups|* Tags=Thunderbird,Email ID=Thunderbird Web Browsing Session Backups * Author=Winapp2.ini Project [Thunderbird Web Storage *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\storage\default\http*|*|REMOVESELF FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\storage\default\http*|*|REMOVESELF FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\storage\default\http*|*|REMOVESELF FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\storage\default\http*|*|REMOVESELF Tags=Thunderbird,Email ID=Thunderbird Web Storage * Author=Winapp2.ini Project [Thunderbird Website Permissions *] DetectFile1=%AppData%\Thunderbird\Profiles DetectFile2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles DetectFile4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles FileKey1=%AppData%\Thunderbird\Profiles\*|permissions.sqlite FileKey2=%LocalAppData%\Packages\MozillaThunderbird.MozillaThunderbirdRelease_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|permissions.sqlite FileKey3=%LocalAppData%\Packages\MozillaThunderbird.MZLA_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|permissions.sqlite FileKey4=%LocalAppData%\Packages\MozillaThunderbird.ThunderbirdBeta_h5892qc0xkpca\LocalCache\Roaming\Thunderbird\Profiles\*|permissions.sqlite Tags=Thunderbird,Email ID=Thunderbird Website Permissions * Author=Winapp2.ini Project [TI SmartView *] DetectFile=%UserProfile%\Documents\TI-SmartView* FileKey1=%UserProfile%\Documents\TI-SmartView*\logs|*|REMOVESELF Tags=ccapps ID=TI SmartView * Author=Winapp2.ini Project [TIDAL *] DetectFile=%AppData%\TIDAL FileKey1=%AppData%\TIDAL\*Cache|*|RECURSE FileKey2=%AppData%\TIDAL\CrashDumps|*|RECURSE FileKey3=%AppData%\TIDAL\Crashpad|*|RECURSE FileKey4=%AppData%\TIDAL\Logs|*|RECURSE FileKey5=%LocalAppData%\TIDAL|*.log FileKey6=%LocalAppData%\TIDAL\app-*|*.log Tags=ccmedia ID=TIDAL * Author=Winapp2.ini Project [TightVNC *] DetectFile=%AppData%\TightVNC FileKey1=%AppData%\TightVNC|*.log Tags=ccinternet ID=TightVNC * Author=Winapp2.ini Project [TikiOne Steam Cleaner *] DetectFile=%UserProfile%\.tikione FileKey1=%UserProfile%\.tikione\log|* Tags=ccutil ID=TikiOne Steam Cleaner * Author=Winapp2.ini Project [Time Adjuster *] Detect=HKCU\Software\IrekZielinskiSoft\TimeAdjuster FileKey1=%ProgramFiles%\TimeAdjuster|*.cnt RegKey1=HKCU\Software\IrekZielinskiSoft\TimeAdjuster|LDIR1 RegKey2=HKCU\Software\IrekZielinskiSoft\TimeAdjuster|LDIR2 RegKey3=HKCU\Software\IrekZielinskiSoft\TimeAdjuster|LDIR3 RegKey4=HKCU\Software\IrekZielinskiSoft\TimeAdjuster|LDIR4 Tags=ccapps ID=Time Adjuster * Author=Winapp2.ini Project [TimeRabbit *] DetectFile=%AppData%\TimeRabbit FileKey1=%AppData%\TimeRabbit\Cache|*|RECURSE Tags=ccinternet ID=TimeRabbit * Author=Winapp2.ini Project [Timeslips *] DetectFile=%ProgramFiles%\Timeslips FileKey1=%ProgramFiles%\TimeSlips\Data01\logs|* FileKey2=%ProgramFiles%\Timeslips\logs|* Tags=ccapps ID=Timeslips * Author=Winapp2.ini Project [Tinseltown Dreams *] DetectFile=%LocalAppData%\Namco Networks\Tinseltown Dreams FileKey1=%LocalAppData%\Namco Networks\Tinseltown Dreams|errors*.*;log.txt Tags=ccapps ID=Tinseltown Dreams * Author=Winapp2.ini Project [Tipard Total Media Converter *] Detect1=HKCU\Software\Tipard Studio\Tipard Total Media Converter Detect2=HKCU\Software\Tipard Studio\Tipard Total Media Converter Platinum FileKey1=%LocalAppData%\Tipard Studio\Tipard *|*.txt RegKey1=HKCU\Software\Tipard Studio\Tipard Total Media Converter Platinum\Edit|LastVideoFilePath RegKey2=HKCU\Software\Tipard Studio\Tipard Total Media Converter\Edit|LastVideoFilePath Tags=ccmedia ID=Tipard Total Media Converter * Author=Winapp2.ini Project [Tipard Video Converter *] Detect1=HKCU\Software\Tipard Studio\Tipard Video Converter Detect2=HKCU\Software\Tipard Studio\Tipard Video Converter Ultimate FileKey1=%LocalAppData%\Tipard Studio\Tipard *|*.txt RegKey1=HKCU\Software\Tipard Studio\Tipard Video Converter Ultimate\Edit|LastVideoFilePath RegKey2=HKCU\Software\Tipard Studio\Tipard Video Converter\Edit|LastVideoFilePath Tags=ccmedia ID=Tipard Video Converter * Author=Winapp2.ini Project [Titan Quest Anniversary Edition *] Detect=HKCU\Software\Valve\Steam\Apps\475150 DetectFile=%UserProfile%\Documents\My Games\Titan Quest - Immortal Throne FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Titan Quest Anniversary Edition\logs|* FileKey2=%UserProfile%\Documents\My Games\Titan Quest - Immortal Throne|log.* Tags=ccapps ID=Titan Quest Anniversary Edition * Author=Winapp2.ini Project [Tixati *] DetectFile=%AppData%\tixati FileKey1=%AppData%\tixati|*.dat.lastloadok.dat;upnp_diagnostic_log.txt Tags=ccapps ID=Tixati * Author=Winapp2.ini Project [Tixati Incomplete Pieces *] DetectFile=%AppData%\tixati FileKey1=%AppData%\tixati\incomplete-pieces|* Tags=ccapps ID=Tixati Incomplete Pieces * Author=Winapp2.ini Project [TK-Data *] DetectFile=%LocalAppData%\tkdata FileKey1=%LocalAppData%\tkdata|*-journal;*.old;ChromeDWriteFontCache;data_*;f_*;LOG;log.txt;QuotaManager;Visited Links|RECURSE FileKey2=%LocalAppData%\tkdata\GPUCache|* FileKey3=%LocalAppData%\tkdata\Logs|* Tags=ccapps ID=TK-Data * Author=Winapp2.ini Project [Tobit David *] Detect=HKCU\Software\Tobit FileKey1=%SystemDrive%\David\Apps\Dvgrab\Code|*.chk FileKey2=%SystemDrive%\David\Apps\Postman\Code|*.chk FileKey3=%SystemDrive%\David\Apps\Webbox\Code|*.log FileKey4=%SystemDrive%\David\Archive\SYSTEM\DAVID\Errlog|* FileKey5=%SystemDrive%\David\Archive\SYSTEM\pbxpense\log|* FileKey6=%SystemDrive%\David\Archive\USER\*\system\trash|* FileKey7=%SystemDrive%\David\Archive\USER\*\temp|* FileKey8=%SystemDrive%\David\Code|*.chk;*.log;*.old FileKey9=%SystemDrive%\David\Code\Database\MSSQL*DAVID\MSSQL\LOG|ERRORLOG*;FDLAUNCHERRORLOG*;log_*.trc;SQL*.LOG* FileKey10=%SystemDrive%\David\Code\Temp|* FileKey11=%SystemDrive%\David\Import\System|I*.001 FileKey12=%SystemDrive%\David\Tld\COMMON|*DAVID.LOG FileKey13=%SystemDrive%\David\Tld\Port\Extra|*.chk Tags=ccutil ID=Tobit David * Author=Winapp2.ini Project [Tom Clancy's Ghost Recon *] Detect=HKCU\Software\Valve\Steam\Apps\15300 DetectFile=%ProgramFiles%\Red Storm Entertainment\Ghost Recon FileKey1=%ProgramFiles%\Red Storm Entertainment\Ghost Recon|*.log FileKey2=%ProgramFiles%\Steam\SteamApps\Ghost Recon|*.log Tags=ccapps ID=Tom Clancy's Ghost Recon * Author=Winapp2.ini Project [Tom Clancy's Rainbow Six 3: Raven Shield *] Detect=HKCU\Software\Valve\Steam\Apps\19830 DetectFile=%ProgramFiles%\Red Storm Entertainment\RavenShield FileKey1=%ProgramFiles%\Red Storm Entertainment\RavenShield|*.log FileKey2=%ProgramFiles%\Steam\SteamApps\Common\RavenShield|*.log Tags=ccapps ID=Tom Clancy's Rainbow Six 3: Raven Shield * Author=Winapp2.ini Project [Tom Clancy's Rainbow Six: Vegas 2 *] Detect=HKCU\Software\Valve\Steam\Apps\15120 DetectFile=%ProgramFiles%\Ubisoft\Tom Clancy's Rainbow Six Vegas 2 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Tom Clancy's Rainbow Six Vegas 2|*.log;CrashReport*.*|RECURSE FileKey2=%ProgramFiles%\Ubisoft\Tom Clancy's Rainbow Six Vegas 2|*.log;CrashReport*.*|RECURSE Tags=ccapps ID=Tom Clancy's Rainbow Six: Vegas 2 * Author=Winapp2.ini Project [Tomahawk *] Detect=HKCU\Software\Tomahawk FileKey1=%LocalAppData%\Tomahawk|*.log FileKey2=%LocalAppData%\Tomahawk\Tomahawk\Cache|*|RECURSE Tags=ccmedia ID=Tomahawk * Author=Winapp2.ini Project [Tomahawk PDF+ *] Detect=HKCU\Software\NativeWinds\Tomahawk RegKey1=HKCU\Software\NativeWinds\Tomahawk\MRU Tags=ccapps ID=Tomahawk PDF+ * Author=Winapp2.ini Project [Tomb Raider *] Detect=HKCU\Software\Valve\Steam\Apps\203160 FileKey1=%UserProfile%\Documents|TombRaider.log Tags=ccapps ID=Tomb Raider * Author=Winapp2.ini Project [Tomboy *] DetectFile=%LocalAppData%\Tomboy FileKey1=%LocalAppData%\Tomboy|*.log FileKey2=%LocalAppData%\Tomboy\Cache|*|RECURSE Tags=ccapps ID=Tomboy * Author=Winapp2.ini Project [TomTom *] Detect1=HKCU\Software\TomTom Detect2=HKLM\Software\Classes\tomtomhome FileKey1=%AppData%\TomTom\HOME\Profiles\*|Log.txt FileKey2=%LocalAppData%\TomTom\HOME3|Log.txt FileKey3=%LocalAppData%\TomTom\HOME3\cache|*|RECURSE Tags=ccapps ID=TomTom * Author=Winapp2.ini Project [ToniArts EasyCleaner Duplicates *] Detect=HKLM\Software\ToniArts\EasyCleaner FileKey1=%ProgramFiles%\ToniArts\EasyCleaner|Duplicat.* Tags=ccutil ID=ToniArts EasyCleaner Duplicates * Author=Winapp2.ini Project [Toolbar Cleaner *] Detect=HKLM\Software\Toolbar Cleaner DetectFile=%ProgramFiles%\Toolbar Cleaner FileKey1=%ProgramFiles%\Toolbar Cleaner|*.txt Tags=ccutil ID=Toolbar Cleaner * Author=Winapp2.ini Project [Toolwiz Care *] DetectFile=%LocalAppData%\ToolwizCare* FileKey1=%LocalAppData%\ToolwizCare*\RegCleanBackup|*.reg FileKey2=%LocalAppData%\ToolwizCare*\RegistryBackup|* Tags=ccutil ID=Toolwiz Care * Author=Winapp2.ini Project [Toontown Rewritten *] DetectFile=%ProgramFiles%\ToonTown Rewritten FileKey1=%ProgramFiles%\ToonTown ReWritten\logs|* Tags=ccapps ID=Toontown Rewritten * Author=Winapp2.ini Project [Topaz Photo AI *] Detect=HKCU\SOFTWARE\Topaz Labs LLC\Topaz Photo AI FileKey1=%ProgramData%\Topaz Labs LLC\Topaz Photo AI\Logs|*|REMOVESELF Tags=ccmedia ID=Topaz Photo AI * Author=Winapp2.ini Project [Topaz Video AI *] DetectFile=%AppData%\Topaz Labs LLC\Topaz Video AI FileKey1=%AppData%\Topaz Labs LLC\Topaz Video AI\logs|*|REMOVESELF Tags=ccmedia ID=Topaz Video AI * Author=Winapp2.ini Project [TopStyle 5 *] Detect=HKCU\Software\Bradbury\TopStyle\5.0 RegKey1=HKCU\Software\Bradbury\TopStyle\5.0\RecentFiles Tags=ccapps ID=TopStyle 5 * Author=Winapp2.ini Project [Torchlight *] Detect1=HKCU\Software\Valve\Steam\Apps\41500 Detect2=HKCU\Software\Valve\Steam\Apps\200710 Detect3=HKLM\Software\Runic Games\Torchlight II DetectFile=%AppData%\Runic Games\Torchlight FileKey1=%AppData%\Runic Games\Torchlight|*.log FileKey2=%UserProfile%\Documents\My Games\runic games\torchlight 2|ogre.log FileKey3=%UserProfile%\Documents\My Games\Runic Games\Torchlight 2\logs|* Tags=ccapps ID=Torchlight * Author=Winapp2.ini Project [Torrent Search *] DetectFile=%ProgramFiles%\Torrent Search FileKey1=%ProgramFiles%\Torrent Search|*.log Tags=ccinternet ID=Torrent Search * Author=Winapp2.ini Project [TortoiseHg *] Detect=HKCU\Software\tortoisemerge FileKey1=%AppData%\TortoiseHg|*.log;*.old Tags=ccapps ID=TortoiseHg * Author=Winapp2.ini Project [TortoiseSVN *] Detect=HKCU\Software\TortoiseSVN FileKey1=%AppData%\TortoiseSVN|* FileKey2=%LocalAppData%\TSVNCache|* RegKey1=HKCU\Software\TortoiseSVN\History Tags=ccutil ID=TortoiseSVN * Author=Winapp2.ini Project [Toshiba BluetoothStack *] Detect=HKLM\Software\Toshiba\BluetoothStack FileKey1=%LocalAppData%\Toshiba\BluetoothStack\V1.0\tosOBEX\Temp|* Tags=ccutil ID=Toshiba BluetoothStack * Author=Winapp2.ini Project [Toshiba Book Place *] DetectFile=%AppData%\Book Place FileKey1=%AppData%\Book Place\Cache|*|RECURSE FileKey2=%AppData%\Book Place\log|*|RECURSE Tags=ccapps ID=Toshiba Book Place * Author=Winapp2.ini Project [Toshiba FlashCards *] DetectFile=%LocalAppData%\TOSHIBA\FlashCards FileKey1=%LocalAppData%\TOSHIBa\FlashCards|log.txt Tags=ccapps ID=Toshiba FlashCards * Author=Winapp2.ini Project [Toshiba PC Diagnostic Tool Utility *] DetectFile=%AppData%\Toshiba\PCDiag FileKey1=%AppData%\Toshiba\PCDiag|*|RECURSE FileKey2=%ProgramFiles%\Toshiba\configfree|*.log Tags=ccutil ID=Toshiba PC Diagnostic Tool Utility * Author=Winapp2.ini Project [Total Commander *] DetectFile=%LocalAppData%\GHISLER FileKey1=%LocalAppData%\GHISLER|tcthumbs.*db;treeinfoC.wc Tags=ccutil ID=Total Commander * Author=Winapp2.ini Project [Total Recorder *] Detect=HKCU\Software\HighCriteria\TotalRecorder\Recent File List RegKey1=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File1 RegKey2=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File2 RegKey3=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File3 RegKey4=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File4 RegKey5=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File5 RegKey6=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File6 RegKey7=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File7 RegKey8=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File8 RegKey9=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File9 Tags=ccmedia ID=Total Recorder * Author=Winapp2.ini Project [Total Registry *] Detect=HKCU\Software\ScorpioSoftware\TotalRegistry RegKey1=HKCU\Software\ScorpioSoftware\TotalRegistry|LastKey Tags=ccutil ID=Total Registry * Author=Winapp2.ini Project [Total Uninstall *] DetectFile=%ProgramData%\Martau\Total Uninstall* FileKey1=%ProgramData%\Martau\Total Uninstall*|*.cache;*.Folders|RECURSE FileKey2=%ProgramFiles%\Total Uninstall*|*.GID;*.rtf;*.txt|RECURSE Tags=ccutil ID=Total Uninstall * Author=Winapp2.ini Project [Total Uninstall Backups *] DetectFile=%ProgramData%\Martau\Total Uninstall* FileKey1=%ProgramData%\Martau\Total Uninstall*|*.tlg;*.zip;*.zsns|RECURSE FileKey2=%ProgramData%\Martau\Total Uninstall*\Analyzed Programs|* Tags=ccutil ID=Total Uninstall Backups * Author=Winapp2.ini Project [Touch *] Detect=HKCU\Software\Juan M. Aguirregabiria\Touch RegKey1=HKCU\Software\Juan M. Aguirregabiria\Touch Tags=ccutil ID=Touch * Author=Winapp2.ini Project [Towns *] Detect=HKCU\Software\Valve\Steam\Apps\221020 FileKey1=%ProgramFiles%\Steam\Steamapps\common\towns|*.log Tags=ccapps ID=Towns * Author=Winapp2.ini Project [TP-Link *] DetectFile=%ProgramData%\TP-Link FileKey1=%LocalAppData%\TP-Link\nsissetup|*.log FileKey2=%ProgramData%\TP-Link|*.log Tags=ccinternet ID=TP-Link * Author=Winapp2.ini Project [Track Folder Changes *] Detect=HKCU\Software\antiufo\TrackFolderChanges RegKey1=HKCU\Software\antiufo\TrackFolderChanges|LastFolder Tags=ccutil ID=Track Folder Changes * Author=Winapp2.ini Project [TrackMania Forever *] DetectFile=%ProgramData%\TrackMania FileKey1=%ProgramData%\TrackMania\Cache|* FileKey2=%ProgramData%\TrackMania\Cache\ManiaCode|* Tags=ccapps ID=TrackMania Forever * Author=Winapp2.ini Project [TrackMania Forever Manialinks *] DetectFile=%ProgramData%\TrackMania FileKey1=%ProgramData%\TrackMania\Manialinks|* Tags=ccapps ID=TrackMania Forever Manialinks * Author=Winapp2.ini Project [TrackMania Forever Scores *] DetectFile=%ProgramData%\TrackMania FileKey1=%ProgramData%\TrackMania\CampaignsScores|* FileKey2=%ProgramData%\TrackMania\CampaignsScores\General|* FileKey3=%ProgramData%\TrackMania\CampaignsScores\UnitedRace|* FileKey4=%ProgramData%\TrackMania\LadderScores|* Tags=ccapps ID=TrackMania Forever Scores * Author=Winapp2.ini Project [Treesize *] DetectFile=%ProgramFiles%\JAM Software\TreeSize * FileKey1=%AppData%\JAM Software\TreeSize *|GlobalOptions.bak0.xml Tags=ccutil ID=Treesize * Author=Winapp2.ini Project [Trend Micro *] Detect1=HKCU\Software\Trend Micro Detect2=HKLM\Software\TrendMicro DetectFile=%ProgramData%\Trend Micro FileKey1=%ProgramData%\Trend Micro|*.log FileKey2=%ProgramFiles%\Trend Micro|*.log;URLLog.dat|RECURSE Tags=ccmedia ID=Trend Micro * Author=Winapp2.ini Project [Trend Micro AntiRansomware Tool *] DetectFile=%ProgramFiles%\AntiRansomware2.0 FileKey1=%ProgramData%\AntiRansomware|*.log Tags=ccapps ID=Trend Micro AntiRansomware Tool * Author=Winapp2.ini Project [Trend Micro HijackThis Backups *] Detect=HKLM\Software\TrendMicro\HijackThis FileKey1=%ProgramFiles%\Trend Micro\HijackThis\backups|* Tags=ccutil ID=Trend Micro HijackThis Backups * Author=Winapp2.ini Project [Trend Micro RUBotted *] Detect=HKLM\Software\TrendMicro\RUBotted FileKey1=%ProgramData%\Trend Micro\RUBotted\Logs|*|REMOVESELF FileKey2=%ProgramFiles%\Trend Micro\RUBotted\DebugLogs|*|REMOVESELF Tags=ccutil ID=Trend Micro RUBotted * Author=Winapp2.ini Project [Tribes: Ascend *] Detect=HKCU\Software\Valve\Steam\Apps\17080 FileKey1=%ProgramData%\Hi-Rez Studios\BrowserCacheTribes\Default\Cache|*|RECURSE FileKey2=%ProgramFiles%\Steam\steamapps\common\tribes\Binaries\Logs|* FileKey3=%UserProfile%\Documents\My Games\Tribes Ascend\TribesGame\Logs|* Tags=ccapps ID=Tribes: Ascend * Author=Winapp2.ini Project [Trillian *] Detect=HKLM\Software\Clients\IM\Trillian FileKey1=%AppData%\Trillian\Crash Files|*|RECURSE FileKey2=%AppData%\Trillian\users\*|buddies.*.xml FileKey3=%AppData%\Trillian\users\*\cache|* FileKey4=%AppData%\Trillian\users\*\instantlookup|* FileKey5=%AppData%\Trillian\users\*\logs|*|RECURSE FileKey6=%AppData%\Trillian\users\global\skin_cache|* FileKey7=%ProgramFiles%\Trillian\Crash Files|*|RECURSE FileKey8=%ProgramFiles%\Trillian\Users\Default\buddyicons|*|RECURSE FileKey9=%ProgramFiles%\Trillian\Users\Default\instantlookup|* Tags=ccinternet ID=Trillian * Author=Winapp2.ini Project [Trine *] DetectFile=%ProgramFiles%\Steam\SteamApps\Common\Trine* FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Trine*\log*|* FileKey2=%ProgramFiles%\Steam\SteamApps\common\Trine\_enchanted_edition_\log|* Tags=ccapps ID=Trine * Author=Winapp2.ini Project [Triolan DDD++ *] DetectFile=%ProgramFiles%\Triolan DDD++ FileKey1=%ProgramFiles%\Triolan DDD++\Settings|ddd++_log.sqlite;Recents.xml Tags=ccinternet ID=Triolan DDD++ * Author=Winapp2.ini Project [TrojanHunter *] Detect=HKCU\Software\TrojanHunter FileKey1=%ProgramFiles%\TrojanHunter*|Debug.log;DebugLog.txt FileKey2=%ProgramFiles%\TrojanHunter*\Scan Reports|* Tags=ccutil ID=TrojanHunter * Author=Winapp2.ini Project [Tropico *] Detect1=HKCU\Software\Haemimont Games\Tropico 4 Detect2=HKLM\Software\Haemimont Games\Tropico3 FileKey1=%AppData%\Tropico*\Logs|*|REMOVESELF FileKey2=%AppData%\Tropico*\ShaderCache|*|REMOVESELF FileKey3=%ProgramFiles%\Kalypso Media\*|dotnetfx3*.exe FileKey4=%ProgramFiles%\Kalypso Media\*\DirectXRedist|*|REMOVESELF Tags=ccapps ID=Tropico * Author=Winapp2.ini Project [TuneIn Radio *] DetectFile1=%AppData%\TuneIn DetectFile2=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj FileKey1=%AppData%\TuneIn|*-journal;*.old;LOG;log.log;Network Persistent State;Origin Bound Certs|RECURSE FileKey2=%AppData%\TuneIn\*Cache|*|RECURSE FileKey3=%AppData%\TuneIn\blob_storage|*|RECURSE FileKey4=%AppData%\TuneIn\Logs|* FileKey5=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\AC|*|RECURSE FileKey6=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\LocalCache\Cache|*|RECURSE FileKey7=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\LocalState\_WinStoreSDK_Receipt_Cache|* FileKey8=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\Settings|*.log* FileKey9=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\TuneIn.TuneInRadio_6bhtb546zcxnj\TempState|*|REMOVESELF FileKey11=%LocalAppData%\TuneIn-Updater|*|RECURSE Tags=ccmedia ID=TuneIn Radio * Author=Winapp2.ini Project [TunnelBear VPN *] DetectFile1=%AppData%\TunnelBear DetectFile2=%ProgramFiles%\TunnelBear FileKey1=%AppData%\TunnelBear\Logs|* FileKey2=%ProgramFiles%\TunnelBear|*.log Tags=ccinternet ID=TunnelBear VPN * Author=Winapp2.ini Project [Turbo VPN *] DetectFile=%LocalAppData%\TurboVPN FileKey1=%LocalAppData%\TurboVPN\TVDump|*.dmp Tags=ccinternet ID=Turbo VPN * Author=Winapp2.ini Project [Turnip Boy Commits Tax Evasion *] Detect=HKCU\Software\Valve\Steam\Apps\1205450 FileKey1=%UserProfile%\AppData\LocalLow\Snoozy Kazoo\Turnip Boy Commits Tax Evasion|*.log Tags=ccapps ID=Turnip Boy Commits Tax Evasion * Author=Winapp2.ini Project [TV-Browser *] DetectFile=%ProgramFiles%\TV-Browser FileKey1=%AppData%\TV-Browser\*|java.searchplugin.SearchPlugin.dat* Tags=ccapps ID=TV-Browser * Author=Winapp2.ini Project [TV_Net *] DetectFile=%UserProfile%\AppData\LocalLow\TV_Net FileKey1=%UserProfile%\AppData\LocalLow\TV_Net\CacheIcons|*|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\TV_Net\Logs|*|RECURSE Tags=ccmedia ID=TV_Net * Author=Winapp2.ini Project [TVersity *] Detect=HKLM\Software\TVersity\Media Server FileKey1=%ProgramFiles%\TVersity Codec Pack|*.exe;*.url FileKey2=%ProgramFiles%\TVersity\Media Server|*.rtf;*.url;*TVersityCodecPackSetup* FileKey3=%ProgramFiles%\TVersity\Media Server\logs|*.log;*.txt;*.xml;*.zip|RECURSE FileKey4=%WinDir%\System32|*.1;*.2;*.3;tversity.cookies;TVersityMediaServer.log FileKey5=%WinDir%\System32\config\systemprofile\AppData\Local\Temp\TVersity Media Server|*|REMOVESELF FileKey6=%WinDir%\System32\config\systemprofile\Local Settings\Application Data\Temp\TVersity Media Server|*|REMOVESELF ExcludeKey1=FILE|%ProgramFiles%\TVersity Codec Pack\|uninst.exe ExcludeKey2=FILE|%ProgramFiles%\TVersity\Media Server\|HOWTO Share Media.txt ExcludeKey3=FILE|%ProgramFiles%\TVersity\Media Server\|version.txt Tags=ccmedia ID=TVersity * Author=Winapp2.ini Project [Tweaking.com Windows Repair *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Tweaking.com - Windows Repair (All in One) DetectFile1=%ProgramFiles%\Tweaking.com DetectFile2=%SystemDrive%\Tweaking.com_Windows_Repair_Logs FileKey1=%ProgramFiles%\Tweaking.com\Windows Repair (All in One)\Logs|*|REMOVESELF FileKey2=%SystemDrive%\Tweaking.com_Windows_Repair_Logs|*|REMOVESELF Tags=ccutil ID=Tweaking.com Windows Repair * Author=Winapp2.ini Project [TweakNow PowerPack Backups *] Detect=HKCU\Software\TweakNow PowerPack FileKey1=%ProgramFiles%\TweakNow PowerPack\Backup|* Tags=ccutil ID=TweakNow PowerPack Backups * Author=Winapp2.ini Project [Twinkle Tray *] DetectFile=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze FileKey1=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\LocalCache\Roaming\twinkle-tray-appx|*.log FileKey3=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\LocalCache\Roaming\twinkle-tray-appx\*cache*|*|RECURSE FileKey4=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\Settings|*.log* FileKey5=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\38002AlexanderFrangos.TwinkleTray_m7qx9dzpwqaze\TempState|*|REMOVESELF Tags=ccutil ID=Twinkle Tray * Author=Winapp2.ini Project [Twitch *] DetectFile=%AppData%\Twitch FileKey1=%AppData%\Twitch|updater.log FileKey2=%AppData%\Twitch\Electron|cookies* FileKey3=%AppData%\Twitch\Electron\*cache|*|REMOVESELF FileKey4=%AppData%\Twitch\Electron\local storage|* FileKey5=%AppData%\Twitch\Games\Dumps|*|REMOVESELF FileKey6=%AppData%\Twitch\logs\*|*.json;*.log|REMOVESELF Tags=ccapps ID=Twitch * Author=Winapp2.ini Project [Twitter *] DetectFile=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm FileKey1=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\AppData\Indexed DB|*.log FileKey3=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\LocalState|*|RECURSE FileKey4=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\Settings|*.log* FileKey5=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\9E2F88E3.TWITTER_wgeqdkkx372wm\TempState|*|REMOVESELF Tags=ccinternet ID=Twitter * Author=Winapp2.ini Project [Two Worlds Epic Edition *] Detect=HKCU\Software\Valve\Steam\Apps\1930 FileKey1=%UserProfile%\Documents\TwoWorlds Files\FontsCache|*.tmp Tags=ccapps ID=Two Worlds Epic Edition * Author=Winapp2.ini Project [Tzip *] DetectFile=%ProgramFiles%\Tzip FileKey1=%ProgramFiles%\Tzip|*.temp Tags=ccinternet ID=Tzip * Author=Winapp2.ini Project [Ubisoft Connect *] DetectFile=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher FileKey1=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher|*.log;*log.txt;Installed_files.txt;version.txt FileKey2=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher\Cache\assets|* FileKey3=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher\Cache\http*|*|RECURSE FileKey4=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher\Logs|* Tags=ccapps ID=Ubisoft Connect * Author=Winapp2.ini Project [Ubisoft Connect Installers *] DetectFile=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher Warning=Make sure to launch all