*****************beginTime: 2023-11-15 15:11:10
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I1T8B5I.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I3VZZR6.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I4N7XWY.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I5549DK.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I9QUD4D.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I9XFWGO.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IA8BM9G.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IAP0QK7.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ICUKG74.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IFONLLN.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IG11NM0.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IG5KZI3.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$II9QMIM.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IJKEECA.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$INU22W7.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IPN46NB.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IPRAFTH.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ISNHE58.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IYUJ9CN.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IYY3EVB.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IZOLEU8.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R4N7XWY.lnk
F:\ճļ\TomatoBox\TbMainWin.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RCUKG74.lnk
F:\ճļ\³ȫ\BimAppMgrShell.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RI9QMIM.lnk
C:\Users\123456\Desktop\cdr2022_298\CDSTD2021.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RYY3EVB.lnk
F:\PROGRA~2\5SHOW5~1\ImageSee\UNWISE.EXE
*** dirs[i] + searchRec.Name:    C:\Program Files\Bonjour\ Bonjour.lnk
C:\PROGRA~2\Bonjour\BONJOU~1.RES\ZH_CN~1.LPR\ABOUTB~1.RTF
*** dirs[i] + searchRec.Name:    C:\Program Files (x86)\Bonjour\ Bonjour.lnk
C:\PROGRA~2\Bonjour\BONJOU~1.RES\ZH_CN~1.LPR\ABOUTB~1.RTF
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R2MJ84A.zip\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R7041Q1\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R92BYYQ\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RAZNKTV\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RCY30ON\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RG87AHM\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RMKWSF1.4\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ROAVIIV\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RSCMWGF.0_19155\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RXS3L9M.1\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\360ȫʿ.lnk
C:\PROGRA~2\360\360Safe\360Safe.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\360ȫ.lnk
C:\Users\123456\AppData\Roaming\360se6\APPLIC~1\360se.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Clash for Windows.lnk
E:\ǽ\CLASHF~1\CLASHF~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Inpaint.exe - ݷʽ.lnk
F:\Inpaint.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\WPS Office.lnk
F:\zwt\WPSOFF~1\KSOLAU~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\.lnk
F:\ճļ
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\.lnk
\\Administrator\ļ\С\
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ѹ.lnk
C:\Users\123456\AppData\Local\SOGOUE~1\SOGOUE~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ÿµİ.lnk
D:\ÿ~1
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ÿ - ݷʽ.lnk
F:\ÿ
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\鶯Ai.lnk
F:\zwt\鶯AI~2\鶯AI~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Ѹ.lnk
F:\zwt\Thunder\Program\THUNDE~4.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\׵ģ4.lnk
E:\׵ģ~1\leidian\LDPLAY~1\dnplayer.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Links\Desktop.lnk
C:\Users\123456\Desktop
*** dirs[i] + searchRec.Name:    C:\Users\123456\Links\Downloads.lnk
C:\Users\123456\DOWNLO~1
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\Adobe Photoshop CC (64 Bit).lnk
D:\ADOBEP~1\ADOBEP~1\PHOTOS~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\SDKDNS.lnk
F:\zwt\SDKDNS\SDKDNS.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\΢.lnk
F:\zwt\WeChat\WeChat.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\Թܼ.lnk
C:\PROGRA~2\Tencent\QQPCMgr\154228~1.220\QQPCTray.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\ͼ.lnk
C:\PROGRA~2\Meitu\MTXXPCL\MTXXPCL.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\ѶQQ.lnk
C:\PROGRA~2\Tencent\QQ\Bin\QQSCLA~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\.lnk
C:\PROGRA~2\DingDing\DINGTA~3.EXE
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_eventviewersettings_31bf3856ad364e35_10.0.19041.1_none_aae8e58aa310aa7d\Event Viewer.lnk
C:\WINDOWS\system32\eventvwr.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-hyper-v-management-clients_31bf3856ad364e35_10.0.19041.1_none_a87cce111f2d21d5\Hyper-V Manager.lnk