of your installed UPlay games at least once before running this, or they may not launch properly. FileKey1=%ProgramFiles%\Ubisoft\Ubisoft Game Launcher\Cache\Installers|*|REMOVESELF Tags=ccapps ID=Ubisoft Connect Installers * Author=Winapp2.ini Project [UC Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|*Web Data FileKey2=%LocalAppData%\UC\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\UC\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=UC Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [UC Autoplay Preferences *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=UC Autoplay Preferences * Author=Winapp2.ini Project [UC Bookmark Backups *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|Bookmarks.bak Tags=ccapps ID=UC Bookmark Backups * Author=Winapp2.ini Project [UC Bookmark Favicons *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|favicons* Tags=ccapps ID=UC Bookmark Favicons * Author=Winapp2.ini Project [UC Caches *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\UC\User Data|Module Info Cache FileKey3=%LocalAppData%\UC\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\UC\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\UC\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\UC\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\UC\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\UC\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\UC\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\UC\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\UC\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\UC\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\UC\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\UC\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\UC\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\UC\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\UC\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\UC\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\UC\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=UC Caches * Author=Winapp2.ini Project [UC Default App Handlers *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|PreferredApps Tags=ccapps ID=UC Default App Handlers * Author=Winapp2.ini Project [UC Download History *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\UC\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=UC Download History * Author=Winapp2.ini Project [UC DRM Data *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\UC\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=UC DRM Data * Author=Winapp2.ini Project [UC Extension Cookies *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|Extension Cookies Tags=ccapps ID=UC Extension Cookies * Author=Winapp2.ini Project [UC Pinned Tabs *] DetectFile=%LocalAppData%\UC\User Data RegKey1=HKCU\Software\UC\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=UC Pinned Tabs * Author=Winapp2.ini Project [UC Privacy Sandbox *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data|*first_party_sets* FileKey2=%LocalAppData%\UC\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\UC\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\UC\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\UC\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\UC\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\UC\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\UC\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=UC Privacy Sandbox * Author=Winapp2.ini Project [UC Progressive Web Apps *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=UC Progressive Web Apps * Author=Winapp2.ini Project [UC Saved Usernames & Passwords *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|Login Data* Tags=ccapps ID=UC Saved Usernames & Passwords * Author=Winapp2.ini Project [UC Security & Threat Detection *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|DIPS* FileKey2=%LocalAppData%\UC\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\UC\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\UC\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\UC\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\UC\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\UC\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\UC\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\UC\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\UC\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\UC\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\UC\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=UC Security & Threat Detection * Author=Winapp2.ini Project [UC Shopping Insights *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\UC\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\UC\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\UC\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\UC\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=UC Shopping Insights * Author=Winapp2.ini Project [UC Storage Quota Manager *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|QuotaManager Tags=ccapps ID=UC Storage Quota Manager * Author=Winapp2.ini Project [UC Sync Data *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=UC Sync Data * Author=Winapp2.ini Project [UC Telemetry *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\Application|debug.log FileKey2=%LocalAppData%\UC\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\UC\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\UC\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\UC\User Data\*|*.log FileKey6=%LocalAppData%\UC\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\UC\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\UC\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\UC\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\UC\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\UC\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\UC\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\UC\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\UC\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\UC\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\UC\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\UC\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\UC\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\UC\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\UC\Application|debug.log FileKey21=%ProgramFiles%\UC\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\UC\BlBeacon|failed_count RegKey2=HKCU\Software\UC\BlBeacon|state RegKey3=HKCU\Software\UC\Installer|LastChecked RegKey4=HKCU\Software\UC\StabilityMetrics Tags=ccapps ID=UC Telemetry * Author=Winapp2.ini Project [UC Web Browsing Cookies *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=UC Web Browsing Cookies * Author=Winapp2.ini Project [UC Web Browsing History *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=UC Web Browsing History * Author=Winapp2.ini Project [UC Web Browsing Session *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\UC\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=UC Web Browsing Session * Author=Winapp2.ini Project [UC Web Storage *] DetectFile=%LocalAppData%\UC\User Data FileKey1=%LocalAppData%\UC\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\UC\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\UC\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\UC\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\UC\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\UC\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\UC\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\UC\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=UC Web Storage * Author=Winapp2.ini Project [Ulaa Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|*Web Data FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Ulaa Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Ulaa Autoplay Preferences *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Ulaa Autoplay Preferences * Author=Winapp2.ini Project [Ulaa Bookmark Backups *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|Bookmarks.bak Tags=ccapps ID=Ulaa Bookmark Backups * Author=Winapp2.ini Project [Ulaa Bookmark Favicons *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|favicons* Tags=ccapps ID=Ulaa Bookmark Favicons * Author=Winapp2.ini Project [Ulaa Caches *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Zoho\Ulaa\User Data|Module Info Cache FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Zoho\Ulaa\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Zoho\Ulaa\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Zoho\Ulaa\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Zoho\Ulaa\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Zoho\Ulaa\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Zoho\Ulaa\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Zoho\Ulaa\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Zoho\Ulaa\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Zoho\Ulaa\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Zoho\Ulaa\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Zoho\Ulaa\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Zoho\Ulaa\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Zoho\Ulaa\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Zoho\Ulaa\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Zoho\Ulaa\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Ulaa Caches * Author=Winapp2.ini Project [Ulaa Default App Handlers *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|PreferredApps Tags=ccapps ID=Ulaa Default App Handlers * Author=Winapp2.ini Project [Ulaa Download History *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Ulaa Download History * Author=Winapp2.ini Project [Ulaa DRM Data *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Ulaa DRM Data * Author=Winapp2.ini Project [Ulaa Extension Cookies *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|Extension Cookies Tags=ccapps ID=Ulaa Extension Cookies * Author=Winapp2.ini Project [Ulaa Pinned Tabs *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data RegKey1=HKCU\Software\Zoho\Ulaa\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Ulaa Pinned Tabs * Author=Winapp2.ini Project [Ulaa Privacy Sandbox *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data|*first_party_sets* FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Zoho\Ulaa\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Zoho\Ulaa\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Zoho\Ulaa\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Zoho\Ulaa\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Ulaa Privacy Sandbox * Author=Winapp2.ini Project [Ulaa Progressive Web Apps *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Ulaa Progressive Web Apps * Author=Winapp2.ini Project [Ulaa Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|Login Data* Tags=ccapps ID=Ulaa Saved Usernames & Passwords * Author=Winapp2.ini Project [Ulaa Security & Threat Detection *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|DIPS* FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Zoho\Ulaa\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Zoho\Ulaa\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Zoho\Ulaa\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Zoho\Ulaa\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Zoho\Ulaa\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Zoho\Ulaa\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Zoho\Ulaa\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Zoho\Ulaa\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Ulaa Security & Threat Detection * Author=Winapp2.ini Project [Ulaa Shopping Insights *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Zoho\Ulaa\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Ulaa Shopping Insights * Author=Winapp2.ini Project [Ulaa Storage Quota Manager *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|QuotaManager Tags=ccapps ID=Ulaa Storage Quota Manager * Author=Winapp2.ini Project [Ulaa Sync Data *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Ulaa Sync Data * Author=Winapp2.ini Project [Ulaa Telemetry *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\Application|debug.log FileKey2=%LocalAppData%\Zoho\Ulaa\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Zoho\Ulaa\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Zoho\Ulaa\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\*|*.log FileKey6=%LocalAppData%\Zoho\Ulaa\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Zoho\Ulaa\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Zoho\Ulaa\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Zoho\Ulaa\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Zoho\Ulaa\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Zoho\Ulaa\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Zoho\Ulaa\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Zoho\Ulaa\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Zoho\Ulaa\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Zoho\Ulaa\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Zoho\Ulaa\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Zoho\Ulaa\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Zoho\Ulaa\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Zoho\Ulaa\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Zoho\Ulaa\Application|debug.log FileKey21=%ProgramFiles%\Zoho\Ulaa\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Zoho\Ulaa\BlBeacon|failed_count RegKey2=HKCU\Software\Zoho\Ulaa\BlBeacon|state RegKey3=HKCU\Software\Zoho\Ulaa\Installer|LastChecked RegKey4=HKCU\Software\Zoho\Ulaa\StabilityMetrics Tags=ccapps ID=Ulaa Telemetry * Author=Winapp2.ini Project [Ulaa Web Browsing Cookies *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Ulaa Web Browsing Cookies * Author=Winapp2.ini Project [Ulaa Web Browsing History *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Ulaa Web Browsing History * Author=Winapp2.ini Project [Ulaa Web Browsing Session *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Ulaa Web Browsing Session * Author=Winapp2.ini Project [Ulaa Web Storage *] DetectFile=%LocalAppData%\Zoho\Ulaa\User Data FileKey1=%LocalAppData%\Zoho\Ulaa\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Zoho\Ulaa\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Zoho\Ulaa\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Zoho\Ulaa\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Zoho\Ulaa\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Zoho\Ulaa\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Zoho\Ulaa\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Zoho\Ulaa\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Ulaa Web Storage * Author=Winapp2.ini Project [UltraCompare *] Detect=HKCU\Software\IDM Computer Solutions\UltraCompare Pro FileKey1=%AppData%\IDMComp\Common\Logs|*|RECURSE FileKey2=%AppData%\IDMComp\UltraCompare\Cloud Services\Logs|*.log Tags=ccapps ID=UltraCompare * Author=Winapp2.ini Project [UltraDefrag *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\UltraDefrag DetectFile1=%SystemDrive%\PortableApps\UltraDefragPortable DetectFile2=%WinDir%\UltraDefrag FileKey1=%ProgramFiles%\UltraDefrag\logs|* FileKey2=%SystemDrive%|fraglist.luar FileKey3=%SystemDrive%\PortableApps\UltraDefragPortable\Data|UltraDefragPortable.log FileKey4=%WinDir%\UltraDefrag\logs|*.log Tags=ccutil ID=UltraDefrag * Author=Winapp2.ini Project [UltraEdit *] Detect=HKCU\Software\IDM Computer Solutions\UltraEdit FileKey1=%AppData%\IDMComp\Common\Logs|*|RECURSE FileKey2=%AppData%\IDMComp\UltraEdit\autorec|*|RECURSE FileKey3=%AppData%\IDMComp\UltraEdit\EBWebView|*|RECURSE FileKey4=%ProgramFiles%\IDM Computer Solutions\UltraEdit|*.txt Tags=ccapps ID=UltraEdit * Author=Winapp2.ini Project [UltraISO *] Detect=HKCU\Software\EasyBoot Systems FileKey1=%ProgramFiles%\UltraISO\backup|*|REMOVESELF RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|LogFile RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|OpenFolder Tags=ccutil ID=UltraISO * Author=Winapp2.ini Project [Ultratron *] Detect=HKCU\Software\Valve\Steam\Apps\219190 FileKey1=%UserProfile%\.ultratron*|*.log Tags=ccapps ID=Ultratron * Author=Winapp2.ini Project [UMPlayer *] DetectFile=%UserProfile%\.umplayer FileKey1=%SystemDrive%\MININT|*.log|RECURSE FileKey2=%UserProfile%\.umplayer\file_settings|*|RECURSE Tags=ccmedia ID=UMPlayer * Author=Winapp2.ini Project [Unchecky *] Detect=HKCU\Software\Unchecky FileKey1=%ProgramData%\Unchecky|*.log;uclogfile*.bin Tags=ccutil ID=Unchecky * Author=Winapp2.ini Project [UnHackMe *] Detect=HKLM\Software\Greatis FileKey1=%ProgramFiles%\UnHackMe|*.err;*.log;*.txt|RECURSE FileKey2=%UserProfile%\Documents\RegRun2|*.txt Tags=ccutil ID=UnHackMe * Author=Winapp2.ini Project [Unicenta Open POS *] DetectFile=%ProgramFiles%\Unicentaopos* FileKey1=%ProgramFiles%\Unicentaopos*|*.log Tags=ccapps ID=Unicenta Open POS * Author=Winapp2.ini Project [Unified Remote *] Detect=HKCU\Software\Unified Remote FileKey1=%AppData%\Unified Remote\Logs|* Tags=ccmedia ID=Unified Remote * Author=Winapp2.ini Project [UniGetUI *] DetectFile=%LocalAppData%\UniGetUI FileKey1=%LocalAppData%\UniGetUI\chocolatey\logs|*.log Tags=ccutil ID=UniGetUI * Author=Winapp2.ini Project [Unigine Heaven DX11 Benchmark *] DetectFile=%UserProfile%\Unigine Heaven FileKey1=%UserProfile%\Unigine Heaven|*.cache;log.html FileKey2=%UserProfile%\Unigine Heaven\save|*|REMOVESELF Tags=ccapps ID=Unigine Heaven DX11 Benchmark * Author=Winapp2.ini Project [Uninstall Tool *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall Tool_is1 FileKey1=%ProgramFiles%\Uninstall Tool|*.dmp Tags=ccutil ID=Uninstall Tool * Author=Winapp2.ini Project [Universal Extractor *] Detect=HKCU\Software\UniExtract RegKey1=HKCU\Software\UniExtract\Directory RegKey2=HKCU\Software\UniExtract\File Tags=ccutil ID=Universal Extractor * Author=Winapp2.ini Project [Universal Viewer *] DetectFile=%AppData%\ATViewer FileKey1=%AppData%\ATViewer|ViewerHistory.ini Tags=ccutil ID=Universal Viewer * Author=Winapp2.ini Project [Universal Windows Platform *] DetectFile1=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.Win32WebViewHost_8wekyb3d8bbwe DetectFile3=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe FileKey1=%LocalAppData%\Microsoft\Internet Explorer|*.log;*.txt|RECURSE FileKey2=%LocalAppData%\Microsoft\Internet Explorer\CacheStorage|*|RECURSE FileKey3=%LocalAppData%\Microsoft\Internet Explorer\DOMStore|*|RECURSE FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery|*|RECURSE FileKey5=%LocalAppData%\Microsoft\Windows\INet*|*|RECURSE FileKey6=%LocalAppData%\Microsoft\Windows\PRICache|*|RECURSE FileKey7=%LocalAppData%\Microsoft\Windows\WebCache|*|RECURSE FileKey8=%LocalAppData%\Packages\*\AC\Microsoft\CLR_v4.0*|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\AC|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey11=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState|*|RECURSE FileKey12=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings|*.log* FileKey13=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey14=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey15=%LocalAppData%\Packages\Microsoft.Win32WebViewHost_8wekyb3d8bbwe\AC|*|RECURSE FileKey16=%LocalAppData%\Packages\Microsoft.Win32WebViewHost_8wekyb3d8bbwe\Settings|*.log* FileKey17=%LocalAppData%\Packages\Microsoft.Win32WebViewHost_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey18=%LocalAppData%\Packages\Microsoft.Win32WebViewHost_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey19=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\AC|*|RECURSE FileKey20=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey21=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey22=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\Settings|*.log* FileKey23=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey24=%LocalAppData%\Packages\microsoft.windows.authhost.sso_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey25=%UserProfile%\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore|*|REMOVESELF FileKey26=%UserProfile%\AppData\LocalLow\webviewdata\2\EBWebView\Crashpad\reports|* FileKey27=%UserProfile%\AppData\LocalLow\webviewdata\2\EBWebView\Crashpad\temp|* FileKey28=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\History|*|RECURSE FileKey29=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\INet*|*|RECURSE FileKey30=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer|*.log FileKey31=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History|*|RECURSE FileKey32=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INet*|*|RECURSE FileKey33=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache|*|RECURSE FileKey34=%WinDir%\System32\config\systemprofile\Cookies|*|RECURSE FileKey35=%WinDir%\System32\config\systemprofile\History|*|RECURSE FileKey36=%WinDir%\System32\config\systemprofile\Local Settings\Temporary Internet Files|*|RECURSE FileKey37=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History|*|RECURSE FileKey38=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INet*|*|RECURSE FileKey39=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache|*|RECURSE RegKey1=HKCU\Software\Microsoft\Internet Explorer\DOMStorage RegKey2=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage RegKey3=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete RegKey4=HKCU\Software\Microsoft\Phone\ShellUI\WindowSizing RegKey5=HKCU\Software\Microsoft\UserData\UninstallTimes RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\|pinning.db ExcludeKey2=FILE|%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\|settings.json Tags=ccwindows ID=Universal Windows Platform * Author=Winapp2.ini Project [Universe Sandbox *] DetectFile=%UserProfile%\AppData\LocalLow\Giant Army\Universe Sandbox* FileKey1=%UserProfile%\AppData\LocalLow\Giant Army\Universe Sandbox*|*log.txt;history.json Tags=ccapps ID=Universe Sandbox * Author=Winapp2.ini Project [Unlocker *] DetectFile=%ProgramFiles%\Unlocker FileKey1=%ProgramFiles%\Unlocker|Unlocker-List.txt Tags=ccutil ID=Unlocker * Author=Winapp2.ini Project [Unreal Tournament: Game of the Year *] DetectFile=%ProgramFiles%\GOG.com\Unreal Tournament GOTY FileKey1=%ProgramFiles%\GOG.com\Unreal Tournament GOTY\Logs|* FileKey2=%ProgramFiles%\GOG.com\Unreal Tournament GOTY\System|*.log Tags=ccapps ID=Unreal Tournament: Game of the Year * Author=Winapp2.ini Project [UPX Shell *] Detect=HKCU\Software\ION Tek\UPX Shell RegKey1=HKCU\Software\ION Tek\UPX Shell\3.x|History Tags=ccutil ID=UPX Shell * Author=Winapp2.ini Project [USB Disk Security *] DetectFile=%ProgramFiles%\USB Disk Security FileKey1=%AppData%\Zbshareware Lab|*|REMOVESELF Tags=ccutil ID=USB Disk Security * Author=Winapp2.ini Project [USB Redirector *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FB9376AC-5253-42a5-AC0A-D306F32FFAD2} FileKey1=%ProgramFiles%\USB Redirector|*.log;*.txt Tags=ccinternet ID=USB Redirector * Author=Winapp2.ini Project [USB Safely Remove *] Detect=HKCU\Software\SafelyRemove FileKey1=%AppData%\USBSafelyRemove|*.txt FileKey2=%AppData%\USBSRService|*.txt FileKey3=%ProgramData%\USBSRService|*.txt FileKey4=%ProgramFiles%\USB Safely Remove|*.DIZ;*.rtf;*.url Tags=ccutil ID=USB Safely Remove * Author=Winapp2.ini Project [UsbFix *] Detect=HKCU\Software\UsbFix FileKey1=%SystemDrive%\UsbFix\Log|*|REMOVESELF