C:\WINDOWS\System32\mmc.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.3570_none_4f9881b40041e6c9\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.3636_none_4f8927f0004e3724\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.746_none_b8eadbf8a9c907b3\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3393_none_23a5277ba0b5bcd0\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3570_none_238dcb67a0c77521\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3636_none_237e71a3a0d3c57c\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.3570_none_5a3d7c87910931ac\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.3636_none_5a2e22c391158207\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.985_none_c3639a9e3ab1a351\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.19041.1_none_88835f4d79d6a242\Component Services.lnk
C:\WINDOWS\system32\comexp.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.3570_none_bfbd10b32b9f1e10\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.3636_none_bfadb6ef2bab6e6b\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.746_none_290f6af7d5263efa\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.19041.1_none_a84acae243b8ad63\Character Map.lnk
C:\WINDOWS\system32\charmap.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.2913_none_e1b99f3f12fa1c84\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.3570_none_e1eb26e912d3f50e\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.3636_none_e1dbcd2512e04569\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-commandprompt-shortcut_31bf3856ad364e35_10.0.19041.1_none_efaf63248e6d4479\Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.2913_none_279bd27b8f451aad\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.3570_none_27cd5a258f1ef337\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.3636_none_27be00618f2b4392\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3393_none_13fad4f51e799c40\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3570_none_13e378e11e8b5491\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3636_none_13d41f1d1e97a4ec\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3031_none_b0fe1ffa33450ece\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3570_none_b0cc284e3369e63e\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3636_none_b0bcce8a33763699\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.3570_none_0dbcff46458d1744\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.3636_none_0dada5824599679f\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.746_none_770f598aef14382e\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-e..er-server-shortcuts_31bf3856ad364e35_10.0.19041.1_none_5e85a7ed6f490164\Administrative Tools.lnk
C:\WINDOWS\system32\control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\01 - Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\01a - Windows PowerShell.lnk
C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\02 - Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\02a - Windows PowerShell.lnk
C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\03 - Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\04 - Disk Management.lnk
C:\WINDOWS\system32\diskmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\04-1 - NetworkStatus.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\05 - Device Manager.lnk
C:\WINDOWS\system32\control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\06 - SystemAbout.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\07 - Event Viewer.lnk
C:\WINDOWS\system32\eventvwr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\08 - PowerAndSleep.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\09 - Mobility Center.lnk
C:\WINDOWS\system32\mblctr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\1 - Desktop.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\1 - Run.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\10 - AppsAndFeatures.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\2 - Search.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\3 - Windows Explorer.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\4 - Control Panel.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\5 - Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\computer.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Control Panel.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\File Explorer.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Run.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Shows Desktop.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Window Switcher.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3324_none_edb0e034dda338ab\Fax Recipient.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3324_none_edb0e034dda338ab\Windows Fax and Scan.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3570_none_eda09ceeddae88bc\Fax Recipient.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3570_none_eda09ceeddae88bc\Windows Fax and Scan.lnk