FileKey2=%SystemDrive%\UsbFix\Quarantine|*|REMOVESELF FileKey3=%UserProfile%\Desktop|UsbFix_Report.txt RegKey1=HKCU\Software\UsbFix\LastReport Tags=ccmedia ID=UsbFix * Author=Winapp2.ini Project [UserBenchmark *] DetectFile1=%AppData%\UserBenchmark DetectFile2=%ProgramFiles%\User Benchmark FileKey1=%AppData%\UserBenchmark\User|*.log* FileKey2=%SystemDrive%\UserBenchmark|*|REMOVESELF Tags=ccutil ID=UserBenchmark * Author=Winapp2.ini Project [uTorrent *] Detect=HKCU\Software\BitTorrent\uTorrent FileKey1=%AppData%\utorrent|*.bad;*.benc;*.dmp;*.log;*.older;*ipfilter.bak;updates.dat FileKey2=%AppData%\utorrent\updates|*.exe FileKey3=%LocalAppData%\BitTorrentHelper|*.log FileKey4=%LocalAppData%\BitTorrentHelper\crashdumps|*|RECURSE FileKey5=%ProgramFiles%\uTorrent|*.old;*.tmp FileKey6=%UserProfile%\AppData\LocalLow\uTorrent|uTorrent_* FileKey7=%UserProfile%\AppData\LocalLow\uTorrentBar\Logs|* RegKey1=HKCU\Software\BitTorrent|computerID Tags=ccinternet ID=uTorrent * Author=Winapp2.ini Project [uTorrent Web *] DetectFile=%AppData%\uTorrent Web FileKey1=%AppData%\uTorrent Web|*.bak;*.log* FileKey2=%AppData%\uTorrent Web\crashdumps|*|RECURSE Tags=ccinternet ID=uTorrent Web * Author=Winapp2.ini Project [UVI Portal *] DetectFile=%AppData%\UVI Portal* FileKey1=%AppData%\UVI Portal|*.log FileKey2=%AppData%\UVIPortalCache|UVI Portal.bin Tags=ccmedia ID=UVI Portal * Author=Winapp2.ini Project [V - The File Viewer *] Detect=HKCU\Software\Prineas\FileViewer FileKey1=%AppData%\V|*.log RegKey1=HKCU\Software\Prineas\FileViewer\History RegKey2=HKCU\Software\Prineas\FileViewer\PathC RegKey3=HKCU\Software\Prineas\FileViewer\QathH RegKey4=HKCU\Software\Prineas\FileViewer\VCurrentPath RegKey5=HKCU\Software\Prineas\FileViewer\VCurrentPath1 Tags=ccutil ID=V - The File Viewer * Author=Winapp2.ini Project [V-Ray *] DetectFile=%AppData%\ChaosGroup\V-Ray For * FileKey1=%AppData%\ChaosGroup\Cloud\Client|*.log FileKey2=%AppData%\ChaosGroup\V-Ray For Revit*\Logs|* FileKey3=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit|*-journal;*.log;*.old;LOG;Network Persistent State|RECURSE FileKey4=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit\*Cache|*|RECURSE FileKey5=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit\blob_storage|*|RECURSE FileKey6=%AppData%\ChaosGroup\V-Ray For SketchUp|*.log;telemetry.json FileKey7=%LocalAppData%\ChaosGroup\Telemetry|*.log Tags=ccapps ID=V-Ray * Author=Winapp2.ini Project [V&V Messenger Chat History *] DetectFile=%AppData%\AJabber FileKey1=%AppData%\AJabber\*\Contacts|*|RECURSE Tags=ccinternet ID=V&V Messenger Chat History * Author=Winapp2.ini Project [Valfaris *] DetectFile=%UserProfile%\AppData\LocalLow\Steel Mantis\Valfaris FileKey1=%UserProfile%\AppData\LocalLow\Steel Mantis\Unity|*|REMOVESELF FileKey2=%UserProfile%\AppData\LocalLow\Steel Mantis\Valfaris|*txt Tags=ccapps ID=Valfaris * Author=Winapp2.ini Project [Valorant *] DetectFile=%LocalAppData%\VALORANT FileKey1=%LocalAppData%\VALORANT\Saved\Crashes|* FileKey2=%LocalAppData%\VALORANT\Saved\Logs|*.log Tags=ccapps ID=Valorant * Author=Winapp2.ini Project [Vampire Survivors *] Detect=HKCU\Software\Valve\Steam\Apps\1794680 FileKey1=%AppData%\Vampire_Survivors|Network Persistent State FileKey2=%AppData%\Vampire_Survivors\*Cache|*|RECURSE FileKey3=%AppData%\Vampire_Survivors\*Storage|*.old;LOG|RECURSE FileKey4=%AppData%\Vampire_Survivors\blob_storage|*|RECURSE FileKey5=%AppData%\Vampire_Survivors\logs|*.log FileKey6=%UserProfile%\AppData\LocalLow\poncle\Vampire Survivors|*.log FileKey7=%UserProfile%\AppData\LocalLow\poncle\Vampire Survivors\backtrace|*|RECURSE FileKey8=%UserProfile%\AppData\LocalLow\poncle\Vampire Survivors\Unity|*|REMOVESELF Tags=ccapps ID=Vampire Survivors * Author=Winapp2.ini Project [Vbs2Exe *] Detect=HKCU\Software\enkeladress\vbs2exe DetectFile=%ProgramFiles%\Vbs2Exe FileKey1=%ProgramFiles%\Vbs2Exe|recentlist.rlt Tags=ccutil ID=Vbs2Exe * Author=Winapp2.ini Project [VCW VicMan's Photo Editor *] DetectFile=%ProgramFiles%\VCW VicMan's Photo Editor FileKey1=%ProgramFiles%\VCW VicMan's Photo Editor|recent.ini Tags=ccmedia ID=VCW VicMan's Photo Editor * Author=Winapp2.ini Project [VDownloader *] DetectFile=%AppData%\VDownloader FileKey1=%AppData%\VDownloader|completedTasks.xml Tags=ccmedia ID=VDownloader * Author=Winapp2.ini Project [Venis IX *] Detect=HKCU\Software\Spaceblue\Venis IX RegKey1=HKCU\Software\Spaceblue\Venis IX\FileHistory Tags=ccapps ID=Venis IX * Author=Winapp2.ini Project [Ventrilo Chat Logs *] Detect=HKCU\Software\Ventrilo FileKey1=%AppData%\ventrilo\chatlogs|*|REMOVESELF Tags=ccinternet ID=Ventrilo Chat Logs * Author=Winapp2.ini Project [VeryPDF OCR to Any Converter *] Detect=HKCU\Software\VietUnicode\VeryPDF OCR to Any Converter3 RegKey1=HKCU\Software\VietUnicode\VeryPDF OCR to Any Converter3|MruList Tags=ccapps ID=VeryPDF OCR to Any Converter * Author=Winapp2.ini Project [VeryPDF PDF Manual Splitter *] Detect=HKCU\Software\VeryPDF PDF Manual Splitter RegKey1=HKCU\Software\VeryPDF PDF Manual Splitter\pdfms\Recent File List Tags=ccapps ID=VeryPDF PDF Manual Splitter * Author=Winapp2.ini Project [VHD Attach *] Detect=HKCU\Software\Josip Medved\VHD Attach FileKey1=%ProgramFiles%\Josip Medved\VHD Attach|*.InstallLog RegKey1=HKCU\Software\Josip Medved\VHD Attach|LastSize RegKey2=HKCU\Software\Josip Medved\VHD Attach\RecentFiles Tags=ccutil ID=VHD Attach * Author=Winapp2.ini Project [VicMan Web Photo Album *] Detect=HKCU\Software\VicMan Software\Web Photo Album DetectFile=%ProgramFiles%\Web Photo Album FileKey1=%ProgramFiles%\Web Photo Album|*.log RegKey1=HKCU\Software\VicMan Software\Web Photo Album|RecentFile0 RegKey2=HKCU\Software\VicMan Software\Web Photo Album|RecentFile1 RegKey3=HKCU\Software\VicMan Software\Web Photo Album|RecentFile2 RegKey4=HKCU\Software\VicMan Software\Web Photo Album|RecentFile3 RegKey5=HKCU\Software\VicMan Software\Web Photo Album|RecentFile4 Tags=ccmedia ID=VicMan Web Photo Album * Author=Winapp2.ini Project [Viddly YouTube Downloader *] DetectFile=%AppData%\Viddly Inc\Viddly YouTube Downloader FileKey1=%AppData%\Viddly Inc\Viddly YouTube Downloader|log.txt FileKey2=%LocalAppData%\Viddly YouTube Downloader|*.log Tags=ccinternet ID=Viddly YouTube Downloader * Author=Winapp2.ini Project [Video Thumbnails Maker *] DetectFile=%ProgramFiles%\Video Thumbnails Maker FileKey1=%ProgramFiles%\Video Thumbnails Maker|*.log;*_bkp.exe FileKey2=%ProgramFiles%\Video Thumbnails Maker\Logs|* Tags=ccmedia ID=Video Thumbnails Maker * Author=Winapp2.ini Project [Videoder *] DetectFile=%AppData%\Videoder FileKey1=%AppData%\Videoder|*.log FileKey2=%AppData%\Videoder\*Cache|* Tags=ccmedia ID=Videoder * Author=Winapp2.ini Project [VideoGet *] Detect=HKCU\Software\Nuclear Coffee\VideoGet FileKey1=%ProgramFiles%\VideoGet\Temp|* Tags=ccinternet ID=VideoGet * Author=Winapp2.ini Project [VideoMach *] Detect=HKCU\Software\Gromada\VideoMach FileKey1=%UserProfile%\Documents|VideoMach_Log.txt Tags=ccmedia ID=VideoMach * Author=Winapp2.ini Project [Vidmore Screen Recorder *] DetectFile=%LocalAppData%\Vidmore\Vidmore Screen Recorder FileKey1=%LocalAppData%\Vidmore\Vidmore Screen Recorder\Logs|* Tags=ccmedia ID=Vidmore Screen Recorder * Author=Winapp2.ini Project [Vim *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vim FileKey1=%UserProfile%|_viminfo Tags=ccapps ID=Vim * Author=Winapp2.ini Project [Vindictus *] Detect=HKLM\Software\Nexon\Vindictus DetectFile=%SystemDrive%\Nexon\Vindictus EU\en-EU FileKey1=%ProgramData%\NexonEU\601|*.log FileKey2=%SystemDrive%\Nexon\Vindictus EU\en-EU|*.log;*.tmp FileKey3=%SystemDrive%\Nexon\Vindictus EU\en-EU\HShield|*.log FileKey4=%UserProfile%\Documents\Vindictus EU\Report Error|*.log;*.mdmp Tags=ccapps ID=Vindictus * Author=Winapp2.ini Project [Violett *] Detect=HKCU\Software\Valve\Steam\Apps\257830 FileKey1=%ProgramFiles%\Steam\SteamApps\Common\Violett|crash.dmp;error.log;output_log.txt;report.ini|RECURSE Tags=ccapps ID=Violett * Author=Winapp2.ini Project [Virtual Clone Drive *] Detect=HKLM\Software\Elaborate Bytes\VirtualCloneDrive RegKey1=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU RegKey2=HKLM\Software\Elaborate Bytes\VirtualCloneDrive\0 Tags=ccapps ID=Virtual Clone Drive * Author=Winapp2.ini Project [VirtualDJ *] Detect=HKCU\Software\VirtualDJ FileKey1=%UserProfile%\Documents\VirtualDJ|Crashguard report.txt FileKey2=%UserProfile%\Documents\VirtualDJ\Cache|*|RECURSE FileKey3=%UserProfile%\Documents\VirtualDJ\History|* Tags=ccmedia ID=VirtualDJ * Author=Winapp2.ini Project [VirtualDJ Tracklist *] Detect=HKCU\Software\VirtualDJ FileKey1=%UserProfile%\Documents\VirtualDJ\TrackListing|* Tags=ccmedia ID=VirtualDJ Tracklist * Author=Winapp2.ini Project [VirtualDub *] Detect=HKCU\Software\VirtualDub.org\VirtualDub RegKey1=HKCU\Software\VirtualDub.org\VirtualDub\MRU List RegKey2=HKCU\Software\VirtualDub.org\VirtualDub\Saved filespecs Tags=ccmedia ID=VirtualDub * Author=Winapp2.ini Project [VirtualDubMod *] Detect=HKCU\Software\Freeware\VirtualDubMod RegKey1=HKCU\Software\Freeware\VirtualDubMod\MRU List Tags=ccmedia ID=VirtualDubMod * Author=Winapp2.ini Project [VirtualFDD *] Detect=HKCU\Software\Korbos\VirtualFDD RegKey1=HKCU\Software\Korbos\VirtualFDD\Recent File List Tags=ccutil ID=VirtualFDD * Author=Winapp2.ini Project [VirtuaWin *] DetectFile=%AppData%\VirtuaWin FileKey1=%AppData%\VirtuaWin|virtuawin.log Tags=ccapps ID=VirtuaWin * Author=Winapp2.ini Project [Visual Watermark *] DetectFile=%LocalAppData%\Visual Watermark* FileKey1=%LocalAppData%\Visual Watermark Common\Temp|* Tags=ccmedia ID=Visual Watermark * Author=Winapp2.ini Project [Vit Registry Fix *] Detect=HKCU\Software\VITSOFT\Vit Registry Fix FileKey1=%ProgramFiles%\VITSOFT\Vit Registry Fix\Backup|BackupREG_*.Vreg Tags=ccutil ID=Vit Registry Fix * Author=Winapp2.ini Project [Vivaldi Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|*Web Data FileKey2=%LocalAppData%\Vivaldi\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Vivaldi\User Data\AutoFill*|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Vivaldi Autoplay Preferences *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\MEIPreload|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Autoplay Preferences * Author=Winapp2.ini Project [Vivaldi Bookmark Backups *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|Bookmarks.bak Tags=Vivaldi,Browser ID=Vivaldi Bookmark Backups * Author=Winapp2.ini Project [Vivaldi Bookmark Favicons *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|favicons* Tags=Vivaldi,Browser ID=Vivaldi Bookmark Favicons * Author=Winapp2.ini Project [Vivaldi Caches *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Vivaldi\User Data|Module Info Cache FileKey3=%LocalAppData%\Vivaldi\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Vivaldi\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Vivaldi\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Vivaldi\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Vivaldi\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Vivaldi\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Vivaldi\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Vivaldi\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Vivaldi\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Vivaldi\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Vivaldi\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Vivaldi\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Vivaldi\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Vivaldi\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Vivaldi\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Vivaldi\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Vivaldi\User Data\Optimization*|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Caches * Author=Winapp2.ini Project [Vivaldi Default App Handlers *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|PreferredApps Tags=Vivaldi,Browser ID=Vivaldi Default App Handlers * Author=Winapp2.ini Project [Vivaldi Download History *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Vivaldi\User Data\*\shared_proto_db|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Download History * Author=Winapp2.ini Project [Vivaldi DRM Data *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Vivaldi\User Data\WidevineCdm|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi DRM Data * Author=Winapp2.ini Project [Vivaldi Extension Cookies *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|Extension Cookies Tags=Vivaldi,Browser ID=Vivaldi Extension Cookies * Author=Winapp2.ini Project [Vivaldi Pinned Tabs *] DetectFile=%LocalAppData%\Vivaldi\User Data RegKey1=HKCU\Software\Vivaldi\PreferenceMACs\Default|pinned_tabs Tags=Vivaldi,Browser ID=Vivaldi Pinned Tabs * Author=Winapp2.ini Project [Vivaldi Privacy Sandbox *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data|*first_party_sets* FileKey2=%LocalAppData%\Vivaldi\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Vivaldi\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Vivaldi\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Vivaldi\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Vivaldi\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Vivaldi\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Vivaldi\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Privacy Sandbox * Author=Winapp2.ini Project [Vivaldi Progressive Web Apps *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\Web Applications|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Progressive Web Apps * Author=Winapp2.ini Project [Vivaldi Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|Login Data* Tags=Vivaldi,Browser ID=Vivaldi Saved Usernames & Passwords * Author=Winapp2.ini Project [Vivaldi Security & Threat Detection *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|DIPS* FileKey2=%LocalAppData%\Vivaldi\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Vivaldi\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Vivaldi\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Vivaldi\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Vivaldi\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Vivaldi\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Vivaldi\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Vivaldi\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Vivaldi\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Vivaldi\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Vivaldi\User Data\ZxcvbnData|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Security & Threat Detection * Author=Winapp2.ini Project [Vivaldi Shopping Insights *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Vivaldi\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Vivaldi\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Vivaldi\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Vivaldi\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Shopping Insights * Author=Winapp2.ini Project [Vivaldi Storage Quota Manager *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|QuotaManager Tags=Vivaldi,Browser ID=Vivaldi Storage Quota Manager * Author=Winapp2.ini Project [Vivaldi Sync Data *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\Sync Data|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Sync Data * Author=Winapp2.ini Project [Vivaldi Telemetry *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\Application|debug.log FileKey2=%LocalAppData%\Vivaldi\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Vivaldi\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Vivaldi\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Vivaldi\User Data\*|*.log FileKey6=%LocalAppData%\Vivaldi\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Vivaldi\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Vivaldi\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Vivaldi\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Vivaldi\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Vivaldi\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Vivaldi\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Vivaldi\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Vivaldi\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Vivaldi\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Vivaldi\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Vivaldi\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Vivaldi\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Vivaldi\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Vivaldi\Application|debug.log FileKey21=%ProgramFiles%\Vivaldi\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Vivaldi\BlBeacon|failed_count RegKey2=HKCU\Software\Vivaldi\BlBeacon|state RegKey3=HKCU\Software\Vivaldi\Installer|LastChecked RegKey4=HKCU\Software\Vivaldi\StabilityMetrics Tags=Vivaldi,Browser ID=Vivaldi Telemetry * Author=Winapp2.ini Project [Vivaldi Web Browsing Cookies *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=Vivaldi,Browser ID=Vivaldi Web Browsing Cookies * Author=Winapp2.ini Project [Vivaldi Web Browsing History *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=Vivaldi,Browser ID=Vivaldi Web Browsing History * Author=Winapp2.ini Project [Vivaldi Web Browsing Session *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Vivaldi\User Data\*\Sessions|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Web Browsing Session * Author=Winapp2.ini Project [Vivaldi Web Storage *] DetectFile=%LocalAppData%\Vivaldi\User Data FileKey1=%LocalAppData%\Vivaldi\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Vivaldi\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Vivaldi\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Vivaldi\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Vivaldi\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Vivaldi\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Vivaldi\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Vivaldi\User Data\*\WebStorage|*|REMOVESELF Tags=Vivaldi,Browser ID=Vivaldi Web Storage * Author=Winapp2.ini Project [Vizzed Retro Game Room *] DetectFile=%UserProfile%\AppData\LocalLow\VizzedRgr FileKey1=%UserProfile%\AppData\LocalLow\VizzedRgr\Downloads|*|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\VizzedRgr\Roms|*|RECURSE Tags=ccmedia ID=Vizzed Retro Game Room * Author=Winapp2.ini Project [VLC Media Player *] DetectFile1=%AppData%\vlc DetectFile2=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a FileKey1=%AppData%\vlc|*.cache-3;ml.xspf.tmp*;vlc-qt-interface.ini.* FileKey2=%AppData%\vlc\art|*|RECURSE FileKey3=%AppData%\vlc\crashdump*|* FileKey4=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\AC|*|RECURSE FileKey5=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\LocalState|*log.txt FileKey6=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\LocalState\videoThumbs|* FileKey7=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\Settings|*.log* FileKey8=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\SystemAppData\Helium|*.log* FileKey9=%LocalAppData%\Packages\VideoLAN.VLC_paz6r1rewnh0a\TempState|*|REMOVESELF FileKey10=%ProgramFiles%\Videolan\VLC\plugins|plugins.dat.* Tags=ccmedia ID=VLC Media Player * Author=Winapp2.ini Project [VMware Personal Desktop Virtualization *] Detect1=HKLM\Software\VMware, Inc.\VMware Player Detect2=HKLM\Software\VMware, Inc.\VMware Workstation DetectFile=%UserProfile%\Documents\Virtual Machines FileKey1=%LocalAppData%\VMware|*.log FileKey2=%LocalAppData%\VMware\VMware vCenter Converter Standalone Client\Logs|*.gz;*.log FileKey3=%LocalAppData%\VMware\wdm\Logs|* FileKey4=%ProgramData%\VMware\hostd|*.gz;*.log|RECURSE FileKey5=%ProgramData%\VMware\Installer|*|REMOVESELF FileKey6=%ProgramData%\VMware\logs|*.log|RECURSE FileKey7=%ProgramData%\VMware\VMware vCenter Converter Standalone|*.gz;*.log;*.zip|RECURSE FileKey8=%UserProfile%\Documents\*Virtual Machines|*.log|RECURSE Tags=ccutil ID=VMware Personal Desktop Virtualization * Author=Winapp2.ini Project [VNCViewer *] Detect=HKU\.DEFAULT\Software\ORL\VNCviewer FileKey1=%LocalAppData%\RealVNC|*.log RegKey1=HKCU\Software\RealVNC\vncviewer\MRU RegKey2=HKU\.DEFAULT\Software\ORL\VNCviewer\MRU Tags=ccutil ID=VNCViewer * Author=Winapp2.ini Project [Vodafone *] Detect=HKCU\Software\Vodafone FileKey1=%AppData%\Vodafone\Vodafone Mobile*\Log|* FileKey2=%AppData%\Vodafone\Vodafone Mobile*\Temp|* FileKey3=%ProgramData%\Vodafone\Log|* FileKey4=%ProgramFiles%\Vodafone\Vodafone Mobile Broadband\Bin|SwiHpAux.log FileKey5=%WinDir%|ModemLog_*.txt Tags=ccinternet ID=Vodafone * Author=Winapp2.ini Project [VoiCenter *] DetectFile=%LocalAppData%\VoiCenter FileKey1=%LocalAppData%\VoiCenter\Logs|* Tags=ccinternet ID=VoiCenter * Author=Winapp2.ini Project [VoipBuster *] DetectFile=%AppData%\VoipBuster FileKey1=%AppData%\VoipBuster|*.log FileKey2=%WinDir%\System32|VoipBuster*.log FileKey3=%WinDir%\SysWOW64|VoipBuster*.log Tags=ccinternet ID=VoipBuster * Author=Winapp2.ini Project [Volkswagen DiscoverCare *] DetectFile=%UserProfile%\DiscoverCare FileKey1=%UserProfile%\DiscoverCare\Data|DiscoverCare.log Tags=ccapps ID=Volkswagen DiscoverCare * Author=Winapp2.ini Project [Vortex *] DetectFile=%AppData%\Vortex FileKey1=%AppData%\Vortex|*.log;*.tmp;Network Persistent State FileKey2=%AppData%\Vortex\*Cache|*|REMOVESELF FileKey3=%AppData%\Vortex\*Storage|*.old;LOG|RECURSE FileKey4=%AppData%\Vortex\blob_storage|*|RECURSE FileKey5=%AppData%\Vortex\Crashpad\reports|*|REMOVESELF FileKey6=%AppData%\Vortex\logs|*.log FileKey7=%AppData%\Vortex\temp|*|REMOVESELF FileKey8=%LocalAppData%\Vortex-Updater|* FileKey9=%LocalAppData%\Vortex-Updater\*|*|REMOVESELF Tags=ccapps ID=Vortex * Author=Winapp2.ini Project [VS Logon Screen Customizer *] Detect=HKCU\Software\LOKIBIT.COM\VSLogonScreenCustomizer RegKey1=HKCU\Software\LOKIBIT.COM\VSLogonScreenCustomizer|LastInputDir Tags=ccutil ID=VS Logon Screen Customizer * Author=Winapp2.ini Project [VSO *] Detect=HKCU\Software\VSO FileKey1=%AppData%|ezplay.log;pcouffin.log FileKey2=%AppData%\VSO|*.log|REMOVESELF FileKey3=%ProgramData%\VSO|*.cache;*.crashlist;*.log;*.vsothumb|RECURSE FileKey4=%ProgramData%\VSO\vsothumbs|*|REMOVESELF FileKey5=%UserProfile%|timestamp.txt FileKey6=%UserProfile%\Documents\PcSetup|*.log|REMOVESELF Tags=ccmedia ID=VSO * Author=Winapp2.ini Project [VSO Batcher *] Detect=HKCU\Software\VSO\VSO Batcher FileKey1=%AppData%\Vso\VSO Batcher\1|*|RECURSE RegKey1=HKCU\Software\VSO\VSO Batcher\1|VideoFilesLastFlder Tags=ccmedia ID=VSO Batcher * Author=Winapp2.ini Project [VSO Blindwrite *] Detect=HKCU\Software\VSO\Blindwrite FileKey1=%ProgramData%\VSO\Blindwrite\*|*.log|REMOVESELF Tags=ccapps ID=VSO Blindwrite * Author=Winapp2.ini Project [VSO Converter *] Detect1=HKCU\Software\VSO\Blu-ray Converter Ultimate Detect2=HKCU\Software\VSO\DVD Converter Ultimate Detect3=HKCU\Software\VSO\VSO Video Converter FileKey1=%ProgramData%\VSO\*Converter*\*\Log|*.crashlist;*.log|REMOVESELF FileKey2=%ProgramFiles%\VSO\*Converter*\*|*.txt RegKey1=HKCU\Software\VSO\Blu-ray Converter Ultimate\2|BDMVInputFolders RegKey2=HKCU\Software\VSO\Blu-ray Converter Ultimate\2|ISOInputFolders RegKey3=HKCU\Software\VSO\Blu-ray Converter Ultimate\2|MediaLabel RegKey4=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_audio RegKey5=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_bluray RegKey6=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_dvd RegKey7=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_iso RegKey8=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_subtitle RegKey9=HKCU\Software\VSO\Blu-ray Converter Ultimate\3|input_MRUfiles_video RegKey10=HKCU\Software\VSO\DVD Converter Ultimate\2|BDMVInputFolders RegKey11=HKCU\Software\VSO\DVD Converter Ultimate\2|ISOInputFolders RegKey12=HKCU\Software\VSO\DVD Converter Ultimate\2|MediaLabel RegKey13=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_audio RegKey14=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_bluray RegKey15=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_dvd RegKey16=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_iso RegKey17=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_subtitle RegKey18=HKCU\Software\VSO\DVD Converter Ultimate\3|input_MRUfiles_video RegKey19=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_audio RegKey20=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_bluray RegKey21=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_dvd RegKey22=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_iso RegKey23=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_subtitle RegKey24=HKCU\Software\VSO\VSO Video Converter\1|input_MRUfiles_video Tags=ccmedia ID=VSO Converter * Author=Winapp2.ini Project [VSO ConvertXToDVD *] Detect=HKCU\Software\VSO\ConvertXtoDVD FileKey1=%ProgramFiles%\VSO\ConvertX\*|*.log;*.rtf Tags=ccmedia ID=VSO ConvertXToDVD * Author=Winapp2.ini Project [VSO Downloader *] Detect=HKCU\Software\VSO\VSO Downloader FileKey1=%AppData%\VSO\VSO Downloader\*\items|*.item|RECURSE FileKey2=%ProgramData%\VSO\VSO Downloader\*\items|*.item|RECURSE FileKey3=%ProgramData%\VSO\VSO Downloader\*\log|*.log Tags=ccmedia ID=VSO Downloader * Author=Winapp2.ini Project [VSO Media Player *] Detect=HKCU\Software\VSO\VSO Media Player FileKey1=%AppData%\VSO\VSO Media Player\1|autoresume.xml FileKey2=%ProgramData%\VSO\VSO Media Player\1\log|*.crashlist;*.log RegKey1=HKCU\Software\VSO\VSO Media Player\1\RecentlyOpenedFiles Tags=ccmedia ID=VSO Media Player * Author=Winapp2.ini Project [VueScan *] DetectFile1=%ProgramFiles%\VueScan DetectFile2=%SystemDrive%\VueScan FileKey1=%ProgramFiles%\VueScan|*.log|RECURSE FileKey2=%SystemDrive%\VueScan|*.log|RECURSE Tags=ccutil ID=VueScan * Author=Winapp2.ini Project [Vuze *] Detect=HKCU\Software\Azureus FileKey1=%AppData%\Azureus|ipfilter.cache FileKey2=%AppData%\Azureus\plugins\advancedstatistics|*.txt FileKey3=%AppData%\Azureus\plugins\dasu\reports|* FileKey4=%AppData%\Azureus\plugins\progressbar|*.txt FileKey5=%AppData%\Azureus\torrents|*.tmp FileKey6=%ProgramFiles%\Vuze|*.log|RECURSE Tags=ccinternet ID=Vuze * Author=Winapp2.ini Project [W3C Amaya *] DetectFile=%UserProfile%\amaya FileKey1=%UserProfile%\amaya|list_url_utf8.dat FileKey2=%UserProfile%\amaya\*|*|REMOVESELF Tags=ccinternet ID=W3C Amaya * Author=Winapp2.ini Project [Wacom *] Detect=HKCU\Software\Wacom FileKey1=%AppData%\WTablet|*.bak FileKey2=%SystemDrive%\Wacom\Logs|* Tags=ccmedia ID=Wacom * Author=Winapp2.ini Project [Wanted Weapons of Fate *] DetectFile=%LocalAppData%\wanted FileKey1=%LocalAppData%\wanted|crash*.txt Tags=ccapps ID=Wanted Weapons of Fate * Author=Winapp2.ini Project [War Thunder *] Detect1=HKCU\Software\Gaijin\WarThunder Detect2=HKCU\Software\Valve\Steam\Apps\236390 FileKey1=%ProgramFiles%\Steam\SteamApps\common\War Thunder\.launcher_log|*.txt FileKey2=%ProgramFiles%\Steam\SteamApps\common\War Thunder\_debuginfo|*.clog FileKey3=%ProgramFiles%\War Thunder\.launcher_log|*.txt FileKey4=%ProgramFiles%\War Thunder\_debuginfo|*.clog Tags=ccapps ID=War Thunder * Author=Winapp2.ini Project [Warcraft III *] DetectFile=%ProgramFiles%\Warcraft III FileKey1=%ProgramFiles%\Warcraft III|*.html;*.log FileKey2=%ProgramFiles%\Warcraft III\Errors|*.dmp;*.txt ExcludeKey1=PATH|%ProgramFiles%\Warcraft III\|CustomKey*.txt Tags=ccapps ID=Warcraft III * Author=Winapp2.ini Project [Warcraft III Backups *] Detect=HKLM\Software\Blizzard Entertainment\Warcraft III FileKey1=%ProgramFiles%\Warcraft III|*.bak;*.old|RECURSE Tags=ccapps ID=Warcraft III Backups * Author=Winapp2.ini Project [Warframe *] Detect=HKCU\Software\Digital Extremes\Warframe FileKey1=%LocalAppData%\Warframe|*.log Tags=ccapps ID=Warframe * Author=Winapp2.ini Project [Wargaming.net GameCenter *] DetectFile=%ProgramFiles%\Wargaming.net\GameCenter FileKey1=%ProgramFiles%\Wargaming.net\GameCenter|*.bak FileKey2=%ProgramFiles%\Wargaming.net\GameCenter\Cache|*|RECURSE FileKey3=%ProgramFiles%\Wargaming.net\GameCenter\Logs|* Tags=ccapps ID=Wargaming.net GameCenter * Author=Winapp2.ini Project [Wargaming.net World of Tanks *] DetectFile=%AppData%\Wargaming.net\WorldofTanks FileKey1=%AppData%\Wargaming.net\WorldofTanks\*_Cache|*|RECURSE FileKey2=%AppData%\Wargaming.net\WorldofTanks\Profile\Cef_Cache|Visited Links FileKey3=%AppData%\Wargaming.net\WorldofTanks\Profile\Cef_Cache\blob_storage|*|RECURSE FileKey4=%AppData%\Wargaming.net\WorldofTanks\Profile\Cef_Cache\Code Cache|*|RECURSE Tags=ccapps ID=Wargaming.net World of Tanks * Author=Winapp2.ini Project [Warhammer *] Detect=HKCU\Software\Valve\Steam\Apps\4570 DetectFile=%AppData%\The Creative Assembly\Warhammer* FileKey1=%AppData%\The Creative Assembly\Warhammer*\Logs|* FileKey2=%AppData%\The Creative Assembly\Warhammer*\Temp|*.temp FileKey3=%ProgramFiles%\Steam\steamapps\common\Dawn of War Gold\Logfiles|* Tags=ccapps ID=Warhammer * Author=Winapp2.ini Project [Waterfox Autocomplete History *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|formhistory* Tags=ccapps ID=Waterfox Autocomplete History * Author=Winapp2.ini Project [Waterfox Autofill Data *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|autofill-profiles.json Tags=ccapps ID=Waterfox Autofill Data * Author=Winapp2.ini Project [Waterfox Bookmark Backups *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Waterfox Bookmark Backups * Author=Winapp2.ini Project [Waterfox Bookmark Favicons *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|favicons* Tags=ccapps ID=Waterfox Bookmark Favicons * Author=Winapp2.ini Project [Waterfox Caches *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Waterfox\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Waterfox\Profiles\*\notificationstore|* FileKey4=%AppData%\Waterfox\Profiles\*\security_state|* FileKey5=%AppData%\Waterfox\Profiles\*\shader-cache|* FileKey6=%AppData%\Waterfox\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Waterfox\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Waterfox\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Waterfox\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Waterfox Caches * Author=Winapp2.ini Project [Waterfox Privacy Sandbox *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Waterfox Privacy Sandbox * Author=Winapp2.ini Project [Waterfox Saved Usernames & Passwords *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|key4.db;logins.json Tags=ccapps ID=Waterfox Saved Usernames & Passwords * Author=Winapp2.ini Project [Waterfox Synced Tabs *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|synced-tabs.db* Tags=ccapps ID=Waterfox Synced Tabs * Author=Winapp2.ini Project [Waterfox Telemetry *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox|*.log|RECURSE FileKey2=%AppData%\Waterfox\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Waterfox\Profiles\*\crashes|* FileKey4=%AppData%\Waterfox\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Waterfox\Profiles\*\minidumps|* FileKey6=%AppData%\Waterfox\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Waterfox\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Waterfox\Profiles\*\weave\logs|* Tags=ccapps ID=Waterfox Telemetry * Author=Winapp2.ini Project [Waterfox Web Browsing Cookies *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|cookies* Tags=ccapps ID=Waterfox Web Browsing Cookies * Author=Winapp2.ini Project [Waterfox Web Browsing Session *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|session*.json* Tags=ccapps ID=Waterfox Web Browsing Session * Author=Winapp2.ini Project [Waterfox Web Browsing Session Backups *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Waterfox Web Browsing Session Backups * Author=Winapp2.ini Project [Waterfox Web Storage *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Waterfox Web Storage * Author=Winapp2.ini Project [Waterfox Website Permissions *] DetectFile=%AppData%\Waterfox\Profiles FileKey1=%AppData%\Waterfox\Profiles\*|permissions.sqlite Tags=ccapps ID=Waterfox Website Permissions * Author=Winapp2.ini Project [Watto Studios Game Extractor *] DetectFile=%ProgramFiles%\Game Extractor FileKey1=%ProgramFiles%\Game Extractor\extract|* FileKey2=%ProgramFiles%\Game Extractor\logs|* FileKey3=%ProgramFiles%\Game Extractor\previews|* FileKey4=%ProgramFiles%\Game Extractor\temp|* Tags=ccapps ID=Watto Studios Game Extractor * Author=Winapp2.ini Project [Wave Systems Corp *] DetectFile=%AppData%\Wave Systems Corp FileKey1=%AppData%\Wave Systems Corp|DSM_AM.* FileKey2=%LocalAppData%\Wave Systems Corp\WCLIENTDLL|errors.txt FileKey3=%ProgramData%\Wave Systems Corp|*.log|RECURSE Tags=ccapps ID=Wave Systems Corp * Author=Winapp2.ini Project [Wavebox Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|*Web Data FileKey2=%LocalAppData%\Waveboxapp\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Waveboxapp\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Wavebox Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Wavebox Autoplay Preferences *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Wavebox Autoplay Preferences * Author=Winapp2.ini Project [Wavebox Bookmark Backups *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|Bookmarks.bak Tags=ccapps ID=Wavebox Bookmark Backups * Author=Winapp2.ini Project [Wavebox Bookmark Favicons *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|favicons* Tags=ccapps ID=Wavebox Bookmark Favicons * Author=Winapp2.ini Project [Wavebox Caches *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Waveboxapp\User Data|Module Info Cache FileKey3=%LocalAppData%\Waveboxapp\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate FileKey4=%LocalAppData%\Waveboxapp\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Waveboxapp\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Waveboxapp\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Waveboxapp\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Waveboxapp\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Waveboxapp\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Waveboxapp\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Waveboxapp\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Waveboxapp\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Waveboxapp\User Data\*\Service Worker|*|REMOVESELF FileKey14=%LocalAppData%\Waveboxapp\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey15=%LocalAppData%\Waveboxapp\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey16=%LocalAppData%\Waveboxapp\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey17=%LocalAppData%\Waveboxapp\User Data\*Cache*|*|REMOVESELF FileKey18=%LocalAppData%\Waveboxapp\User Data\Avatars|*|REMOVESELF FileKey19=%LocalAppData%\Waveboxapp\User Data\Optimization*|*|REMOVESELF Tags=ccapps ID=Wavebox Caches * Author=Winapp2.ini Project [Wavebox Default App Handlers *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|PreferredApps Tags=ccapps ID=Wavebox Default App Handlers * Author=Winapp2.ini Project [Wavebox Download History *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Waveboxapp\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Wavebox Download History * Author=Winapp2.ini Project [Wavebox DRM Data *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey2=%LocalAppData%\Waveboxapp\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Wavebox DRM Data * Author=Winapp2.ini Project [Wavebox Extension Cookies *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|Extension Cookies Tags=ccapps ID=Wavebox Extension Cookies * Author=Winapp2.ini Project [Wavebox Pinned Tabs *] DetectFile=%LocalAppData%\Waveboxapp\User Data RegKey1=HKCU\Software\WaveboxApp\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Wavebox Pinned Tabs * Author=Winapp2.ini Project [Wavebox Privacy Sandbox *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data|*first_party_sets* FileKey2=%LocalAppData%\Waveboxapp\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Waveboxapp\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Waveboxapp\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Waveboxapp\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Waveboxapp\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Waveboxapp\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Waveboxapp\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Wavebox Privacy Sandbox * Author=Winapp2.ini Project [Wavebox Progressive Web Apps *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Wavebox Progressive Web Apps * Author=Winapp2.ini Project [Wavebox Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|Login Data* Tags=ccapps ID=Wavebox Saved Usernames & Passwords * Author=Winapp2.ini Project [Wavebox Security & Threat Detection *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|DIPS* FileKey2=%LocalAppData%\Waveboxapp\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Waveboxapp\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Waveboxapp\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Waveboxapp\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Waveboxapp\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Waveboxapp\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Waveboxapp\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Waveboxapp\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Waveboxapp\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Waveboxapp\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Waveboxapp\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Wavebox Security & Threat Detection * Author=Winapp2.ini Project [Wavebox Shopping Insights *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Waveboxapp\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Waveboxapp\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Waveboxapp\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Waveboxapp\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Wavebox Shopping Insights * Author=Winapp2.ini Project [Wavebox Storage Quota Manager *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|QuotaManager Tags=ccapps ID=Wavebox Storage Quota Manager * Author=Winapp2.ini Project [Wavebox Sync Data *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Wavebox Sync Data * Author=Winapp2.ini Project [Wavebox Telemetry *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\Application|debug.log FileKey2=%LocalAppData%\Waveboxapp\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Waveboxapp\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Waveboxapp\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Waveboxapp\User Data\*|*.log FileKey6=%LocalAppData%\Waveboxapp\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Waveboxapp\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Waveboxapp\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Waveboxapp\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Waveboxapp\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Waveboxapp\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Waveboxapp\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Waveboxapp\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Waveboxapp\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Waveboxapp\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Waveboxapp\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Waveboxapp\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Waveboxapp\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Waveboxapp\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Waveboxapp\Application|debug.log FileKey21=%ProgramFiles%\Waveboxapp\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\WaveboxApp\BlBeacon|failed_count RegKey2=HKCU\Software\WaveboxApp\BlBeacon|state RegKey3=HKCU\Software\WaveboxApp\Installer|LastChecked RegKey4=HKCU\Software\WaveboxApp\StabilityMetrics Tags=ccapps ID=Wavebox Telemetry * Author=Winapp2.ini Project [Wavebox Web Browsing Cookies *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Wavebox Web Browsing Cookies * Author=Winapp2.ini Project [Wavebox Web Browsing History *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*|History*;Network Action Predictor*;shortcuts*;Top Sites*;Visited Links* Tags=ccapps ID=Wavebox Web Browsing History * Author=Winapp2.ini Project [Wavebox Web Browsing Session *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Waveboxapp\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Wavebox Web Browsing Session * Author=Winapp2.ini Project [Wavebox Web Storage *] DetectFile=%LocalAppData%\Waveboxapp\User Data FileKey1=%LocalAppData%\Waveboxapp\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Waveboxapp\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Waveboxapp\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Waveboxapp\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Waveboxapp\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Waveboxapp\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Waveboxapp\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Waveboxapp\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Wavebox Web Storage * Author=Winapp2.ini Project [Waves Audio *] DetectFile=%AppData%\Waves Audio FileKey1=%AppData%\Waves Audio\Caches|*|RECURSE FileKey2=%AppData%\Waves Audio\Waves Central\logs|*|RECURSE FileKey3=%LocalAppData%\Waves Audio\logs|*.log* FileKey4=%LocalAppData%\Waves Audio\Waves Central\Cache\QtWebEngine\Default\Cache|* Tags=ccmedia ID=Waves Audio * Author=Winapp2.ini Project [Wavosaur *] DetectFile=%ProgramFiles%\Wavosaur FileKey1=%ProgramFiles%\Wavosaur|wavosaur.log Tags=ccmedia ID=Wavosaur * Author=Winapp2.ini Project [Weather Watcher Live *] Detect=HKCU\Software\VB and VBA Program Settings\Weather Watcher Live FileKey1=%AppData%\WeatherWatcherLive|WeatherWatcherLive.log FileKey2=%AppData%\WeatherWatcherLive\LatestChanges|* FileKey3=%AppData%\WeatherWatcherLive\Temp|* Tags=ccapps ID=Weather Watcher Live * Author=Winapp2.ini Project [WebP Codec *] DetectFile=%ProgramFiles%\WebP Codec FileKey1=%ProgramFiles%\WebP Codec\Example Files|*|REMOVESELF Tags=ccmedia ID=WebP Codec * Author=Winapp2.ini Project [Webroot SecureAnywhere *] DetectFile1=%ProgramFiles%\Webroot DetectFile2=%UserProfile%\AppData\LocalLow\Webroot FileKey1=%AppData%\Local\Temp\lptmp*|*|REMOVESELF FileKey2=%LocalAppData%\lptmp*|*|REMOVESELF FileKey3=%ProgramData%\WRData|WRLog.log Tags=ccutil ID=Webroot SecureAnywhere * Author=Winapp2.ini Project [WebTorrent *] DetectFile=%AppData%\WebTorrent FileKey1=%AppData%\WebTorrent\*Cache|* FileKey2=%LocalAppData%\WebTorrent|*.log Tags=ccinternet ID=WebTorrent * Author=Winapp2.ini Project [West of Loathing *] Detect=HKCU\Software\Valve\Steam\Apps\597220 FileKey1=%UserProfile%\AppData\LocalLow\Asymmetric Software\West of Loathing|*output_log.txt FileKey2=%UserProfile%\AppData\LocalLow\Asymmetric Software\West of Loathing\Crashes|* Tags=ccapps ID=West of Loathing * Author=Winapp2.ini Project [Western Digital Dashboard *] Detect=HKLM\SOFTWARE\Western Digital\SSD Dashboard FileKey1=%LocalAppData%\Western Digital\Dashboard\cache\QtWebEngine\Default\Cache|*|RECURSE FileKey2=%LocalAppData%\Western Digital\Dashboard\QtWebEngine\Default|*.old FileKey3=%LocalAppData%\Western Digital\Dashboard\QtWebEngine\Default\GPUCache|*|RECURSE FileKey4=%ProgramFiles%\Western Digital\SSD Dashboard|dashboard.log Tags=ccutil ID=Western Digital Dashboard * Author=Winapp2.ini Project [Western Digital SmartWare *] DetectFile=%ProgramData%\Western Digital FileKey1=%AppData%\Western Digital\WD SmartWare\Logs|* FileKey2=%LocalAppData%\Western Digital\WD SmartWare|*log.txt FileKey3=%ProgramData%\Western Digital\Logs\WD *\*|*.log FileKey4=%ProgramData%\Western Digital\Logs\WD Firmware Updater|*|REMOVESELF FileKey5=%ProgramData%\Western Digital\WD SmartWare|*.log FileKey6=%ProgramData%\Western Digital\WDFME|* FileKey7=%Public%\Documents\Downloads\WD_SmartWare_Installer_*|*|REMOVESELF Tags=ccutil ID=Western Digital SmartWare * Author=Winapp2.ini Project [WhatPulse *] Detect=HKCU\Software\WhatPulse FileKey1=%AppData%\WhatPulse|*.bak;*.log Tags=ccapps ID=WhatPulse * Author=Winapp2.ini Project [WhatsApp *] DetectFile=%LocalAppData%\WhatsApp FileKey1=%AppData%\WhatsApp|*.log*;*_log.txt;Network Persistent State;QuotaManager FileKey2=%AppData%\WhatsApp|*-journal;*.old;LOG|RECURSE FileKey3=%AppData%\WhatsApp\*Cache|*|RECURSE FileKey4=%AppData%\WhatsApp\blob_storage|*|RECURSE FileKey5=%AppData%\WhatsApp\Crashpad\Reports|* FileKey6=%AppData%\WhatsApp\Logs|* FileKey7=%AppData%\WhatsApp\Service Worker\*Cache*|*|RECURSE FileKey8=%AppData%\WhatsApp\VideoDecodeStats|* FileKey9=%LocalAppData%\WhatsApp|*.log FileKey10=%LocalAppData%\WhatsApp\app-*|*.log FileKey11=%LocalAppData%\WhatsApp\packages\SquirrelTemp|*|REMOVESELF Tags=ccinternet ID=WhatsApp * Author=Winapp2.ini Project [wherewhere App Installer (Mobile) *] DetectFile=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r FileKey1=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r\LocalState\MetroLogs|* FileKey3=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r\Settings|*.log* FileKey4=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\18184wherewhere.AndroidAppInstaller_4v4sx105x6y4r\TempState|*|REMOVESELF Tags=ccutil ID=wherewhere App Installer (Mobile) * Author=Winapp2.ini Project [Who Pressed Mute On Uncle Marcus *] DetectFile=%UserProfile%\AppData\LocalLow\Wales Interactive\Who Pressed Mute On Uncle Marcus FileKey1=%UserProfile%\AppData\LocalLow\Wales Interactive\Who Pressed Mute On Uncle Marcus|*.log FileKey2=%UserProfile%\AppData\LocalLow\Wales Interactive\Who Pressed Mute On Uncle Marcus_\Unity|*|REMOVESELF Tags=ccapps ID=Who Pressed Mute On Uncle Marcus * Author=Winapp2.ini Project [Whoer VPN *] DetectFile=%ProgramFiles%\Whoer FileKey1=%ProgramFiles%\Whoer|log.txt Tags=ccinternet ID=Whoer VPN * Author=Winapp2.ini Project [Who's On My WiFi *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{010D45A1-093D-4534-8147-4E10E80F81CC}_is1 FileKey1=%ProgramFiles%\IO3O LLC\Who Is On My Wifi\logs|* Tags=ccinternet ID=Who's On My WiFi * Author=Winapp2.ini Project [WhySoSlow *] Detect=HKCU\Software\Resplendence Sp\WhySoSlow FileKey1=%LocalAppData%\Resplendence|WhySoSlowLog.txt Tags=ccutil ID=WhySoSlow * Author=Winapp2.ini Project [WildTangent *] DetectFile=%AppData%\WildTangent FileKey1=%AppData%\WildTangent\Logs|* Tags=ccapps ID=WildTangent * Author=Winapp2.ini Project [Win Movie Maker *] DetectFile=%AppData%\VideoWinSoft FileKey1=%AppData%\VideoWinSoft|format_his.db FileKey2=%AppData%\VideoWinSoft\logs|*|RECURSE Tags=ccmedia ID=Win Movie Maker * Author=Winapp2.ini Project [WinAce *] Detect=HKU\.DEFAULT\Software\e-merge\WinAce\2.0 DetectFile=%ProgramFiles%\WinAce FileKey1=%ProgramFiles%\WinAce|*.cnt;*.log RegKey1=HKU\.DEFAULT\Software\e-merge\WinAce\2.0\MRU Items Tags=ccutil ID=WinAce * Author=Winapp2.ini Project [Winaero Tweaker *] Detect=HKCU\Software\Winaero.com\Winaero Tweaker RegKey1=HKCU\Software\Winaero.com\Winaero Tweaker|SetupDir Tags=ccutil ID=Winaero Tweaker * Author=Winapp2.ini Project [Winamp *] Detect1=HKCU\Software\Streamripper Detect2=HKCU\Software\Winamp FileKey1=%AppData%\Streamripper|*|REMOVESELF FileKey2=%AppData%\Winamp\Plugins|*.dmp;*.log;feedback.ini;report.zip FileKey3=%AppData%\Winamp\Plugins\ml|ml_pmp_device_*.ini;recent.dat;recent.idx FileKey4=%ProgramFiles%\Winamp|*log.txt FileKey5=%ProgramFiles%\Winamp\Plugins|*.log FileKey6=%ProgramFiles%\Winamp\Plugins\ml|ml_pmp_device_*.ini;recent.dat;recent.idx Tags=ccmedia ID=Winamp * Author=Winapp2.ini Project [Winamp Current Playlist *] Detect=HKCU\Software\Winamp FileKey1=%AppData%\Winamp|Winamp.m3u;Winamp.m3u8 Tags=ccmedia ID=Winamp Current Playlist * Author=Winapp2.ini Project [Winamp Playlist Undo Plug-in *] DetectFile=%ProgramFiles%\Winamp\Plugins\gen_undo.dll FileKey1=%AppData%\Winamp\Plugins|undo.gul FileKey2=%AppData%\Winamp\Plugins\gen_undo|*.m3u8 Tags=ccmedia ID=Winamp Playlist Undo Plug-in * Author=Winapp2.ini Project [WinAVI Video Converter *] Detect=HKCU\Software\ZjSoft\WinAVI FileKey1=%LocalAppData%\winavi|debug.log Tags=ccmedia ID=WinAVI Video Converter * Author=Winapp2.ini Project [WinCHM *] Detect=HKCU\Software\Softany\WinCHM RegKey1=HKCU\Software\Softany\WinCHM|RecentFile1 RegKey2=HKCU\Software\Softany\WinCHM|RecentFile2 RegKey3=HKCU\Software\Softany\WinCHM|RecentFile3 RegKey4=HKCU\Software\Softany\WinCHM|RecentFile4 RegKey5=HKCU\Software\Softany\WinCHM|RecentFile5 RegKey6=HKCU\Software\Softany\WinCHM|RecentFile6 Tags=ccapps ID=WinCHM * Author=Winapp2.ini Project [WinDjView *] Detect=HKCU\Software\Andrew Zhezherun\WinDjView RegKey1=HKCU\Software\Andrew Zhezherun\WinDjView\Documents RegKey2=HKCU\Software\Andrew Zhezherun\WinDjView\Recent File List Tags=ccutil ID=WinDjView * Author=Winapp2.ini Project [Windows 7 Manager *] Detect=HKCU\Software\Yamicsoft\Windows 7 Manager FileKey1=%ProgramFiles%\Yamicsoft\Windows 7 Manager\DiskAnalyzerXML|* Tags=ccutil ID=Windows 7 Manager * Author=Winapp2.ini Project [Windows Activity History *] Detect=HKCU\Software\Microsoft\Windows Warning=You need to run this in Windows Safe Mode. Or stop services "Connected Devices Platform Service" and "Connected Devices Platform User Service_xxxxx" prior to cleaning and restart after cleaning. FileKey1=%LocalAppData%\ConnectedDevicesPlatform\*|*.db* Tags=ccwindows ID=Windows Activity History * Author=Winapp2.ini Project [Windows AutoPlay Devices *] Detect=HKCU\Software\Microsoft\Windows RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\KnownDevices Tags=ccwindows ID=Windows AutoPlay Devices * Author=Winapp2.ini Project [Windows Calculator *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Calculator * Author=Winapp2.ini Project [Windows Camera *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\LocalState\AppData|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Camera_8wekyb3d8bbwe\SearchHistory Tags=ccwindows ID=Windows Camera * Author=Winapp2.ini Project [Windows CD Burning Queue *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning FileKey1=%LocalAppData%\Microsoft\CD Burning|*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows\Burn|*|RECURSE RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\StagingInfo Tags=ccwindows ID=Windows CD Burning Queue * Author=Winapp2.ini Project [Windows Clock *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\LocalState|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Clock * Author=Winapp2.ini Project [Windows Credential Manager Saved Credentials *] DetectFile=%LocalAppData%\Microsoft\Vault FileKey1=%LocalAppData%\Microsoft\Vault\*|*.vcrd Tags=ccwindows ID=Windows Credential Manager Saved Credentials * Author=Winapp2.ini Project [Windows Cryptographic Services *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%UserProfile%\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*|RECURSE FileKey2=%UserProfile%\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*|RECURSE FileKey3=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*|RECURSE FileKey4=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*|RECURSE FileKey5=%WinDir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*|RECURSE FileKey6=%WinDir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*|RECURSE FileKey7=%WinDir%\System32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content|*|RECURSE FileKey8=%WinDir%\System32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData|*|RECURSE FileKey9=%WinDir%\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*|RECURSE FileKey10=%WinDir%\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*|RECURSE Tags=ccwindows ID=Windows Cryptographic Services * Author=Winapp2.ini Project [Windows Device Manager *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%WinDir%\INF|INFCACHE.1 FileKey2=%WinDir%\System32\DriverStore|INFCACHE.1 Tags=ccwindows ID=Windows Device Manager * Author=Winapp2.ini Project [Windows Error Reporting *] Detect=HKCU\Software\Microsoft\Windows\Windows Error Reporting FileKey1=%LocalAppData%\CrashDumps|*dmp* FileKey2=%LocalAppData%\PCHealth\ErrorRep\QSignoff|* FileKey3=%ProgramData%\Microsoft\Windows\WER\ReportArchive|*|REMOVESELF FileKey4=%ProgramData%\Microsoft\Windows\WER\Temp|*|RECURSE FileKey5=%WinDir%\*LOCALAPPDATA*\CrashDumps|*dmp* FileKey6=%WinDir%\LiveKernelReports|*.dmp|RECURSE FileKey7=%WinDir%\pchealth\ERRORREP|*|RECURSE FileKey8=%WinDir%\pchealth\helpctr\DataColl|*.xml FileKey9=%WinDir%\pchealth\helpctr\OfflineCache|*|RECURSE FileKey10=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\CrashDumps|* FileKey11=%WinDir%\System32\config\systemprofile\AppData\Local\CrashDumps|*.dmp|RECURSE FileKey12=%WinDir%\System32\config\systemprofile\AppData\Local\CrashDumps|*dmp* FileKey13=%WinDir%\System32\config\systemprofile\Local Settings\Application Data\CrashDumps|*.dmp|RECURSE FileKey14=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\CrashDumps|*.dmp|RECURSE FileKey15=%WinDir%\SysWOW64\config\systemprofile\Local Settings\Application Data\CrashDumps|*.dmp|RECURSE RegKey1=HKCU\Software\Microsoft\Windows\Windows Error Reporting\Debug|StoreLocation RegKey2=HKLM\Software\Microsoft\Windows\Windows Error Reporting\Debug|StoreLocation RegKey3=HKLM\Software\Microsoft\Windows\Windows Error Reporting\FullLiveKernelReports|LastFullLiveReport RegKey4=HKLM\Software\Microsoft\Windows\Windows Error Reporting\FullLiveKernelReports\win32k.sys RegKey5=HKLM\Software\Microsoft\Windows\Windows Error Reporting\LiveKernelReports\win32k.sys RegKey6=HKLM\Software\Microsoft\Windows\Windows Error Reporting\LocalDumps RegKey7=HKU\.DEFAULT\Software\Microsoft\Windows\Windows Error Reporting\Debug|StoreLocation Tags=ccwindows ID=Windows Error Reporting * Author=Winapp2.ini Project [Windows Event Logs *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%LocalAppData%\Microsoft\Windows\Explorer|*.etl FileKey2=%ProgramData%\Microsoft\Windows\wfp|*.etl FileKey3=%ProgramData%\USOShared\Logs|*.etl|RECURSE FileKey4=%ProgramFiles%\CUAssistant\Logs|*.etl FileKey5=%ProgramFiles%\rempl\Logs|*.etl FileKey6=%WinDir%\INF|*.etl FileKey7=%WinDir%\Logs|*.etl|RECURSE FileKey8=%WinDir%\Panther|*.etl FileKey9=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs|*|RECURSE FileKey10=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer|ExplorerStartupLog.etl FileKey11=%WinDir%\System32\config\systemprofile\AppData\Local\Packages\Microsoft.GamingServices*\LocalState|*.etl FileKey12=%WinDir%\System32\Logs|*.etl FileKey13=%WinDir%\System32\NDF|*.etl FileKey14=%WinDir%\System32\SleepStudy|*.etl|RECURSE FileKey15=%WinDir%\System32\WDI\*|*.etl*|RECURSE FileKey16=%WinDir%\System32\winevt\logs|* FileKey17=%WinDir%\Temp|*.evt* Tags=ccwindows ID=Windows Event Logs * Author=Winapp2.ini Project [Windows Event Viewer *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%LocalAppData%\Microsoft\Event Viewer|RecentViews FileKey2=%ProgramData%\Microsoft\Event Viewer\*Logs|*.xml Tags=ccwindows ID=Windows Event Viewer * Author=Winapp2.ini Project [Windows Feedback Hub *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir|*.txt FileKey5=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Feedback Hub * Author=Winapp2.ini Project [Windows File Manager *] DetectFile1=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy DetectFile2=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalCache\Local\*|*|REMOVESELF FileKey3=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\*|*|RECURSE FileKey4=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalCache\LocalLow\Temp|*|RECURSE FileKey5=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalCache\Roaming\*|*|REMOVESELF FileKey6=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalCache\Temp|*|REMOVESELF FileKey7=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\LocalState|*.jpg FileKey8=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\Settings|*.log* FileKey9=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\FileManager_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey11=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\AC|*|RECURSE FileKey12=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\LocalCache\Local\*|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\*|*|RECURSE FileKey14=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\LocalCache\LocalLow\Temp|*|RECURSE FileKey15=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\LocalCache\Roaming\*|*|REMOVESELF FileKey16=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\LocalCache\Temp|*|REMOVESELF FileKey17=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\Settings|*.log* FileKey18=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey19=%LocalAppData%\Packages\Microsoft.WindowsFileManager_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccutil ID=Windows File Manager * Author=Winapp2.ini Project [Windows Font Cache *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%LocalAppData%|GDIPFONTCACHEV1.DAT FileKey2=%SystemDrive%\Documents and Settings\LocalService\Local Settings\Application Data|*FontCache*.dat FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\Local|*FontCache*.dat FileKey4=%WinDir%\ServiceProfiles\LocalService\AppData\Local\FontCache|*FontCache*.dat FileKey5=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Fonts|*.tmp Tags=ccwindows ID=Windows Font Cache * Author=Winapp2.ini Project [Windows Game Statistics *] DetectFile=%LocalAppData%\Microsoft Games FileKey1=%LocalAppData%\Microsoft Games|*.xml*|RECURSE Tags=ccwindows ID=Windows Game Statistics * Author=Winapp2.ini Project [Windows Get Help *] DetectFile1=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey9=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey10=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\Settings|*.log* FileKey11=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey12=%LocalAppData%\Packages\Windows.ContactSupport_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Get Help * Author=Winapp2.ini Project [Windows Grep *] Detect=HKCU\Software\Windows Grep\Windows Grep RegKey1=HKCU\Software\Windows Grep\Windows Grep\Current Version\Replace Options|Replace String RegKey2=HKCU\Software\Windows Grep\Windows Grep\Current Version\Search Dialog\Filespecs RegKey3=HKCU\Software\Windows Grep\Windows Grep\Current Version\Search Dialog\Folders RegKey4=HKCU\Software\Windows Grep\Windows Grep\Current Version\Search Dialog\Strings Tags=ccutil ID=Windows Grep * Author=Winapp2.ini Project [Windows Image Acquisition *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\WIA FileKey1=%AppData%\Microsoft\Document Center\UserScanProfiles|* FileKey2=%LocalAppData%\Microsoft\UserScanProfiles|* FileKey3=%UserProfile%|Sti_Trace.log RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\WIA Tags=ccwindows ID=Windows Image Acquisition * Author=Winapp2.ini Project [Windows Installer *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Installer FileKey1=%SystemDrive%\Config.msi|*|REMOVESELF FileKey2=%WinDir%\Installer|*.tmp|RECURSE FileKey3=%WinDir%\Installer|SourceHash{*};wix{*}.SchedServiceConfig.rmi FileKey4=%WinDir%\Installer\Config.Msi|*|REMOVESELF FileKey5=%WinDir%\Installer\MSI*.tmp-|*|REMOVESELF FileKey6=%WinDir%\System32\config\systemprofile\AppData\Local|*.tmp|RECURSE Tags=ccwindows ID=Windows Installer * Author=Winapp2.ini Project [Windows Language Libraries *] DetectFile1=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe DetectFile3=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe DetectFile4=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe DetectFile5=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe DetectFile6=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe DetectFile7=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe DetectFile8=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.VCLibs.110.00.UWPDesktop_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\Settings|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey12=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey13=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\AC|*|RECURSE FileKey14=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey15=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey16=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\Settings|*.log* FileKey17=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey18=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey19=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\AC|*|RECURSE FileKey20=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey21=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey22=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\Settings|*.log* FileKey23=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey24=%LocalAppData%\Packages\Microsoft.VCLibs.120.00.UWPDesktop_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey25=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\AC|*|RECURSE FileKey26=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey27=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey28=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\Settings|*.log* FileKey29=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey30=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey31=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\AC|*|RECURSE FileKey32=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey33=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey34=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\Settings|*.log* FileKey35=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey36=%LocalAppData%\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey37=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\AC|*|RECURSE FileKey38=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey39=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey40=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\Settings|*.log* FileKey41=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey42=%LocalAppData%\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey43=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\AC|*|RECURSE FileKey44=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\LocalState\*Cache|*|RECURSE FileKey45=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey46=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\Settings|*.log* FileKey47=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey48=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey49=%SystemDrive%|eula.*.txt;globdata.ini;install.exe;install.ini;install.res.*.dll;vcredist.bmp;VC_RED.cab;VC_RED.MSI Tags=ccwindows ID=Windows Language Libraries * Author=Winapp2.ini Project [Windows Lock Screen *] DetectFile1=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy DetectFile2=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.LockApp_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey7=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Favicons|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\MobilityExperience\ImageCache|*|RECURSE FileKey11=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\OneSettingsResponseCache|*|RECURSE FileKey12=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache|*|RECURSE FileKey13=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings|*.log* FileKey14=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey15=%LocalAppData%\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\TempState|*|REMOVESELF RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps Tags=ccwindows ID=Windows Lock Screen * Author=Winapp2.ini Project [Windows Logs *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%LocalAppData%\ConnectedDevicesPlatform|*.log FileKey2=%LocalAppData%\Diagnostics|*|RECURSE FileKey3=%LocalAppData%\Microsoft\Dialer|*.log.txt FileKey4=%LocalAppData%\Microsoft\msipc\Logs|* FileKey5=%LocalAppData%\Microsoft\Portable Devices|wpdlog*.sqm FileKey6=%ProgramData%\Microsoft\Diagnosis\DownloadedSettings|*.json.bk FileKey7=%ProgramData%\Microsoft\Diagnosis\ETLLogs|*|RECURSE FileKey8=%ProgramData%\Microsoft\DiagnosticLogCSP|*|RECURSE FileKey9=%ProgramData%\Microsoft\Network\Downloader|*|RECURSE FileKey10=%ProgramData%\Microsoft\WDF|*|RECURSE FileKey11=%ProgramData%\Microsoft\Windows Security Health\Logs|*|RECURSE FileKey12=%ProgramData%\USOShared\Logs|*|RECURSE FileKey13=%ProgramData%\Whesvc\sys_perf_summary\sys_perf_input_delays|* FileKey14=%ProgramFiles%\UNP\*Logs|* FileKey15=%SystemDrive%|DumpStack.log FileKey16=%SystemDrive%\PerfLogs\System\Diagnostics|*|RECURSE FileKey17=%SystemDrive%\PerfLogs\System\Performance|*|RECURSE FileKey18=%WinDir%|*.log FileKey19=%WinDir%\AppCompat\Backup|*.json FileKey20=%WinDir%\AppCompat\pca|*.txt FileKey21=%WinDir%\AppCompat\Programs|*.txt;*.xml FileKey22=%WinDir%\AppCompat\Programs\Install|*.txt;*.xml FileKey23=%WinDir%\debug|*.log|RECURSE FileKey24=%WinDir%\INF|*.log* FileKey25=%WinDir%\Logs|*.log|RECURSE FileKey26=%WinDir%\Logs\CBS|*.cab FileKey27=%WinDir%\Panther|*.tmp;*GatherPnPList.log;cbs.log;DDACLSys.log;miglog.xml;Migrep.html;setup*.log FileKey28=%WinDir%\Panther\FastCleanup|*.log FileKey29=%WinDir%\Panther\Rollback|*.txt FileKey30=%WinDir%\Panther\UnattendGC|diag*.xml;setup*.log FileKey31=%WinDir%\repair|setup.log FileKey32=%WinDir%\security\logs|*|RECURSE FileKey33=%WinDir%\ServiceProfiles\NetworkService\debug|*.log FileKey34=%WinDir%\System32\CatRoot|*.tmp FileKey35=%WinDir%\System32\CatRoot_bak|*|REMOVESELF FileKey36=%WinDir%\System32\catroot2|*.chk;*.jrs;*.log;*.txt FileKey37=%WinDir%\System32\config\systemprofile\AppData\Local\DataSharing\Storage|*.log FileKey38=%WinDir%\System32\LogFiles|*|RECURSE FileKey39=%WinDir%\System32\sysprep\Panther\IE|*.log;diagerr.xml;diagwrn.xml FileKey40=%WinDir%\System32\WDI\LogFiles\StartupInfo|*|RECURSE FileKey41=%WinDir%\Temp|*.log RegKey1=HKLM\Software\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications RegKey2=HKLM\Software\Microsoft\Tracing RegKey3=HKLM\Software\Wow6432Node\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications RegKey4=HKLM\Software\Wow6432Node\Microsoft\Tracing Tags=ccwindows ID=Windows Logs * Author=Winapp2.ini Project [Windows Mail *] Detect=HKCU\Software\Microsoft\Windows Mail FileKey1=%LocalAppData%\Microsoft\Windows Mail|*.chk;*.jrs;*.log|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows Mail\Backup\Old|*|REMOVESELF Tags=ccinternet ID=Windows Mail * Author=Winapp2.ini Project [Windows Mail and Calendar *] DetectFile=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe FileKey1=%LocalAppData%\Comms\Unistore\data|AggregateCache.uca FileKey2=%LocalAppData%\Comms\UnistoreDB|*.jcp;*.jrs;*.jtx FileKey3=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey5=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState|*.etl;*.jpg;*.log FileKey6=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\*\WebServiceCache|*|RECURSE FileKey7=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Livecomm\*\dbStore\LogFiles|* FileKey8=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings|*.log* FileKey9=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\SearchHistory Tags=ccwindows ID=Windows Mail and Calendar * Author=Winapp2.ini Project [Windows Media Extensions *] DetectFile1=%LocalAppData%\Packages\Microsoft.AV1VideoExtension_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe DetectFile3=%LocalAppData%\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe DetectFile4=%LocalAppData%\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe DetectFile5=%LocalAppData%\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe DetectFile6=%LocalAppData%\Packages\Microsoft.RawImageExtension_8wekyb3d8bbwe DetectFile7=%LocalAppData%\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe DetectFile8=%LocalAppData%\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe DetectFile9=%LocalAppData%\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.*extension*\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.*extension*\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.*extension*\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.