C:\WINDOWS\system32\WFS.exe
ScanCount: 73417
****************EndTime: 2023-11-15 15:11:16
*****************beginTime: 2023-11-15 15:11:19
*** dirs[i] + searchRec.Name:    F:\zwt\PandaOCR.exe - ݷʽ.lnk
D:\PANDAO~1.67\PandaOCR.exe
*** dirs[i] + searchRec.Name:    F:\zwt\ѹ.lnk
C:\Users\123456\AppData\Local\SOGOUE~1\SOGOUE~1.EXE
*** dirs[i] + searchRec.Name:    F:\zwt\WeChat\΢.lnk
F:\zwt\WeChat\WeChat.exe
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RFTRM73.6\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$ROJS60M\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RYH1DFM.7\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\zwt\Thunder\Program\Ѹ.lnk
F:\zwt\Thunder\Program\THUNDE~4.EXE
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$R65UA3U.7\Office Tool\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$R8YSQOW\Office.zh-cn\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RSWCK9G\office2010lsbshyazb_XP85\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RW4TGC5\office2010\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RBHI21L\Office2016\Office2016\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\$RECYCLE.BIN\S-1-5-21-4033274307-2077464187-428792293-1001\$RSWCK9G\office2010lsbshyazb_XP85\Templates\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    F:\zwt\Thunder\Program\XMP\Program\ѸӰ.lnk
E:\6.2.2.560\Xmp\Program\XmpStart.exe
ScanCount: 255353
****************EndTime: 2023-11-15 15:11:49
*****************beginTime: 2023-11-15 15:12:06
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I1T8B5I.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I3VZZR6.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I4N7XWY.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I5549DK.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I9QUD4D.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$I9XFWGO.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IA8BM9G.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IAP0QK7.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ICUKG74.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IFONLLN.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IG11NM0.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IG5KZI3.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$II9QMIM.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IJKEECA.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$INU22W7.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IPN46NB.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IPRAFTH.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ISNHE58.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IYUJ9CN.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IYY3EVB.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$IZOLEU8.lnk

*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R4N7XWY.lnk
F:\ճļ\TomatoBox\TbMainWin.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RCUKG74.lnk
F:\ճļ\³ȫ\BimAppMgrShell.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RI9QMIM.lnk
C:\Users\123456\Desktop\cdr2022_298\CDSTD2021.exe
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RYY3EVB.lnk
F:\PROGRA~2\5SHOW5~1\ImageSee\UNWISE.EXE
*** dirs[i] + searchRec.Name:    C:\Program Files\Bonjour\ Bonjour.lnk
C:\PROGRA~2\Bonjour\BONJOU~1.RES\ZH_CN~1.LPR\ABOUTB~1.RTF
*** dirs[i] + searchRec.Name:    C:\Program Files (x86)\Bonjour\ Bonjour.lnk
C:\PROGRA~2\Bonjour\BONJOU~1.RES\ZH_CN~1.LPR\ABOUTB~1.RTF
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R2MJ84A.zip\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R7041Q1\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$R92BYYQ\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RAZNKTV\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RCY30ON\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RG87AHM\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RMKWSF1.4\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$ROAVIIV\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RSCMWGF.0_19155\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\$Recycle.Bin\S-1-5-21-4033274307-2077464187-428792293-1001\$RXS3L9M.1\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\360ȫʿ.lnk
C:\PROGRA~2\360\360Safe\360Safe.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\360ȫ.lnk
C:\Users\123456\AppData\Roaming\360se6\APPLIC~1\360se.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Clash for Windows.lnk
E:\ǽ\CLASHF~1\CLASHF~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Inpaint.exe - ݷʽ.lnk
F:\Inpaint.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\WPS Office.lnk
F:\zwt\WPSOFF~1\KSOLAU~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ʹ˵ؿ.TXT.lnk