*extension*\TempState|*|RECURSE Tags=ccwindows ID=Windows Media Extensions * Author=Winapp2.ini Project [Windows Media Player *] DetectFile=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe FileKey1=%LocalAppData%|DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini FileKey2=%LocalAppData%\Microsoft\Media Player\*Cache*|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalCache\Image|*|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalCache\PlayReady|*|RECURSE FileKey6=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState|*.db*;*.tmp;AppState.json* FileKey7=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\*|*.log FileKey8=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageRetrievalFailure|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageStore|*|RECURSE FileKey11=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\navigationHistory|*|RECURSE FileKey12=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\PlayReady|*|RECURSE FileKey13=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings|*.log* FileKey14=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey15=%LocalAppData%\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.ZuneMusic_8wekyb3d8bbwe\SearchHistory RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|OpenDir RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|CDRecordPath RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|MostRecentFileAddOrRemove RegKey5=HKCU\Software\Microsoft\MediaPlayer\Preferences|ObfuscatedSyncPlaylistsPath RegKey6=HKCU\Software\Microsoft\MediaPlayer\Services\Bing|CachedIconPath RegKey7=HKCU\Software\Microsoft\MediaPlayer\Services\Bing|CachedLargeLogoPath RegKey8=HKCU\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source RegKey9=HKU\.DEFAULT\Software\Microsoft\MediaPlayer\Player\RecentFileList RegKey10=HKU\S-1-5-18\Software\Microsoft\MediaPlayer\Preferences|ObfuscatedSyncPlaylistsPath Tags=ccmedia ID=Windows Media Player * Author=Winapp2.ini Project [Windows Metafile Viewer *] Detect=HKCU\Software\Metafile Viewer\WMF Viewer RegKey1=HKCU\Software\Metafile Viewer\WMF Viewer\Recent File List Tags=ccmedia ID=Windows Metafile Viewer * Author=Winapp2.ini Project [Windows Notepad *] Detect=HKCU\Software\Microsoft\Notepad DetectFile=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\LocalState\*State|*.bin FileKey3=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Microsoft\Notepad|iWindowPosDX RegKey2=HKCU\Software\Microsoft\Notepad|iWindowPosDY RegKey3=HKCU\Software\Microsoft\Notepad|iWindowPosX RegKey4=HKCU\Software\Microsoft\Notepad|iWindowPosY RegKey5=HKCU\Software\Microsoft\Notepad|replaceString RegKey6=HKCU\Software\Microsoft\Notepad|searchString Tags=ccwindows ID=Windows Notepad * Author=Winapp2.ini Project [Windows Notifications *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%LocalAppData%\Microsoft\Windows\ActionCenterCache|*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows\Notifications|WPN* FileKey3=%LocalAppData%\Microsoft\Windows\Notifications\wpnidm|*|RECURSE FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications|WPN* FileKey5=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpnidm|*|RECURSE RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Action Center\Providers\EventLog RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm RegKey3=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm Tags=ccwindows ID=Windows Notifications * Author=Winapp2.ini Project [Windows Package Manager *] DetectFile=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputDir|* FileKey3=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Package Manager * Author=Winapp2.ini Project [Windows Password Reset Audit *] DetectFile=%ProgramFiles%\WPRAudit FileKey1=%UserProfile%\Documents|Splash.htm;WPRF.htm Tags=ccutil ID=Windows Password Reset Audit * Author=Winapp2.ini Project [Windows Photo Gallery *] Detect=HKCU\Software\Microsoft\Windows Photo Gallery RegKey1=HKCU\Software\Microsoft\Windows Photo Gallery\Library\PreviewAssignment\MRU RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\Camera|FilenameTemplate RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\Camera|RootDirectory RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\DestinationMru RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\OpticalMedia|FilenameTemplate RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\OpticalMedia|RootDirectory RegKey7=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\Scanner|FilenameTemplate RegKey8=HKCU\Software\Microsoft\Windows\CurrentVersion\Photo Aquisition\Scanner|RootDirectory Tags=ccmedia ID=Windows Photo Gallery * Author=Winapp2.ini Project [Windows Photo Viewer *] DetectFile=%AppData%\Microsoft\Windows Photo Viewer FileKey1=%AppData%\Microsoft\Windows Photo Viewer|* Tags=ccwindows ID=Windows Photo Viewer * Author=Winapp2.ini Project [Windows Photos *] DetectFile1=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState|*.etl;*.jpg;*.log;*.sqlite*;*.xml FileKey4=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\bici|*.sqm FileKey5=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppTile|*|RECURSE FileKey6=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey8=%LocalAppData%\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey9=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\AC|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey11=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\LocalState|*.etl;*.jpg;*.log;*.sqlite*;*.xml FileKey12=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\LocalState\bici|*.sqm FileKey13=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\LocalState\PhotosAppTile|*|RECURSE FileKey14=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\Settings|*.log* FileKey15=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey16=%LocalAppData%\Packages\Microsoft.Windows.Photos_cw5n1h2txyewy\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Photos_8wekyb3d8bbwe\PersistedPickerData\Microsoft.Windows.Photos_8wekyb3d8bbwe!App\DefaultSaveFileSingle RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Photos_8wekyb3d8bbwe\PersistedStorageItemTable\ManagedByApp RegKey3=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Photos_8wekyb3d8bbwe\PersistedStorageItemTable\MostRecentlyUsed RegKey4=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowsphotos_8wekyb3d8bbwe\SearchHistory Tags=ccwindows ID=Windows Photos * Author=Winapp2.ini Project [Windows Power Efficiency Diagnostics *] DetectFile=%ProgramData%\Microsoft\Windows\Power Efficiency Diagnostics FileKey1=%ProgramData%\Microsoft\Windows\Power Efficiency Diagnostics|*.xml FileKey2=%WinDir%\System32|battery-report.html;energy-report.html ExcludeKey1=FILE|%ProgramData%\Microsoft\Windows\Power Efficiency Diagnostics\|energy-report-latest.xml Tags=ccwindows ID=Windows Power Efficiency Diagnostics * Author=Winapp2.ini Project [Windows PowerShell *] Detect=HKLM\Software\Microsoft\PowerShell FileKey1=%AppData%\Microsoft\Windows\PowerShell\PSReadline|*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows\PowerShell|ModuleAnalysisCache*;StartupProfileData* FileKey3=%LocalAppData%\Microsoft\Windows\PowerShell\CommandAnalysis|*|RECURSE FileKey4=%LocalAppData%\Microsoft_Corporation\PowerShell_ISE.exe_*\*|user.config FileKey5=%LocalAppData%\Microsoft_Corporation\PowerShell_ISE.exe_*\*\AutoSaveFiles|*|RECURSE FileKey6=%LocalAppData%\Microsoft_Corporation\PowerShell_ISE.exe_*\*\AutoSaveInformation|*|RECURSE FileKey7=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell|ModuleAnalysisCache*;StartupProfileData* Tags=ccwindows ID=Windows PowerShell * Author=Winapp2.ini Project [Windows Printing *] Detect=HKCU\Software\Microsoft\Windows DetectFile=%LocalAppData%\Packages\Windows.PrintDialog_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Windows.PrintDialog_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings|*.log* FileKey3=%LocalAppData%\Packages\Windows.PrintDialog_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Windows.PrintDialog_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey5=%SystemDrive%\spoolerlogs|spooler.xml FileKey6=%WinDir%\System32\spool|spooler.xml FileKey7=%WinDir%\System32\Spool\Printers|* Tags=ccwindows ID=Windows Printing * Author=Winapp2.ini Project [Windows Program Compatibility Assistant *] Detect=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant FileKey1=%WinDir%\appcompat\Programs|*.log* RegKey1=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted RegKey2=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store RegKey3=HKLM\System\CurrentControlSet\Control\Session Manager\AppCompatCache|AppCompatCache RegKey4=HKLM\System\CurrentControlSet\Control\Session Manager\AppCompatCache|CacheMainSdb RegKey5=HKLM\System\CurrentControlSet\Control\Session Manager\AppCompatCache|SdbTime RegKey6=HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted RegKey7=HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store Tags=ccwindows ID=Windows Program Compatibility Assistant * Author=Winapp2.ini Project [Windows Recent Documents *] Detect=HKCU\Software\Microsoft\Windows RegKey1=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs RegKey2=HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs RegKey3=HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs RegKey4=HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs Tags=ccwindows ID=Windows Recent Documents * Author=Winapp2.ini Project [Windows Recent Wallpaper Locations *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers\Images|ID0 RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers\Images|ID1 RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers\Images|ID2 RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers\Images|ID3 Tags=ccwindows ID=Windows Recent Wallpaper Locations * Author=Winapp2.ini Project [Windows Recycle Bin *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%SystemDrive%\$Recycle.Bin|*|RECURSE Tags=ccwindows ID=Windows Recycle Bin * Author=Winapp2.ini Project [Windows Registry Editor *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit RegKey1=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey RegKey2=HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey Tags=ccwindows ID=Windows Registry Editor * Author=Winapp2.ini Project [Windows Remote Desktop Saved Connections *] Detect=HKCU\Software\Microsoft\Terminal Server Client FileKey1=%UserProfile%\Documents|default.rdp Tags=ccwindows ID=Windows Remote Desktop Saved Connections * Author=Winapp2.ini Project [Windows Retail Demo *] DetectFile=%ProgramData%\Microsoft\Windows\RetailDemo FileKey1=%ProgramData%\Microsoft\Windows\RetailDemo|*|REMOVESELF Tags=ccwindows ID=Windows Retail Demo * Author=Winapp2.ini Project [Windows Scan *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsScan_8wekyb3d8bbwe\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsScan_8wekyb3d8bbwe\PersistedStorageItemTable\ManagedByApp Tags=ccwindows ID=Windows Scan * Author=Winapp2.ini Project [Windows Search *] Detect=HKCU\Software\Microsoft\Windows DetectFile=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache|*.tmp;*.txt FileKey5=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\Settings|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey7=%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey8=%ProgramData%\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex|*|RECURSE FileKey9=%UserProfile%\Searches|*.search-ms;*.searchconnector-ms RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Bing_8wekyb3d8bbwe\SearchHistory RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchHistory RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\Search\RecentApps ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\|SettingsCache.txt Tags=ccwindows ID=Windows Search * Author=Winapp2.ini Project [Windows Settings *] DetectFile=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\*Cache|*|RECURSE FileKey3=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\navigationHistory|*|RECURSE FileKey4=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings|*.log* FileKey5=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\TempState|*|REMOVESELF RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.immersivecontrolpanel_cw5n1h2txyewy\SearchHistory Tags=ccwindows ID=Windows Settings * Author=Winapp2.ini Project [Windows Shell - Folder/Dialog Box View Settings *] Detect=HKCU\Software\Microsoft\Windows RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags RegKey3=HKCU\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\BagMRU RegKey4=HKCU\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\CIDSizeMRU RegKey7=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU RegKey8=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU RegKey9=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU RegKey10=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams RegKey11=HKCU\Software\Microsoft\Windows\Shell\BagMRU RegKey12=HKCU\Software\Microsoft\Windows\Shell\Bags RegKey13=HKCU\Software\Microsoft\Windows\ShellNoRoam\BagMRU RegKey14=HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags ExcludeKey1=REG|HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders ExcludeKey2=REG|HKCU\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders ExcludeKey3=REG|HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop ExcludeKey4=REG|HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags\AllFolders Tags=ccwindows ID=Windows Shell - Folder/Dialog Box View Settings * Author=Winapp2.ini Project [Windows Shell - Theme Colors History *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\History\Colors RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\History\Colors Tags=ccwindows ID=Windows Shell - Theme Colors History * Author=Winapp2.ini Project [Windows Shell *] Detect=HKCU\Software\Microsoft\Windows DetectFile1=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy DetectFile2=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy FileKey1=%LocalAppData%|IconCache.db;IconCache.db.backup FileKey2=%LocalAppData%\Microsoft\Windows\Explorer|*.db FileKey3=%LocalAppData%\Microsoft\Windows\Explorer\*CacheToDelete|*.tmp FileKey4=%LocalAppData%\Packages\InputApp_*\AC|*|RECURSE FileKey5=%LocalAppData%\Packages\InputApp_*\LocalCache|*|RECURSE FileKey6=%LocalAppData%\Packages\InputApp_*\Settings|*.log* FileKey7=%LocalAppData%\Packages\InputApp_*\TempState|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AC|*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings|*.log* FileKey11=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey12=%LocalAppData%\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey13=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC|*|RECURSE FileKey14=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppData|*|RECURSE FileKey15=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey16=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebview|*|RECURSE FileKey17=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings|*.log* FileKey18=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey19=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey20=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer|*.db RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer|ScreenshotIndex RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SharingMFU RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached RegKey5=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts RegKey6=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached Tags=ccwindows ID=Windows Shell * Author=Winapp2.ini Project [Windows Signature Verification *] DetectFile=%WinDir%|SIGVERIF.TXT FileKey1=%WinDir%|SIGVERIF.TXT Tags=ccwindows ID=Windows Signature Verification * Author=Winapp2.ini Project [Windows Snipping Tool *] DetectFile=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\TempState|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey8=%LocalAppData%\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\ScreenClip|* RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.ScreenSketch_8wekyb3d8bbwe\PersistedPickerData\Microsoft.ScreenSketch_8wekyb3d8bbwe!App\AppSnipAndSketchFileSaveSettings|LastLocation RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.ScreenSketch_8wekyb3d8bbwe\PersistedPickerData\Microsoft.ScreenSketch_8wekyb3d8bbwe!App\DefaultOpenFileSingle|LastLocation Tags=ccwindows ID=Windows Snipping Tool * Author=Winapp2.ini Project [Windows Start Menu *] Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\UFH DetectFile=%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState|*|REMOVESELF RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage|ProgramsCache RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2|ProgramsCache RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2|ProgramsCacheSMP RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2|ProgramsCacheTBP RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\UFH\SHC RegKey6=HKLM\Software\Microsoft\Windows\CurrentVersion\UFH\ARP RegKey7=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage|ProgramsCache RegKey8=HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage|ProgramsCache Tags=ccwindows ID=Windows Start Menu * Author=Winapp2.ini Project [Windows Subsystems *] Detect=HKCU\Software\Microsoft\Windows DetectFile=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy FileKey1=%LocalAppData%\Microsoft\Windows Sidebar\Cache|*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows\AppCache|*|RECURSE FileKey3=%LocalAppData%\Microsoft\Windows\SettingSync\metastore|*.jrs FileKey4=%LocalAppData%\Microsoft\Windows\SettingSync\remotemetastore\*|*.jrs FileKey5=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC|*|RECURSE FileKey6=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\LocalCache|*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\LocalState\Cache|*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings|*.log* FileKey9=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\TempState|*|REMOVESELF FileKey11=%ProgramData%\Microsoft\RAC\PublishedData|*.jrs;*.log FileKey12=%ProgramData%\Microsoft\RAC\StateData|*.jrs;*.log FileKey13=%ProgramData%\Microsoft\RAC\Temp|* FileKey14=%ProgramData%\Microsoft\Windows\DeviceMetadataCache\dmrccache.bak|*|REMOVESELF FileKey15=%ProgramData%\Microsoft\Windows\Sqm\Manifest|*.bin FileKey16=%ProgramData%\Microsoft\Windows\Sqm\Sessions|*.psqm;*.sqm FileKey17=%SystemDrive%\Documents and Settings\LocalService\Application Data\PeerNetworking|*|RECURSE FileKey18=%UserProfile%\Documents\Remote Assistance Logs|*.xml FileKey19=%WinDir%\$regcmp$|*|REMOVESELF FileKey20=%WinDir%\ehome|PRDMOWrapper.log FileKey21=%WinDir%\msdownld.tmp|*|REMOVESELF FileKey22=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows|qwavecache.dat FileKey23=%WinDir%\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking|*|RECURSE FileKey24=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*|*.chk;*.jrs FileKey25=%WinDir%\System32|PRDMOWrapper.log;qwavecache.dat FileKey26=%WinDir%\System32\config\systemprofile\AppData\Local|*.tmp FileKey27=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads|*.tmp FileKey28=%WinDir%\System32\config\systemprofile\AppData\Local\tw-*.tmp|empty.check|REMOVESELF FileKey29=%WinDir%\System32\sru|*|RECURSE RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache RegKey2=HKCU\Software\Classes\MIME\Database\Content Type RegKey3=HKCU\Software\Local AppWizard-Generated Applications RegKey4=HKCU\Software\Microsoft\Keyboard\Native Media Players RegKey5=HKCU\Software\Microsoft\Windows\Shell\MUICache RegKey6=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache RegKey7=HKLM\Software\Microsoft\ESENT\Process RegKey8=HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders|Folder RegKey9=HKLM\Software\Microsoft\Windows\CurrentVersion\Setup|Installation Sources RegKey10=HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders|Folder ExcludeKey1=PATH|%LocalAppData%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\TokenBroker\Accounts\|*.tbacct* Tags=ccwindows ID=Windows Subsystems * Author=Winapp2.ini Project [Windows System Assessment Tool *] DetectFile=%WinDir%\Performance\WinSAT FileKey1=%WinDir%\Performance\WinSAT|*|REMOVESELF Tags=ccwindows ID=Windows System Assessment Tool * Author=Winapp2.ini Project [Windows Task Scheduler *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%WinDir%\System32\Tasks_Migrated|*|REMOVESELF Tags=ccwindows ID=Windows Task Scheduler * Author=Winapp2.ini Project [Windows Taskbar *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%AppData%\Microsoft\Windows\Recent|*.URL|RECURSE FileKey2=%AppData%\Microsoft\Windows\Recent\AutomaticDestinations|*|RECURSE FileKey3=%AppData%\Microsoft\Windows\Recent\CustomDestinations|*|RECURSE RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppLaunch RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\ShowJumpView RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\TrayButtonClicked RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband|FavoritesChanges ExcludeKey1=FILE|%AppData%\Microsoft\Windows\Recent\AutomaticDestinations\|f01b4d95cf55d32a.automaticDestinations-ms Tags=ccwindows ID=Windows Taskbar * Author=Winapp2.ini Project [Windows Temporary Files *] Detect=HKLM\Software\Microsoft\Windows FileKey1=%SystemDrive%\Documents and Settings\LocalService*\Local Settings\Temp|*|RECURSE FileKey2=%SystemDrive%\Documents and Settings\NetworkService*\Local Settings\Temp|*|RECURSE FileKey3=%Temp%|* FileKey4=%Temp%\*|*|REMOVESELF FileKey5=%WinDir%\ServiceProfiles\*\AppData\Local\Temp|*|RECURSE FileKey6=%WinDir%\System32\config\systemprofile\AppData\Local\Temp|*|RECURSE FileKey7=%WinDir%\System32\config\systemprofile\Local Settings\Temp|*|RECURSE FileKey8=%WinDir%\SystemTemp|*|RECURSE FileKey9=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Temp|*|RECURSE FileKey10=%WinDir%\TEMP|*|RECURSE Tags=ccwindows ID=Windows Temporary Files * Author=Winapp2.ini Project [Windows Update *] Detect=HKCU\Software\Microsoft\Windows FileKey1=%LocalAppData%\Microsoft\Windows\Windows Anytime Upgrade|Upgrade.log FileKey2=%LocalAppData%\MigWiz|*|REMOVESELF FileKey3=%ProgramData%\PLUG\Logs|* FileKey4=%ProgramFiles%\Microsoft Update Health Tools\Logs|* FileKey5=%ProgramFiles%\WindowsInstallationAssistant\Logs|* FileKey6=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache|*|RECURSE FileKey7=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs|*|RECURSE FileKey8=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State|*.log* FileKey9=%WinDir%\SoftwareDistribution|*.log FileKey10=%WinDir%\SoftwareDistribution\DataStore\Logs|*|RECURSE FileKey11=%WinDir%\System32\MRT\*|*.log|REMOVESELF Tags=ccwindows ID=Windows Update * Author=Winapp2.ini Project [Windows Voice Recorder *] DetectFile=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\LocalCache|*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\LocalState\Cache|*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings|*.log* FileKey5=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey6=%LocalAppData%\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Voice Recorder * Author=Winapp2.ini Project [Windows Volume Mixer *] Detect=HKCU\Software\Microsoft RegKey1=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore Tags=ccwindows ID=Windows Volume Mixer * Author=Winapp2.ini Project [Windows Widgets *] DetectFile1=%LocalAppData%\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe DetectFile2=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\AC|*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\Settings|*.log* FileKey3=%LocalAppData%\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium|*.log* FileKey4=%LocalAppData%\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\TempState|*|REMOVESELF FileKey5=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\AC|*|RECURSE FileKey6=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalCache\Definitions|* FileKey7=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState|*|RECURSE FileKey8=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings|*.log* FileKey9=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium|*.log* FileKey10=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\TempState|*|REMOVESELF Tags=ccwindows ID=Windows Widgets * Author=Winapp2.ini Project [Windscribe VPN *] DetectFile=%ProgramFiles%\Windscribe FileKey1=%LocalAppData%\Windscribe\Windscribe|*.log;*log.txt FileKey2=%ProgramFiles%\Windscribe|*.log FileKey3=%ProgramFiles%\Windscribe\log|*|RECURSE Tags=ccinternet ID=Windscribe VPN * Author=Winapp2.ini Project [Winemaker Extraordinaire *] DetectFile=%AppData%\UClick\Winemaker Extraordinaire FileKey1=%AppData%\UClick\Winemaker Extraordinaire|logfile.txt Tags=ccapps ID=Winemaker Extraordinaire * Author=Winapp2.ini Project [WinExt Registry Fixer *] DetectFile=%AppData%\TSS\WERF FileKey1=%AppData%\TSS\WERF|REG_POINT_*.reg Tags=ccutil ID=WinExt Registry Fixer * Author=Winapp2.ini Project [WinGate Proxy Server *] Detect=HKCU\Software\Qbik Software\GateKeeper DetectFile=%ProgramFiles%\WinGate FileKey1=%ProgramFiles%\WinGate|*.log;*Log.txt|RECURSE FileKey2=%ProgramFiles%\WinGate\Logs\Global|*.idx Tags=ccapps ID=WinGate Proxy Server * Author=Winapp2.ini Project [Winget-AutoUpdate *] DetectFile=%ProgramFiles%\Winget-AutoUpdate FileKey1=%ProgramFiles%\Winget-AutoUpdate\logs|*.log Tags=ccutil ID=Winget-AutoUpdate * Author=Winapp2.ini Project [WinHasher *] Detect=HKCU\Software\GPF Comics\WinHasher RegKey1=HKCU\Software\GPF Comics\WinHasher|LastDirectory Tags=ccutil ID=WinHasher * Author=Winapp2.ini Project [WinHTTrack *] Detect=HKCU\Software\WinHTTrack Website Copier FileKey1=%ProgramFiles%\WinHTTrack|winhttrack.log RegKey1=HKCU\Software\WinHTTrack Website Copier\WinHTTrack Website Copier\Recent File List Tags=ccinternet ID=WinHTTrack * Author=Winapp2.ini Project [WinImage *] Detect=HKCU\Software\WinImage