C:\Users\123456\Desktop\~1\ʹ˵~1.TXT
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\.lnk
F:\ճļ
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\.lnk
\\Administrator\ļ\С\
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ѹ.lnk
C:\Users\123456\AppData\Local\SOGOUE~1\SOGOUE~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ÿµİ.lnk
D:\ÿ~1
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\ÿ - ݷʽ.lnk
F:\ÿ
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\鶯Ai.lnk
F:\zwt\鶯AI~2\鶯AI~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\Ѹ.lnk
F:\zwt\Thunder\Program\THUNDE~4.EXE
*** dirs[i] + searchRec.Name:    C:\Users\123456\Desktop\׵ģ4.lnk
E:\׵ģ~1\leidian\LDPLAY~1\dnplayer.exe
*** dirs[i] + searchRec.Name:    C:\Users\123456\Links\Desktop.lnk
C:\Users\123456\Desktop
*** dirs[i] + searchRec.Name:    C:\Users\123456\Links\Downloads.lnk
C:\Users\123456\DOWNLO~1
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\Adobe Photoshop CC (64 Bit).lnk
D:\ADOBEP~1\ADOBEP~1\PHOTOS~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\SDKDNS.lnk
F:\zwt\SDKDNS\SDKDNS.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\΢.lnk
F:\zwt\WeChat\WeChat.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\Թܼ.lnk
C:\PROGRA~2\Tencent\QQPCMgr\154228~1.220\QQPCTray.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\ͼ.lnk
C:\PROGRA~2\Meitu\MTXXPCL\MTXXPCL.exe
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\ѶQQ.lnk
C:\PROGRA~2\Tencent\QQ\Bin\QQSCLA~1.EXE
*** dirs[i] + searchRec.Name:    C:\Users\Public\Desktop\.lnk
C:\PROGRA~2\DingDing\DINGTA~3.EXE
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_eventviewersettings_31bf3856ad364e35_10.0.19041.1_none_aae8e58aa310aa7d\Event Viewer.lnk
C:\WINDOWS\system32\eventvwr.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-hyper-v-management-clients_31bf3856ad364e35_10.0.19041.1_none_a87cce111f2d21d5\Hyper-V Manager.lnk
C:\WINDOWS\System32\mmc.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.3570_none_4f9881b40041e6c9\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.3636_none_4f8927f0004e3724\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-a..roblemstepsrecorder_31bf3856ad364e35_10.0.19041.746_none_b8eadbf8a9c907b3\Steps Recorder.lnk
C:\WINDOWS\system32\psr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3393_none_23a5277ba0b5bcd0\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3570_none_238dcb67a0c77521\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-advancedtaskmanager_31bf3856ad364e35_10.0.19041.3636_none_237e71a3a0d3c57c\Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.3570_none_5a3d7c87910931ac\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.3636_none_5a2e22c391158207\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..-disposableclientvm_31bf3856ad364e35_10.0.19041.985_none_c3639a9e3ab1a351\Windows Sandbox.lnk
C:\WINDOWS\system32\WindowsSandbox.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.19041.1_none_88835f4d79d6a242\Component Services.lnk
C:\WINDOWS\system32\comexp.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.3570_none_bfbd10b32b9f1e10\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.3636_none_bfadb6ef2bab6e6b\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.746_none_290f6af7d5263efa\Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.19041.1_none_a84acae243b8ad63\Character Map.lnk
C:\WINDOWS\system32\charmap.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.2913_none_e1b99f3f12fa1c84\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.3570_none_e1eb26e912d3f50e\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.3636_none_e1dbcd2512e04569\Disk Cleanup.lnk
C:\WINDOWS\system32\cleanmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-commandprompt-shortcut_31bf3856ad364e35_10.0.19041.1_none_efaf63248e6d4479\Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.2913_none_279bd27b8f451aad\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.3570_none_27cd5a258f1ef337\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..-tools-mmc-adsiedit_31bf3856ad364e35_10.0.19041.3636_none_27be00618f2b4392\ADSIEdit.lnk
C:\WINDOWS\system32\adsiedit.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3393_none_13fad4f51e799c40\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3570_none_13e378e11e8b5491\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..mc-sitesandservices_31bf3856ad364e35_10.0.19041.3636_none_13d41f1d1e97a4ec\Active Directory Sites and Services.lnk
C:\WINDOWS\system32\dssite.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3031_none_b0fe1ffa33450ece\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3570_none_b0cc284e3369e63e\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-d..services-adam-setup_31bf3856ad364e35_10.0.19041.3636_none_b0bcce8a33763699\ADAM Install.lnk