RegKey1=HKCU\Software\WinImage|File1 RegKey2=HKCU\Software\WinImage|File2 RegKey3=HKCU\Software\WinImage|File3 RegKey4=HKCU\Software\WinImage|File4 RegKey5=HKCU\Software\WinImage|File5 RegKey6=HKCU\Software\WinImage|File6 RegKey7=HKCU\Software\WinImage|File7 RegKey8=HKCU\Software\WinImage|File8 RegKey9=HKCU\Software\WinImage|File9 RegKey10=HKCU\Software\WinImage|PathExtract Tags=ccutil ID=WinImage * Author=Winapp2.ini Project [winLAME *] DetectFile=%LocalAppData%\winLAME FileKey1=%LocalAppData%\winLAME\CrashDumps|*.mdmp Tags=ccmedia ID=winLAME * Author=Winapp2.ini Project [WinMerge *] Detect=HKCU\Software\Thingamahoochie\WinMerge\Files RegKey1=HKCU\Software\Thingamahoochie\WinMerge\Files\Ext RegKey2=HKCU\Software\Thingamahoochie\WinMerge\Files\Left RegKey3=HKCU\Software\Thingamahoochie\WinMerge\Files\Option RegKey4=HKCU\Software\Thingamahoochie\WinMerge\Files\Right Tags=ccutil ID=WinMerge * Author=Winapp2.ini Project [WinMount *] Detect=HKCU\Software\WinMount Applications\WinMount FileKey1=%AppData%\WinMount|*.dat RegKey1=HKCU\Software\WinMount Applications\WinMount\Recent File List Tags=ccutil ID=WinMount * Author=Winapp2.ini Project [WinPcap *] Detect=HKLM\Software\WinPcap FileKey1=%ProgramFiles%\WinPcap|*.log Tags=ccinternet ID=WinPcap * Author=Winapp2.ini Project [WinRAR *] Detect=HKCU\Software\WinRAR FileKey1=%ProgramFiles%\WinRAR|*.diz;*.tmp|RECURSE RegKey1=HKCU\Software\WinRAR SFX RegKey2=HKCU\Software\WinRAR\DialogEditHistory RegKey3=HKCU\Software\WinRAR\General\Info|CommentFile Tags=ccutil ID=WinRAR * Author=Winapp2.ini Project [WinRemote *] DetectFile=%ProgramData%\Banamalon\WinRemoteService FileKey1=%ProgramData%\Banamalon\WinRemoteService\log|* Tags=ccapps ID=WinRemote * Author=Winapp2.ini Project [WinSetupFromUSB *] DetectFile1=%ProgramFiles%\WinSetupFromUSB DetectFile2=%SystemDrive%\WinSetupFromUSB FileKey1=%ProgramFiles%\WinSetupFromUSB|*.log|RECURSE FileKey2=%SystemDrive%\WinSetupFromUSB|*.log|RECURSE Tags=ccutil ID=WinSetupFromUSB * Author=Winapp2.ini Project [Winsome Technologies File Renamer *] DetectFile=%AppData%\Winsome Technologies\Winsome File Renamer * FileKey1=%AppData%\Winsome Technologies\Winsome File Renamer *|*.log FileKey2=%AppData%\Winsome Technologies\Winsome File Renamer *\Logs|* Tags=ccutil ID=Winsome Technologies File Renamer * Author=Winapp2.ini Project [Winsome Technologies Find And Replace Tool For Excel *] DetectFile=%AppData%\Winsome Technologies\Find And Replace Tool For Excel * FileKey1=%AppData%\Winsome Technologies\Find And Replace Tool For Excel *|*.log FileKey2=%AppData%\Winsome Technologies\Find And Replace Tool For Excel *\Logs|* Tags=ccutil ID=Winsome Technologies Find And Replace Tool For Excel * Author=Winapp2.ini Project [Winsome Technologies Find And Replace Tool For Word *] DetectFile=%AppData%\Winsome Technologies\Find And Replace Tool For Word * FileKey1=%AppData%\Winsome Technologies\Find And Replace Tool For Word *|*.log FileKey2=%AppData%\Winsome Technologies\Find And Replace Tool For Word *\Logs|* Tags=ccutil ID=Winsome Technologies Find And Replace Tool For Word * Author=Winapp2.ini Project [Winsome Technologies Image to PDF Converter *] DetectFile=%AppData%\Winsome Technologies\Image to PDF Converter * FileKey1=%AppData%\Winsome Technologies\Image to PDF Converter *|*.log FileKey2=%AppData%\Winsome Technologies\Image to PDF Converter *\Logs|* Tags=ccutil ID=Winsome Technologies Image to PDF Converter * Author=Winapp2.ini Project [Winsome Technologies PDF Combiner *] DetectFile=%AppData%\Winsome Technologies\PDF Combiner * FileKey1=%AppData%\Winsome Technologies\PDF Combiner *|*.log FileKey2=%AppData%\Winsome Technologies\PDF Combiner *\Logs|* Tags=ccutil ID=Winsome Technologies PDF Combiner * Author=Winapp2.ini Project [Winsome Technologies PDF Security *] DetectFile=%AppData%\Winsome Technologies\PDF Security * FileKey1=%AppData%\Winsome Technologies\PDF Security *|*.log FileKey2=%AppData%\Winsome Technologies\PDF Security *\Logs|* Tags=ccutil ID=Winsome Technologies PDF Security * Author=Winapp2.ini Project [Winsome Technologies PDF to Image Converter *] DetectFile=%AppData%\Winsome Technologies\PDF to Image Converter * FileKey1=%AppData%\Winsome Technologies\PDF to Image Converter *|*.log FileKey2=%AppData%\Winsome Technologies\PDF to Image Converter *\Logs|* Tags=ccutil ID=Winsome Technologies PDF to Image Converter * Author=Winapp2.ini Project [Winsome Technologies Stamp And Number Pro *] DetectFile=%AppData%\Winsome Technologies\Stamp And Number Pro * FileKey1=%AppData%\Winsome Technologies\Stamp And Number Pro *|*.log FileKey2=%AppData%\Winsome Technologies\Stamp And Number Pro *\Logs|* Tags=ccutil ID=Winsome Technologies Stamp And Number Pro * Author=Winapp2.ini Project [Winsome Technologies TIFF PDF Counter *] DetectFile=%AppData%\Winsome Technologies\TIFF PDF Counter * FileKey1=%AppData%\Winsome Technologies\TIFF PDF Counter *|*.log FileKey2=%AppData%\Winsome Technologies\TIFF PDF Counter *\Logs|* Tags=ccutil ID=Winsome Technologies TIFF PDF Counter * Author=Winapp2.ini Project [Winsome Technologies TIFF Splitter *] DetectFile=%AppData%\Winsome Technologies\TIFF Splitter * FileKey1=%AppData%\Winsome Technologies\TIFF Splitter *|*.log FileKey2=%AppData%\Winsome Technologies\TIFF Splitter *\Logs|* Tags=ccutil ID=Winsome Technologies TIFF Splitter * Author=Winapp2.ini Project [WinSysClean *] DetectFile=%ProgramFiles%\WinSysClean* FileKey1=%ProgramFiles%\WinSysClean *|*.log;*scanlog.dat;RegBackup.reg Tags=ccutil ID=WinSysClean * Author=Winapp2.ini Project [WinTK *] DetectFile=%UserProfile%\Documents\WinTK FileKey1=%UserProfile%\Documents\WinTK|ExLog.txt Tags=ccutil ID=WinTK * Author=Winapp2.ini Project [WinTools.net *] DetectFile1=%ProgramFiles%\Godlike Developers\WinTools.net* DetectFile2=%ProgramFiles%\WinTools Software\WinTools.net* FileKey1=%ProgramFiles%\Godlike Developers\WinTools.net*|*.txt;*.url FileKey2=%ProgramFiles%\Godlike Developers\WinTools.net*\Undo|*.reg|RECURSE FileKey3=%ProgramFiles%\WinTools Software\WinTools.net*|*.txt FileKey4=%ProgramFiles%\WinTools Software\WinTools.net*\Undo|*.reg|RECURSE Tags=ccutil ID=WinTools.net * Author=Winapp2.ini Project [WinToUSB *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinToUSB_is1 FileKey1=%ProgramFiles%\WinToUSB\bin|*.log Tags=ccutil ID=WinToUSB * Author=Winapp2.ini Project [WinX DVD Author *] DetectFile=%ProgramFiles%\Digiarty\WinX DVD Author* FileKey1=%ProgramFiles%\Digiarty\WinX DVD Author*\Temp|* Tags=ccmedia ID=WinX DVD Author * Author=Winapp2.ini Project [WinX DVD Ripper Platinum *] DetectFile=%AppData%\Digiarty\WinX DVD Ripper Platinum FileKey1=%AppData%\Digiarty\WinX DVD Ripper Platinum|*.log;*.tmp Tags=ccmedia ID=WinX DVD Ripper Platinum * Author=Winapp2.ini Project [WinX YouTube Downloader *] DetectFile1=%AppData%\Digiarty\WinX YouTube Downloader DetectFile2=%AppData%\WinX YouTube Downloader FileKey1=%AppData%\Digiarty\WinX YouTube Downloader|*.jpg FileKey2=%AppData%\WinX YouTube Downloader|Error File.*;log.txt Tags=ccmedia ID=WinX YouTube Downloader * Author=Winapp2.ini Project [WinZip *] Detect=HKCU\Software\Nico Mak Computing\WinZip DetectFile=%LocalAppData%\Nico Mak Computing\WinZip Update Notifier FileKey1=%LocalAppData%\Nico Mak Computing\WinZip Update Notifier\log|log-*.txt FileKey2=%LocalAppData%\WinZip\SyncHelper\MRU|WinZip_MRU.roaming FileKey3=%LocalAppData%\WinZip\WinZip Update Notifier\Log|* RegKey1=HKCU\Software\Nico Mak Computing\WinZip\Mru Tags=ccutil ID=WinZip * Author=Winapp2.ini Project [WinZip Privacy Protector *] DetectFile=%LocalAppData%\WinZipPrivacyProtector FileKey1=%LocalAppData%\WinZipPrivacyProtector|*.log;*.tmp;log.rtf;report.txt;WebCache*.dat;WebCache*.jfm Tags=ccutil ID=WinZip Privacy Protector * Author=Winapp2.ini Project [WinZip Registry Optimizer *] DetectFile1=%AppData%\Nico Mak Computing\WinZip Registry Optimizer DetectFile2=%ProgramFiles%\WinZip Registry Optimizer FileKey1=%AppData%\Nico Mak Computing\WinZip Registry Optimizer\*|log* FileKey2=%ProgramFiles%\WinZip Registry Optimizer\Backups|* Tags=ccutil ID=WinZip Registry Optimizer * Author=Winapp2.ini Project [Wire *] DetectFile=%LocalAppData%\wire FileKey1=%AppData%\Wire\*Cache|* FileKey2=%AppData%\Wire\Service Worker|*|REMOVESELF Tags=ccinternet ID=Wire * Author=Winapp2.ini Project [Wirecast *] DetectFile=%AppData%\Wirecast FileKey1=%AppData%\Wirecast|*.txt Tags=ccmedia ID=Wirecast * Author=Winapp2.ini Project [Wireshark *] DetectFile=%ProgramFiles%\Wireshark FileKey1=%AppData%\Wireshark\plugins\cloudshark\tmp|* FileKey2=%ProgramFiles%\Wireshark|*Setup*.exe;npcap-*.exe Tags=ccutil ID=Wireshark * Author=Winapp2.ini Project [Wise Care 365 *] Detect=HKLM\Software\WiseCleaner\WiseCare365 FileKey1=%AppData%\Wise Care 365|Errorlog.txt;FailToRemove.dat Tags=ccutil ID=Wise Care 365 * Author=Winapp2.ini Project [Wise Video/YouTube Downloader *] Detect1=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Video Downloader_is1 Detect2=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Youtube Downloader_is1 DetectFile1=%ProgramFiles%\Wise\Wise Video Downloader DetectFile2=%ProgramFiles%\Wise\Wise YouTube Downloader FileKey1=%AppData%\Wise * Downloader|DownloadList.ini;FileListConfig.ini FileKey2=%SystemDrive%|urlinfo.txt FileKey3=%SystemDrive%\ThumbnailCache|* Tags=ccmedia ID=Wise Video/YouTube Downloader * Author=Winapp2.ini Project [WiseVector StopX *] DetectFile=%ProgramFiles%\WiseVector FileKey1=%ProgramFiles%\WiseVector\log|*.log Tags=ccutil ID=WiseVector StopX * Author=Winapp2.ini Project [Wistron Launch Manager *] Detect=HKLM\Software\Wistron Corp\Launch Manager FileKey1=%ProgramFiles%\Launch Manager|*.log Tags=ccutil ID=Wistron Launch Manager * Author=Winapp2.ini Project [Wizards of the Coast *] DetectFile=%UserProfile%\AppData\LocalLow\Wizards of the Coast FileKey1=%UserProfile%\AppData\LocalLow\Wizards of the Coast\mtga|*_log.txt Tags=ccapps ID=Wizards of the Coast * Author=Winapp2.ini Project [WM Recorder *] DetectFile=%ProgramFiles%\WM Recorder* FileKey1=%ProgramFiles%\WM Recorder*|log.txt;urls.txt Tags=ccmedia ID=WM Recorder * Author=Winapp2.ini Project [Wolfenstein: MP *] DetectFile=%LocalAppData%\id Software\WolfMP FileKey1=%LocalAppData%\id Software\WolfMP|*.log|RECURSE Tags=ccapps ID=Wolfenstein: MP * Author=Winapp2.ini Project [WolfQuest *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9E6AD6CF-1EFF-43E4-86C4-5C00254C3D8E} FileKey1=%ProgramFiles%\WolfQuest|*.txt|RECURSE ExcludeKey1=FILE|%ProgramFiles%\WolfQuest\|Help.txt Tags=ccapps ID=WolfQuest * Author=Winapp2.ini Project [Wondershare *] Detect=HKLM\Software\Wondershare FileKey1=%AppData%\se_tmp*|*|REMOVESELF FileKey2=%ProgramData%\Wondershare\*\*Log*|*|RECURSE FileKey3=%ProgramData%\Wondershare\WAF\ProductFeatures\*Logs|*|RECURSE FileKey4=%Public%\Documents\Wondershare|*|REMOVESELF Tags=ccapps ID=Wondershare * Author=Winapp2.ini Project [Wondershare AllMyTube *] Detect=HKLM\Software\Wondershare\Wondershare AllMyTube FileKey1=%AppData%\Wondershare AllMyTube|*|RECURSE FileKey2=%ProgramData%\Wondershare AllMyTube\ConvertedLibPic|*|RECURSE FileKey3=%ProgramData%\Wondershare Application Common Data\Download|*.bak;*.xml FileKey4=%ProgramData%\Wondershare Application Common Data\Download\MediaLibPic|*|RECURSE FileKey5=%ProgramData%\Wondershare Application Common Data\Download\SiteLogo|*|RECURSE FileKey6=%ProgramData%\Wondershare Application Common Data\Download\TempThumbDir|*|RECURSE FileKey7=%ProgramData%\Wondershare\AllMyTube|*.bak;*.xml FileKey8=%ProgramFiles%\Wondershare\AllMyTube\Log|*|RECURSE Tags=ccinternet ID=Wondershare AllMyTube * Author=Winapp2.ini Project [Wondershare Dr.Fone *] DetectFile=%ProgramFiles%\Wondershare\Wondershare Dr.Fone FileKey1=%AppData%\DataEraser_Temp|*|RECURSE FileKey2=%ProgramData%\Wondershare\dr.fone\iOSTemp|*|RECURSE FileKey3=%ProgramData%\Wondershare\dr.fone\log|*.log FileKey4=%ProgramData%\Wondershare\dr.fone\Sparrow|*.bak;*.log FileKey5=%ProgramData%\Wondershare\dr.fone\ThumbnailCache|* FileKey6=%ProgramData%\Wondershare\dr.fone\Wondershare_DataEraser_Clean|*|RECURSE FileKey7=%ProgramData%\Wondershare\DriverInstall|*.log FileKey8=%ProgramData%\Wondershare\WSRoot|*.tmp FileKey9=%ProgramData%\WsAppHelper\Dr.Fone|*.log FileKey10=%ProgramFiles%\Wondershare\dr.fone\ThumbnailCache|*|RECURSE FileKey11=%ProgramFiles%\Wondershare\MirrorGo\Log|*|RECURSE Tags=ccapps ID=Wondershare Dr.Fone * Author=Winapp2.ini Project [Wondershare DVD Creator *] DetectFile=%UserProfile%\Documents\Wondershare DVD Creator FileKey1=%UserProfile%\Documents\Wondershare DVD Creator\log|log*.txt Tags=ccmedia ID=Wondershare DVD Creator * Author=Winapp2.ini Project [Wondershare Filmora *] Detect1=HKLM\Software\Wondershare\Wondershare Filmora Detect2=HKLM\Software\Wondershare\Wondershare FilmoraPro FileKey1=%ProgramFiles%\Wondershare\Wondershare Filmora\log|*|RECURSE FileKey2=%UserProfile%\Documents\Wondershare Filmora\Temp|*|RECURSE Tags=ccmedia ID=Wondershare Filmora * Author=Winapp2.ini Project [Wondershare Helper Compact *] Detect=HKLM\Software\Wondershare\Wondershare Helper Compact FileKey1=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact|ProductUpdateLists.xml;WSHelper*.exe_temp FileKey2=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\DATADICT|*|RECURSE FileKey3=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Log|*|RECURSE FileKey4=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Temp|*|RECURSE Tags=ccapps ID=Wondershare Helper Compact * Author=Winapp2.ini Project [Wondershare MobileGo *] Detect=HKCU\Software\Wondershare\MobileGo DetectFile=%AppData%\Wondershare\MobileGo for iOS FileKey1=%AppData%\Wondershare\*Go*|*.log FileKey2=%AppData%\Wondershare\DataEraser|*.log FileKey3=%AppData%\Wondershare\Dr.FoneTool\log|*.log FileKey4=%AppData%\Wondershare\DrFoneAndroidTool\log|*.log FileKey5=%AppData%\Wondershare\MirrorGo\ImageCache\ADImage|*|RECURSE FileKey6=%AppData%\Wondershare\MobileGo\DeviceImageCache|*|RECURSE FileKey7=%AppData%\Wondershare\MobileGo\iOSTemp|*|REMOVESELF FileKey8=%AppData%\Wondershare\MobileGo\Logs\DeviceConnection|*|RECURSE FileKey9=%AppData%\Wondershare\MobileTransTool|*.log FileKey10=%AppData%\Wondershare\WsRoot\Logs|*|RECURSE FileKey11=%ProgramData%\Wondershare\Dr.FoneTool\Log|*.txt FileKey12=%ProgramFiles%\Wondershare\MobileGo|*.log Tags=ccapps ID=Wondershare MobileGo * Author=Winapp2.ini Project [Wondershare PDF Editor *] Detect=HKLM\Software\Wondershare\Wondershare PDF Editor FileKey1=%AppData%\Wondershare\PDF Editor|HistoryDatas.dat FileKey2=%AppData%\Wondershare\PDF Editor\Log|*.log Tags=ccapps ID=Wondershare PDF Editor * Author=Winapp2.ini Project [Wondershare Recoverit *] DetectFile=%ProgramData%\Wondershare\Recoverit* FileKey1=%ProgramData%\Wondershare\Recoverit*\dataSDK|*.bak;*.log;tmp FileKey2=%ProgramData%\Wondershare\Recoverit*\WGPSDK|*.log Tags=ccutil ID=Wondershare Recoverit * Author=Winapp2.ini Project [Wondershare Repairit *] DetectFile=%ProgramFiles%\Wondershare\Repairit FileKey1=%ProgramData%\Wondershare\Repairit\*SDK|*.bak;*.log;tmp FileKey2=%ProgramFiles%\Wondershare\Repairit\log|* Tags=ccutil ID=Wondershare Repairit * Author=Winapp2.ini Project [Wondershare SafeEraser *] Detect=HKLM\Software\Wondershare\SafeEraser FileKey1=%AppData%\HMYGSetting|*|REMOVESELF FileKey2=%AppData%\HYXDevPsnList|*|REMOVESELF FileKey3=%AppData%\Wondershare\SafeEraser|*.log FileKey4=%AppData%\Wondershare\SafeEraser\Logs\DeviceConnection|*|RECURSE FileKey5=%AppData%\Wondershare\SafeEraser\Logs\iOSTemp|*|RECURSE FileKey6=%ProgramFiles%\Wondershare\SafeEraser\se_tmp_win|*|REMOVESELF FileKey7=%SystemDrive%\se_tmp|*|REMOVESELF Tags=ccapps ID=Wondershare SafeEraser * Author=Winapp2.ini Project [Wondershare UniConverter *] Detect1=HKLM\Software\Wondershare\Wondershare UniConverter Detect2=HKLM\Software\Wondershare\Wondershare UniConverter 13 FileKey1=%ProgramData%\Wondershare\UniConverter*\DataTrack|*.bak;*.log;tmp FileKey2=%ProgramData%\Wondershare\UniConverter*\TempThumbDir|*|RECURSE FileKey3=%ProgramData%\Wondershare\UniConverter*\UpdatePackge|*|RECURSE FileKey4=%ProgramFiles%\Wondershare\*UniConverter*\Log|*|RECURSE FileKey5=%SystemDrive%|logWSVCUUpdateHelper.log FileKey6=%SystemDrive%\Wondershare UniConverter\Downloaded\temp|*|REMOVESELF Tags=ccmedia ID=Wondershare UniConverter * Author=Winapp2.ini Project [Wondershare Video Converter *] DetectFile1=%ProgramFiles%\Wondershare Video Converter* DetectFile2=%ProgramFiles%\Wondershare\Video Converter* FileKey1=%ProgramData%\Wondershare MediaServer|*.txt FileKey2=%ProgramData%\Wondershare Video Converter*|*.dat.bak FileKey3=%ProgramData%\Wondershare Video Converter*\Temp*Dir|*|RECURSE FileKey4=%ProgramFiles%\Wondershare Video Converter*\Log|*|RECURSE FileKey5=%ProgramFiles%\Wondershare Video Converter*\Temp*Dir|*|RECURSE FileKey6=%ProgramFiles%\Wondershare\Video Converter*\Log|*|RECURSE FileKey7=%ProgramFiles%\Wondershare\Video Converter*\Output|Thumbnail.dat FileKey8=%ProgramFiles%\Wondershare\Video Converter*\Transfer\MultimediaLibs\Log|* FileKey9=%SystemDrive%|logWSVCUUpdateHelper.log FileKey10=%UserProfile%\Documents\Wondershare MediaServer\log|*|RECURSE Tags=ccmedia ID=Wondershare Video Converter * Author=Winapp2.ini Project [Wondershare Video Editor *] DetectFile=%ProgramData%\Wondershare Video Editor FileKey1=%ProgramData%\Wondershare Video Editor\Resources|Favorites.xml Tags=ccmedia ID=Wondershare Video Editor * Author=Winapp2.ini Project [Wordweb *] Detect=HKCU\Software\WordWeb FileKey1=%AppData%\WordWeb|History.txt Tags=ccapps ID=Wordweb * Author=Winapp2.ini Project [World of Warcraft *] Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft FileKey1=%ProgramFiles%\World of Warcraft|*.bak;*.old|RECURSE FileKey2=%ProgramFiles%\World of Warcraft\_*_\Logs|* FileKey3=%ProgramFiles%\World of Warcraft\Cache|*|REMOVESELF FileKey4=%ProgramFiles%\World of Warcraft\Errors|*|REMOVESELF FileKey5=%ProgramFiles%\World of Warcraft\Logs|* FileKey6=%Public%\games\World of Warcraft|*.bak;*.old|RECURSE FileKey7=%Public%\Games\World of Warcraft\Cache|*|REMOVESELF FileKey8=%Public%\Games\World of Warcraft\Errors|*|REMOVESELF FileKey9=%Public%\Games\World of Warcraft\Logs|* FileKey10=%SystemDrive%\World of Warcraft|*.bak;*.old|RECURSE FileKey11=%SystemDrive%\World of Warcraft\Cache|*|REMOVESELF FileKey12=%SystemDrive%\World of Warcraft\Errors|*|REMOVESELF FileKey13=%SystemDrive%\World of Warcraft\Logs|* Tags=ccapps ID=World of Warcraft * Author=Winapp2.ini Project [WorldWide Telescope *] Detect=HKCU\Software\Classes\WorldWideTelescope.wtml FileKey1=%LocalAppData%\Microsoft\WorldWideTelescope\dem|*|RECURSE FileKey2=%LocalAppData%\Microsoft\WorldWideTelescope\Imagery|*|RECURSE FileKey3=%LocalAppData%\Microsoft\WorldWideTelescope\tourcache|*|RECURSE Tags=ccapps ID=WorldWide Telescope * Author=Winapp2.ini Project [Wowhead Client *] Detect=HKCU\Software\Wowhead\WowHead Client FileKey1=%ProgramData%\wowhead\wowhead client\cache|*|REMOVESELF FileKey2=%ProgramData%\wowhead\wowhead client\log|*|REMOVESELF RegKey1=HKCU\Software\Wowhead\WowHead Client|Statistics Tags=ccapps ID=Wowhead Client * Author=Winapp2.ini Project [WS FTP Pro *] Detect=HKCU\Software\Ipswitch\WS_FTP FileKey1=%AppData%\Ipswitch\WS_FTP\Logs|* Tags=ccinternet ID=WS FTP Pro * Author=Winapp2.ini Project [wufuc *] DetectFile=%ProgramData%\wufuc FileKey1=%ProgramData%\wufuc|*.log Tags=ccutil ID=wufuc * Author=Winapp2.ini Project [X-NetStat *] DetectFile=%AppData%\X-NetStat* FileKey1=%AppData%\X-NetStat*|*.exe FileKey2=%AppData%\X-NetStat*\Logs|* Tags=ccutil ID=X-NetStat * Author=Winapp2.ini Project [X-Ways WinHex *] DetectFile=%LocalAppData%\X-Ways\WinHex FileKey1=%LocalAppData%\X-Ways\WinHex|*log.txt Tags=ccutil ID=X-Ways WinHex * Author=Winapp2.ini Project [Xara Photo & Graphic Designer *] Detect=HKCU\Software\Xara\Xtreme_SE FileKey1=%LocalAppData%\Xara\Xtreme\9.2\Backups|*|RECURSE FileKey2=%LocalAppData%\Xara\Xtreme_SE\6.1\Backups|*.txt RegKey1=HKCU\Software\Xara\Xtreme\9.2\Options\Recent File List RegKey2=HKCU\Software\Xara\Xtreme_SE\6.1\Options\Recent File List RegKey3=HKCU\Software\Xara\Xtreme_SE\6.1\Workspace Tags=ccmedia ID=Xara Photo & Graphic Designer * Author=Winapp2.ini Project [Xara WebDesigner *] Detect=HKCU\Software\Xara\WebDesigner RegKey1=HKCU\Software\Xara\WebDesigner\8.0\Workspace\MDI Tags=ccutil ID=Xara WebDesigner * Author=Winapp2.ini Project [Xara WebDesigner Backups *] Detect=HKCU\Software\Xara\WebDesigner FileKey1=%LocalAppData%\Xara\WebDesigner\*\Backups|*|RECURSE Tags=ccutil ID=Xara WebDesigner Backups * Author=Winapp2.ini Project [XCOM *] DetectFile=%UserProfile%\Documents\My Games\XCOM* FileKey1=%UserProfile%\Documents\My Games\XCOM*\XComGame\Logs|* Tags=ccapps ID=XCOM * Author=Winapp2.ini Project [Xerox Printer Driver *] DetectFile=%ProgramData%\Xerox\PrinterDriver FileKey1=%ProgramData%\Xerox\PrinterDriver|*.tmp|RECURSE Tags=ccapps ID=Xerox Printer Driver * Author=Winapp2.ini Project [Xiaomi *] DetectFile=%AppData%\Xiaomi FileKey1=%AppData%\Xiaomi\account_auth\log|*.log FileKey2=%AppData%\Xiaomi\miflash_unlock\log|*.log FileKey3=%AppData%\Xiaomi\miflash_unlock\temp|*.tmp;data_*;f_* FileKey4=%AppData%\Xiaomi\miflash_unlock_en\log|*.log FileKey5=%AppData%\Xiaomi\miflash_unlock_en\temp|*.tmp;data_*;f_* FileKey6=%AppData%\Xiaomi\miphonemanager\cache|* FileKey7=%AppData%\Xiaomi\miphonemanager\log|*.log|RECURSE FileKey8=%AppData%\Xiaomi\miusbdriver\log|*.log Tags=ccapps ID=Xiaomi * Author=Winapp2.ini Project [Xilisoft AVI to DVD Converter *] DetectFile=%LocalAppData%\Xilisoft\AVI to DVD Converter FileKey1=%LocalAppData%\Xilisoft\AVI to DVD Converter|log_testing.txt Tags=ccmedia ID=Xilisoft AVI to DVD Converter * Author=Winapp2.ini Project [Xilisoft Video Converter *] Detect1=HKCU\Software\Xilisoft\Video Converter Ultimate Detect2=HKLM\Software\Xilisoft\Video Converter Platinum Detect3=HKLM\Software\Xilisoft\Video Converter Standard Detect4=HKLM\Software\Xilisoft\Video Converter Ultimate FileKey1=%ProgramData%\Xilisoft\Video Converter*\customdata|settings.old RegKey1=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_imported_dir RegKey2=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openfile_dir RegKey3=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openpicture_dir RegKey4=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_output_dir RegKey5=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_group RegKey6=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_url RegKey7=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_snapshot_dir RegKey8=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|recent_profiles RegKey9=HKCU\Software\Xilisoft\Video Converter Platinum\Settings\output RegKey10=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_imported_dir RegKey11=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openfile_dir RegKey12=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openpicture_dir RegKey13=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_output_dir RegKey14=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_group RegKey15=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_url RegKey16=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_snapshot_dir RegKey17=HKCU\Software\Xilisoft\video Converter Ultimate\Settings|LastOpenSoundFileFolder RegKey18=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|recent_profiles RegKey19=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings\output Tags=ccmedia ID=Xilisoft Video Converter * Author=Winapp2.ini Project [XMind *] DetectFile=%AppData%\XMind