C:\WINDOWS\ADAM\adaminstall.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.3570_none_0dbcff46458d1744\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.3636_none_0dada5824599679f\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_10.0.19041.746_none_770f598aef14382e\dfrgui.lnk
C:\WINDOWS\system32\dfrgui.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-e..er-server-shortcuts_31bf3856ad364e35_10.0.19041.1_none_5e85a7ed6f490164\Administrative Tools.lnk
C:\WINDOWS\system32\control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\01 - Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\01a - Windows PowerShell.lnk
C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\02 - Command Prompt.lnk
C:\WINDOWS\system32\cmd.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\02a - Windows PowerShell.lnk
C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\03 - Computer Management.lnk
C:\WINDOWS\system32\compmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\04 - Disk Management.lnk
C:\WINDOWS\system32\diskmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\04-1 - NetworkStatus.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\05 - Device Manager.lnk
C:\WINDOWS\system32\control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\06 - SystemAbout.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\07 - Event Viewer.lnk
C:\WINDOWS\system32\eventvwr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\08 - PowerAndSleep.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\09 - Mobility Center.lnk
C:\WINDOWS\system32\mblctr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\1 - Desktop.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\1 - Run.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\10 - AppsAndFeatures.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\2 - Search.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\3 - Windows Explorer.lnk
C:\WINDOWS\explorer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\4 - Control Panel.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\5 - Task Manager.lnk
C:\WINDOWS\system32\taskmgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\computer.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Control Panel.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\File Explorer.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Run.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Shows Desktop.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\Window Switcher.lnk

*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3324_none_edb0e034dda338ab\Fax Recipient.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3324_none_edb0e034dda338ab\Windows Fax and Scan.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3570_none_eda09ceeddae88bc\Fax Recipient.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3570_none_eda09ceeddae88bc\Windows Fax and Scan.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3636_none_ed91432addbad917\Fax Recipient.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_10.0.19041.3636_none_ed91432addbad917\Windows Fax and Scan.lnk
C:\WINDOWS\system32\WFS.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.3393_none_8f7c57044c3e2e02\Immersive Control Panel.lnk
C:\WINDOWS\System32\Control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.3570_none_8f64faf04c4fe653\Immersive Control Panel.lnk
C:\WINDOWS\System32\Control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.3636_none_8f55a12c4c5c36ae\Immersive Control Panel.lnk
C:\WINDOWS\System32\Control.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-clientshortcuts_31bf3856ad364e35_10.0.19041.1_none_9f9e4023b60d2433\IIS Client Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_10.0.19041.3570_none_f5c7c48f674e21a5\IIS6 Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr6.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_10.0.19041.3693_none_f5beb0df6754bd27\IIS6 Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr6.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_10.0.19041.906_none_5f45625010b4cd19\IIS6 Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr6.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_10.0.19041.3570_none_fc7a8de8705f9f9d\IIS Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_10.0.19041.3693_none_fc717a3870663b1f\IIS Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_10.0.19041.906_none_65f82ba919c64b11\IIS Manager.lnk
C:\WINDOWS\system32\inetsrv\InetMgr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-iscsi_initiator_ui_31bf3856ad364e35_10.0.19041.1_none_8ddc3834fb6f659f\iSCSI Initiator.lnk
C:\WINDOWS\system32\iscsicpl.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-m..-odbc-administrator_31bf3856ad364e35_10.0.19041.1_none_fa40f4e1dd1492a8\ODBC Data Sources (64-bit).lnk
C:\WINDOWS\system32\odbcad32.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-m..diagnostic-schedule_31bf3856ad364e35_10.0.19041.1_none_49c7a9c019150ac4\Memory Diagnostics Tool.lnk