FileKey1=%AppData%\XMind|*.log|RECURSE Tags=ccapps ID=XMind * Author=Winapp2.ini Project [XN Resource Editor *] Detect=HKCU\Software\Woozle\XN Resource Editor RegKey1=HKCU\Software\Woozle\XN Resource Editor\Recent Files Tags=ccutil ID=XN Resource Editor * Author=Winapp2.ini Project [XnView *] Detect1=HKCU\Software\XnView Detect2=HKLM\Software\XnView FileKey1=%AppData%\XnView|category.bak;XnView.db FileKey2=%AppData%\XnView\cache|*.db FileKey3=%AppData%\XnViewMP|*.db;category.bak FileKey4=%ProgramFiles%\XnView|category.bak FileKey5=%ProgramFiles%\XnView\cache|*.db FileKey6=%ProgramFiles%\XnViewMP|*.db;category.bak RegKey1=HKCU\Software\XnView\Start|DirName_0 RegKey2=HKCU\Software\XnView\Start|DirName_1 RegKey3=HKCU\Software\XnView\Start|DirName_2 RegKey4=HKCU\Software\XnView\Start|DirName_3 RegKey5=HKCU\Software\XnView\Start|DirName_4 RegKey6=HKCU\Software\XnView\Start|DirName_5 RegKey7=HKCU\Software\XnView\Start|DirName_6 RegKey8=HKCU\Software\XnView\Start|DirName_7 RegKey9=HKCU\Software\XnView\Start|DirName_8 RegKey10=HKCU\Software\XnView\Start|DirName_9 RegKey11=HKCU\Software\XnView\Start|FileName_0 RegKey12=HKCU\Software\XnView\Start|FileName_1 RegKey13=HKCU\Software\XnView\Start|FileName_2 RegKey14=HKCU\Software\XnView\Start|FileName_3 RegKey15=HKCU\Software\XnView\Start|FileName_4 RegKey16=HKCU\Software\XnView\Start|FileName_5 RegKey17=HKCU\Software\XnView\Start|FileName_6 RegKey18=HKCU\Software\XnView\Start|FileName_7 RegKey19=HKCU\Software\XnView\Start|FileName_8 RegKey20=HKCU\Software\XnView\Start|FileName_9 RegKey21=HKCU\Software\XnView\XnViewMP\Start|customPath RegKey22=HKCU\Software\XnView\XnViewMP\Start|History RegKey23=HKCU\Software\XnView\XnViewMP\Start|PathBrowser RegKey24=HKCU\Software\XnView\XnViewMP\Start|RecentFiles RegKey25=HKCU\Software\XnView\XnViewMP\Strip|list_folder RegKey26=HKCU\Software\XnView\XnViewMP\Viewer|saveFolder Tags=ccmedia ID=XnView * Author=Winapp2.ini Project [XPhone *] Detect=HKCU\Software\C4B\Log FileKey1=%LocalAppData%\C4B\Log|* Tags=ccapps ID=XPhone * Author=Winapp2.ini Project [Xplorer2 *] Detect1=HKCU\Software\ZabaraKatranemia Plc\xplorer2\MainFrame Settings Detect2=HKCU\Software\ZabaraKatranemia Plc\xplorer2_UC\MainFrame Settings RegKey1=HKCU\Software\ZabaraKatranemia Plc\xplorer2\MainFrame Settings\Folder History RegKey2=HKCU\Software\ZabaraKatranemia Plc\xplorer2\MainFrame Settings\Recent Document List RegKey3=HKCU\Software\ZabaraKatranemia Plc\xplorer2_UC\MainFrame Settings\Folder History RegKey4=HKCU\Software\ZabaraKatranemia Plc\xplorer2_UC\MainFrame Settings\Recent Document List Tags=ccutil ID=Xplorer2 * Author=Winapp2.ini Project [XPort 360 *] DetectFile=%AppData%\Datel\XPort 360 FileKey1=%AppData%\Datel\XPort 360\Temp|*|REMOVESELF Tags=ccapps ID=XPort 360 * Author=Winapp2.ini Project [XPressUpdate *] Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\XPressUpdate.exe FileKey1=%CommonProgramFiles%\XpressUpdate|*.log;*old Tags=ccmedia ID=XPressUpdate * Author=Winapp2.ini Project [XRayz LinkStash *] Detect=HKCU\Software\XRayz\LinkStash RegKey1=HKCU\Software\XRayz\LinkStash\Recent File List Tags=ccutil ID=XRayz LinkStash * Author=Winapp2.ini Project [Xsplit *] Detect=HKLM\Software\Splitmedialabs\XSplit DetectFile=%ProgramFiles%\SplitmediaLabs\XSplit Broadcaster FileKey1=%AppData%\SplitMediaLabs\XSplit*|*.log|RECURSE FileKey2=%LocalAppData%\SplitMediaLabs\XSplit\*|bwtestlogs.txt FileKey3=%ProgramData%\SplitMediaLabs\XSplit\LocalStore\Temp|* FileKey4=%ProgramData%\SplitMediaLabs\XSplit\Temp|* FileKey5=%ProgramFiles%\SplitmediaLabs\XSplit Broadcaster\x*|*Log.txt Tags=ccmedia ID=Xsplit * Author=Winapp2.ini Project [XviD *] Detect=HKCU\Software\GNU\Xvid RegKey1=HKCU\Software\GNU\Xvid|stats Tags=ccmedia ID=XviD * Author=Winapp2.ini Project [XWidget *] DetectFile=%UserProfile%\Documents\XWidget FileKey1=%UserProfile%\Documents\XWidget\Backup|*|RECURSE FileKey2=%UserProfile%\Documents\XWidget\Cache|*|RECURSE Tags=ccapps ID=XWidget * Author=Winapp2.ini Project [XYplorer *] DetectFile=%AppData%\XYplorer FileKey1=%AppData%\XYplorer|xyerrorlog-*.txt Tags=ccutil ID=XYplorer * Author=Winapp2.ini Project [YACReader *] DetectFile=%LocalAppData%\YACReader\YACReader* FileKey1=%LocalAppData%\YACReader\YACReader*|yacreader*.log Tags=ccapps ID=YACReader * Author=Winapp2.ini Project [Yandex Autofill Data & Search Engine Preferences *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|*Web Data;Ya Autofill Data*;Ya Credit Cards*;Ya Passman Data* FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\AutoFill*|*|REMOVESELF FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\AutoFill*|*|REMOVESELF Tags=ccapps ID=Yandex Autofill Data & Search Engine Preferences * Author=Winapp2.ini Project [Yandex Autoplay Preferences *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\MEIPreload|*|REMOVESELF Tags=ccapps ID=Yandex Autoplay Preferences * Author=Winapp2.ini Project [Yandex Bookmark Backups *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Bookmarks.bak Tags=ccapps ID=Yandex Bookmark Backups * Author=Winapp2.ini Project [Yandex Bookmark Favicons *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|favicons* Tags=ccapps ID=Yandex Bookmark Favicons * Author=Winapp2.ini Project [Yandex Caches *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data|*-journal|RECURSE FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data|Module Info Cache FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\*|*.ldb;CURRENT;LOCK;MANIFEST-*;ServerCertificate;Tablo* FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data\*\*Cache*|*|REMOVESELF FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\*\blob_storage|*|REMOVESELF FileKey6=%LocalAppData%\Yandex\YandexBrowser\User Data\*\BudgetDatabase|*|REMOVESELF FileKey7=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Download Service|*|REMOVESELF FileKey8=%LocalAppData%\Yandex\YandexBrowser\User Data\*\File System|*|REMOVESELF FileKey9=%LocalAppData%\Yandex\YandexBrowser\User Data\*\GCM Store|*|REMOVESELF FileKey10=%LocalAppData%\Yandex\YandexBrowser\User Data\*\JumpListIcons*|*|REMOVESELF FileKey11=%LocalAppData%\Yandex\YandexBrowser\User Data\*\optimization*|*|REMOVESELF FileKey12=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Platform Notifications|*|REMOVESELF FileKey13=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Service Value Store|*|REMOVESELF FileKey14=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Service Worker|*|REMOVESELF FileKey15=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Shared Dictionary\cache|*|REMOVESELF FileKey16=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Storage\ext\*\def\*cache*|*|REMOVESELF FileKey17=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Storage\ext\*\def\Platform Notifications|*|REMOVESELF FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\TabPreviewScreenshots|*|REMOVESELF FileKey19=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Wallpapers|*|REMOVESELF FileKey20=%LocalAppData%\Yandex\YandexBrowser\User Data\*Cache*|*|REMOVESELF FileKey21=%LocalAppData%\Yandex\YandexBrowser\User Data\Avatars|*|REMOVESELF FileKey22=%LocalAppData%\Yandex\YandexBrowser\User Data\Optimization*|*|REMOVESELF FileKey23=%LocalAppData%\Yandex\YandexBrowser\User Data\YandexStore|YS_* Tags=ccapps ID=Yandex Caches * Author=Winapp2.ini Project [Yandex Default App Handlers *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|PreferredApps Tags=ccapps ID=Yandex Default App Handlers * Author=Winapp2.ini Project [Yandex Download History *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|DownloadMetadata FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\shared_proto_db|*|REMOVESELF Tags=ccapps ID=Yandex Download History * Author=Winapp2.ini Project [Yandex DRM Data *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|CdmStorage.db FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\MediaFoundationCdmStore|*|REMOVESELF FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\WidevineCdm|*|REMOVESELF Tags=ccapps ID=Yandex DRM Data * Author=Winapp2.ini Project [Yandex Extension Cookies *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Extension Cookies Tags=ccapps ID=Yandex Extension Cookies * Author=Winapp2.ini Project [Yandex NeuroEdit *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Ya Neuroedit Data* Tags=ccapps ID=Yandex NeuroEdit * Author=Winapp2.ini Project [Yandex Pinned Tabs *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data RegKey1=HKCU\Software\Yandex\YandexBrowser(backup)\PreferenceMACs\Default|pinned_tabs RegKey2=HKCU\Software\Yandex\YandexBrowser\PreferenceMACs\Default|pinned_tabs Tags=ccapps ID=Yandex Pinned Tabs * Author=Winapp2.ini Project [Yandex Privacy Sandbox *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data|*first_party_sets* FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*|BrowsingTopics*;Conversions*;InterestGroups;MediaDeviceSalts;PrivateAggregation*;SharedStorage* FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Network|Trust Tokens* FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data\CookieReadinessList|*|REMOVESELF FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\FirstPartySetsPreloaded|*|REMOVESELF FileKey6=%LocalAppData%\Yandex\YandexBrowser\User Data\PrivacySandboxAttestationsPreloaded|*|REMOVESELF FileKey7=%LocalAppData%\Yandex\YandexBrowser\User Data\ProbabilisticRevealTokenRegistry|*|REMOVESELF FileKey8=%LocalAppData%\Yandex\YandexBrowser\User Data\TrustTokenKeyCommitments|*|REMOVESELF Tags=ccapps ID=Yandex Privacy Sandbox * Author=Winapp2.ini Project [Yandex Progressive Web Apps *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Web Applications|*|REMOVESELF Tags=ccapps ID=Yandex Progressive Web Apps * Author=Winapp2.ini Project [Yandex Saved Usernames & Passwords *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Login Data* Tags=ccapps ID=Yandex Saved Usernames & Passwords * Author=Winapp2.ini Project [Yandex Security & Threat Detection *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|DIPS* FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\ClientCertificates|*|REMOVESELF FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Network|TransportSecurity* FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Safe Browsing Network|*|REMOVESELF FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\CertificateRevocation|*|REMOVESELF FileKey6=%LocalAppData%\Yandex\YandexBrowser\User Data\Crowd Deny|*|REMOVESELF FileKey7=%LocalAppData%\Yandex\YandexBrowser\User Data\PKIMetadata|*|REMOVESELF FileKey8=%LocalAppData%\Yandex\YandexBrowser\User Data\Safe Browsing|*|REMOVESELF FileKey9=%LocalAppData%\Yandex\YandexBrowser\User Data\SafetyTips|*|REMOVESELF FileKey10=%LocalAppData%\Yandex\YandexBrowser\User Data\SSLErrorAssistant|*|REMOVESELF FileKey11=%LocalAppData%\Yandex\YandexBrowser\User Data\Subresource Filter|*|REMOVESELF FileKey12=%LocalAppData%\Yandex\YandexBrowser\User Data\ZxcvbnData|*|REMOVESELF Tags=ccapps ID=Yandex Security & Threat Detection * Author=Winapp2.ini Project [Yandex Shopping Insights *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\chrome_cart_db|*|REMOVESELF FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\commerce_subscription_db|*|REMOVESELF FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\*\coupon_db|*|REMOVESELF FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data\*\discount*_db|*|REMOVESELF FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\*\parcel_tracking_db|*|REMOVESELF Tags=ccapps ID=Yandex Shopping Insights * Author=Winapp2.ini Project [Yandex Storage Quota Manager *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|QuotaManager Tags=ccapps ID=Yandex Storage Quota Manager * Author=Winapp2.ini Project [Yandex Sync Data *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Sync Data|*|REMOVESELF Tags=ccapps ID=Yandex Sync Data * Author=Winapp2.ini Project [Yandex Telemetry *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\Application|debug.log FileKey2=%LocalAppData%\Yandex\YandexBrowser\Application\SetupMetrics|*|REMOVESELF FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data|*.log;*_shutdown_ms.txt;Breadcrumbs;BrowsingTopics*;Last Browser;Last Version FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data|*.pma;LOG;LOG.old|RECURSE FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\*|*.log;Bookmarks Log*;Passman Logs*;Session Log*;Tabs Log*;update_info.rss;WebApp Logs*;Ya Autofill Logs* FileKey6=%LocalAppData%\Yandex\YandexBrowser\User Data\*\DataSharing|*|REMOVESELF FileKey7=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Feature Engagement Tracker|*|REMOVESELF FileKey8=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Network|Network Persistent State*;Reporting and NEL*;SCT Auditing Pending Reports* FileKey9=%LocalAppData%\Yandex\YandexBrowser\User Data\*\PersistentOriginTrials|*|REMOVESELF FileKey10=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Site Characteristics Database|*|REMOVESELF FileKey11=%LocalAppData%\Yandex\YandexBrowser\User Data\*\VideoDecodeStats|*|REMOVESELF FileKey12=%LocalAppData%\Yandex\YandexBrowser\User Data\*\WebRTC Logs|*|REMOVESELF FileKey13=%LocalAppData%\Yandex\YandexBrowser\User Data\*\WebrtcVideoStats|*|REMOVESELF FileKey14=%LocalAppData%\Yandex\YandexBrowser\User Data\*BrowserMetrics|*|REMOVESELF FileKey15=%LocalAppData%\Yandex\YandexBrowser\User Data\Crash Reports|*|REMOVESELF FileKey16=%LocalAppData%\Yandex\YandexBrowser\User Data\Crashpad|*|REMOVESELF FileKey17=%LocalAppData%\Yandex\YandexBrowser\User Data\Local Traces|*|REMOVESELF FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\OriginTrials|*|REMOVESELF FileKey19=%LocalAppData%\Yandex\YandexBrowser\User Data\Stability|*|REMOVESELF FileKey20=%ProgramFiles%\Yandex\YandexBrowser\Application|debug.log FileKey21=%ProgramFiles%\Yandex\YandexBrowser\Application\SetupMetrics|*|REMOVESELF RegKey1=HKCU\Software\Yandex\YandexBrowser(backup)\BlBeacon|failed_count RegKey2=HKCU\Software\Yandex\YandexBrowser(backup)\BlBeacon|state RegKey3=HKCU\Software\Yandex\YandexBrowser(backup)\Installer|LastChecked RegKey4=HKCU\Software\Yandex\YandexBrowser(backup)\StabilityMetrics RegKey5=HKCU\Software\Yandex\YandexBrowser\BlBeacon|failed_count RegKey6=HKCU\Software\Yandex\YandexBrowser\BlBeacon|state RegKey7=HKCU\Software\Yandex\YandexBrowser\Installer|LastChecked RegKey8=HKCU\Software\Yandex\YandexBrowser\StabilityMetrics Tags=ccapps ID=Yandex Telemetry * Author=Winapp2.ini Project [Yandex Web Browsing Cookies *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Network|Cookies*;Device Bound Sessions* Tags=ccapps ID=Yandex Web Browsing Cookies * Author=Winapp2.ini Project [Yandex Web Browsing History *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*|History*;Network Action Predictor*;shortcuts*;Tab Lifetime;Top Sites*;Visited Links* Tags=ccapps ID=Yandex Web Browsing History * Author=Winapp2.ini Project [Yandex Web Browsing Session *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Extension State|*|REMOVESELF FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Sessions|*|REMOVESELF Tags=ccapps ID=Yandex Web Browsing Session * Author=Winapp2.ini Project [Yandex Web Storage *] DetectFile=%LocalAppData%\Yandex\YandexBrowser\User Data FileKey1=%LocalAppData%\Yandex\YandexBrowser\User Data\*\IndexedDB|*|REMOVESELF FileKey2=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Local Storage\*\IndexedDB\https*|* FileKey3=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Local Storage\*\Session Storage|* FileKey4=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Local Storage\*\Storage\ext\*\def\Session Storage|* FileKey5=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Local Storage\*\WebStorage|*|RECURSE FileKey6=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Local Storage\leveldb|*|REMOVESELF FileKey7=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Session Storage|*|REMOVESELF FileKey8=%LocalAppData%\Yandex\YandexBrowser\User Data\*\WebStorage|*|REMOVESELF Tags=ccapps ID=Yandex Web Storage * Author=Winapp2.ini Project [YouTube-DL *] DetectFile=%UserProfile%\.cache\youtube-dl FileKey1=%UserProfile%\.cache\youtube-dl|*|RECURSE Tags=ccutil ID=YouTube-DL * Author=Winapp2.ini Project [YouTubeByClick *] DetectFile=%AppData%\YouTubeByClick FileKey1=%AppData%\YouTubeByClick|History.ytb Tags=ccinternet ID=YouTubeByClick * Author=Winapp2.ini Project [yWriter *] DetectFile=%AppData%\Spacejock Software\yWriter* FileKey1=%AppData%\Spacejock Software\yWriter*|Log.txt FileKey2=%UserProfile%\Documents\Logs|*.txt FileKey3=%UserProfile%\Documents\ywriter projects\*ywriter\Logs|* FileKey4=%UserProfile%\Documents\ywriter projects\*ywriter\ywtemp|* Tags=ccapps ID=yWriter * Author=Winapp2.ini Project [Z-VSScopy *] DetectFile=%CommonProgramFiles%\Z-Manufaktur\Z-VSScopy FileKey1=%CommonProgramFiles%\Z-Manufaktur\Z-VSScopy|LogFile.txt Tags=ccutil ID=Z-VSScopy * Author=Winapp2.ini Project [Zemana AntiMalware *] DetectFile=%LocalAppData%\Zemana\Zemana AntiMalware FileKey1=%LocalAppData%\Zemana\Zemana AntiMalware\reports|*.txt Tags=ccutil ID=Zemana AntiMalware * Author=Winapp2.ini Project [Zen Autocomplete History *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|formhistory* Tags=ccapps ID=Zen Autocomplete History * Author=Winapp2.ini Project [Zen Autofill Data *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|autofill-profiles.json Tags=ccapps ID=Zen Autofill Data * Author=Winapp2.ini Project [Zen Bookmark Backups *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*\bookmarkbackups|* Tags=ccapps ID=Zen Bookmark Backups * Author=Winapp2.ini Project [Zen Bookmark Favicons *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|favicons* Tags=ccapps ID=Zen Bookmark Favicons * Author=Winapp2.ini Project [Zen Caches *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|*.corrupt|RECURSE FileKey2=%AppData%\Zen\Profiles\*|AlternateServices.txt;cert9.db;ClientAuthRememberList.txt;notificationstore.json;parent.lock;serviceworker.txt;SiteSecurityServiceState*;webappsstore.sqlite FileKey3=%AppData%\Zen\Profiles\*\notificationstore|* FileKey4=%AppData%\Zen\Profiles\*\security_state|* FileKey5=%AppData%\Zen\Profiles\*\shader-cache|* FileKey6=%AppData%\Zen\Profiles\*\storage\temporary|*|RECURSE FileKey7=%LocalAppData%\Zen\Profiles\*\*cache*|*|REMOVESELF FileKey8=%LocalAppData%\Zen\Profiles\*\chrome_debugger_profile|*|REMOVESELF FileKey9=%LocalAppData%\Zen\Profiles\*\thumbnails|*|REMOVESELF Tags=ccapps ID=Zen Caches * Author=Winapp2.ini Project [Zen Privacy Sandbox *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|credentialstate.sqlite Tags=ccapps ID=Zen Privacy Sandbox * Author=Winapp2.ini Project [Zen Saved Usernames & Passwords *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|key4.db;logins.json Tags=ccapps ID=Zen Saved Usernames & Passwords * Author=Winapp2.ini Project [Zen Synced Tabs *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|synced-tabs.db* Tags=ccapps ID=Zen Synced Tabs * Author=Winapp2.ini Project [Zen Telemetry *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen|*.log|RECURSE FileKey2=%AppData%\Zen\Profiles\*|enumerate_devices.txt;protections.sqlite;storage.sqlite;targeting.snapshot.json;Telemetry.ShutdownTime.txt;times.json FileKey3=%AppData%\Zen\Profiles\*\crashes|* FileKey4=%AppData%\Zen\Profiles\*\datareporting|*|REMOVESELF FileKey5=%AppData%\Zen\Profiles\*\minidumps|* FileKey6=%AppData%\Zen\Profiles\*\saved-telemetry-pings|* FileKey7=%AppData%\Zen\Profiles\*\sessionstore-logs|* FileKey8=%AppData%\Zen\Profiles\*\weave\logs|* Tags=ccapps ID=Zen Telemetry * Author=Winapp2.ini Project [Zen Web Browsing Cookies *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|cookies* Tags=ccapps ID=Zen Web Browsing Cookies * Author=Winapp2.ini Project [Zen Web Browsing Session *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|session*.json* Tags=ccapps ID=Zen Web Browsing Session * Author=Winapp2.ini Project [Zen Web Browsing Session Backups *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*\sessionstore-backups|* Tags=ccapps ID=Zen Web Browsing Session Backups * Author=Winapp2.ini Project [Zen Web Storage *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\storage\default\http*|*|REMOVESELF Tags=ccapps ID=Zen Web Storage * Author=Winapp2.ini Project [Zen Website Permissions *] DetectFile=%AppData%\Zen\Profiles FileKey1=%AppData%\Zen\Profiles\*|permissions.sqlite Tags=ccapps ID=Zen Website Permissions * Author=Winapp2.ini Project [Zend Studio *] Detect=HKCU\Software\Zend\ZendStudio FileKey1=%ProgramFiles%\Zend\Zend Studio 10.0.0|*.html;*.log|RECURSE FileKey2=%ProgramFiles%\Zend\Zend Studio 10.0.0\docs|*.txt|REMOVESELF FileKey3=%ProgramFiles%\Zend\Zend Studio 10.0.0\features|*.html|RECURSE Tags=ccapps ID=Zend Studio * Author=Winapp2.ini Project [ZipGenius *] Detect=HKCU\Software\M.Dev Software\ZG5 FileKey1=%AppData%\ZipGenius|mru.dat RegKey1=HKCU\Software\M.Dev Software\ZG5\MRU Items Tags=ccutil ID=ZipGenius * Author=Winapp2.ini Project [ZoneAlarm Internet *] Detect=HKLM\Software\Zone Labs\ZoneAlarm FileKey1=%WinDir%\Internet Logs|*.dmp;*.log;*.tmp;*.zip Tags=ccapps ID=ZoneAlarm Internet * Author=Winapp2.ini Project [ZoneIDTrimmer *] Detect=HKLM\Software\Gasanov.net\ZoneIDTrimmer DetectFile=%ProgramFiles%\Gasanov.net\ZoneIDTrimmer FileKey1=%AppData%\ZoneIDTrimmer\Logs|ZoneIDTrimmer.log Tags=ccapps ID=ZoneIDTrimmer * Author=Winapp2.ini Project [Zoner Photo Studio *] Detect1=HKCU\Software\ZONER\Zoner Photo Studio 15 Detect2=HKCU\Software\ZONER\Zoner Photo Studio 16 Detect3=HKCU\Software\ZONER\Zoner Photo Studio 18 DetectFile=%LocalAppData%\Zoner\ZPS 14 FileKey1=%LocalAppData%\Zoner\OriginalsRepository|*.JPG.info;*.JPG.original|RECURSE FileKey2=%LocalAppData%\Zoner\ZPS *\Cache|*|RECURSE FileKey3=%LocalAppData%\Zoner\ZPS *\CEF|*.log FileKey4=%LocalAppData%\Zoner\ZPS *\ZPSCache.dat|* FileKey5=%UserProfile%\Pictures|*.uid-zps Tags=ccinternet ID=Zoner Photo Studio * Author=Winapp2.ini Project [Zoom *] DetectFile=%AppData%\Zoom FileKey1=%AppData%\Zoom|*.txt FileKey2=%AppData%\Zoom Plugin\checkforupdate|*.msi FileKey3=%AppData%\Zoom\data|*-journal;*.db-shm;*.db-wal;*.tmp*.db;*.zmdownload;zmonitorlog.bin|RECURSE FileKey4=%AppData%\Zoom\data\ConfAvatar|* FileKey5=%AppData%\Zoom\data\PresenterLayoutWallpaper_Thumb|* FileKey6=%AppData%\Zoom\data\WaitingRoom|* FileKey7=%AppData%\Zoom\data\WebviewCache|*.old;LOG|RECURSE FileKey8=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView|Visited Links FileKey9=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\*Cache|*|RECURSE FileKey10=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\blob_storage|*|RECURSE FileKey11=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\Network|Network Persistent State FileKey12=%AppData%\Zoom\Logs|*|RECURSE FileKey13=%AppData%\Zoom\Reports|* FileKey14=%AppData%\Zoom\ZoomDownload|*.exe;*.msi Tags=ccinternet ID=Zoom * Author=Winapp2.ini Project [Zoosk *] DetectFile=%AppData%\com.zoosk.desktop.* FileKey1=%AppData%\com.zoosk.desktop.*\Local Store|*.log FileKey2=%AppData%\com.zoosk.desktop.*\Local Store\#SharedObjects|*|RECURSE Tags=ccinternet ID=Zoosk * Author=Winapp2.ini Project [ZX32 ZX Spectrum Emulator *] Detect=HKCU\Software\VK\zx32\1.03 RegKey1=HKCU\Software\VK\zx32\1.03\FileMRU Tags=ccapps ID=ZX32 ZX Spectrum Emulator * Author=Winapp2.ini Project [Zynga Games *] DetectFile=%LocalAppData%\Zynga FileKey1=%LocalAppData%\Zynga\Logs|*|RECURSE Tags=ccapps ID=Zynga Games * Author=Winapp2.ini Project