C:\WINDOWS\system32\MdSched.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-magnify_31bf3856ad364e35_10.0.19041.3393_none_e2ec24084de64b4d\Magnify.lnk
C:\WINDOWS\system32\magnify.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-magnify_31bf3856ad364e35_10.0.19041.3570_none_e2d4c7f44df8039e\Magnify.lnk
C:\WINDOWS\system32\magnify.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-magnify_31bf3856ad364e35_10.0.19041.3636_none_e2c56e304e0453f9\Magnify.lnk
C:\WINDOWS\system32\magnify.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-mediaplayer-shortcut_31bf3856ad364e35_10.0.19041.1_none_64c27fc7ed12e401\Windows Media Player.lnk
C:\PROGRA~2\WINDOW~4\wmplayer.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msconfig-exe_31bf3856ad364e35_10.0.19041.1110_none_4f46693352ed3250\System Configuration.lnk
C:\WINDOWS\system32\msconfig.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msconfig-exe_31bf3856ad364e35_10.0.19041.3570_none_4f212f0b5308346c\System Configuration.lnk
C:\WINDOWS\system32\msconfig.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msconfig-exe_31bf3856ad364e35_10.0.19041.3636_none_4f11d547531484c7\System Configuration.lnk
C:\WINDOWS\system32\msconfig.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.19041.3393_none_209ab372aee4b4c2\System Information.lnk
C:\WINDOWS\system32\msinfo32.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.19041.3570_none_2083575eaef66d13\System Information.lnk
C:\WINDOWS\system32\msinfo32.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.19041.3636_none_2073fd9aaf02bd6e\System Information.lnk
C:\WINDOWS\system32\msinfo32.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.19041.3031_none_02f66ed8a3b50585\Paint.lnk
C:\WINDOWS\system32\mspaint.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.19041.3570_none_02c4772ca3d9dcf5\Paint.lnk
C:\WINDOWS\system32\mspaint.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.19041.3636_none_02b51d68a3e62d50\Paint.lnk
C:\WINDOWS\system32\mspaint.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-narrator_31bf3856ad364e35_10.0.19041.3393_none_32dc258c58ef63c3\Narrator.lnk
C:\WINDOWS\system32\narrator.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-narrator_31bf3856ad364e35_10.0.19041.3570_none_32c4c97859011c14\Narrator.lnk
C:\WINDOWS\system32\narrator.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-narrator_31bf3856ad364e35_10.0.19041.3636_none_32b56fb4590d6c6f\Narrator.lnk
C:\WINDOWS\system32\narrator.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-nfs-adminmmc_31bf3856ad364e35_10.0.19041.1_none_9da8f6be034114e3\Services For Network File System.lnk
C:\WINDOWS\system32\nfsmgmt.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-notepad_31bf3856ad364e35_10.0.19041.3393_none_e3d8da17253626fd\Notepad.lnk
C:\WINDOWS\system32\notepad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-notepad_31bf3856ad364e35_10.0.19041.3570_none_e3c17e032547df4e\Notepad.lnk
C:\WINDOWS\system32\notepad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-notepad_31bf3856ad364e35_10.0.19041.3636_none_e3b2243f25542fa9\Notepad.lnk
C:\WINDOWS\system32\notepad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-osk_31bf3856ad364e35_10.0.19041.3155_none_1f8c91280f18b30f\On-Screen Keyboard.lnk
C:\WINDOWS\system32\osk.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-osk_31bf3856ad364e35_10.0.19041.3570_none_1f63c3f40f36d55c\On-Screen Keyboard.lnk
C:\WINDOWS\system32\osk.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-osk_31bf3856ad364e35_10.0.19041.3636_none_1f546a300f4325b7\On-Screen Keyboard.lnk
C:\WINDOWS\system32\osk.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_10.0.19041.1806_none_7fe7342e36190b4d\Print Management.lnk
C:\WINDOWS\system32\printmanagement.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_10.0.19041.3570_none_800f327435f9c963\Print Management.lnk
C:\WINDOWS\system32\printmanagement.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_10.0.19041.3636_none_7fffd8b0360619be\Print Management.lnk
C:\WINDOWS\system32\printmanagement.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.3570_none_10b0aeb3563c13eb\Performance Monitor.lnk
C:\WINDOWS\system32\perfmon.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.3570_none_10b0aeb3563c13eb\Resource Monitor.lnk
C:\WINDOWS\system32\perfmon.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.3636_none_10a154ef56486446\Performance Monitor.lnk
C:\WINDOWS\system32\perfmon.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.3636_none_10a154ef56486446\Resource Monitor.lnk
C:\WINDOWS\system32\perfmon.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.746_none_7a0308f7ffc334d5\Performance Monitor.lnk
C:\WINDOWS\system32\perfmon.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.746_none_7a0308f7ffc334d5\Resource Monitor.lnk
C:\WINDOWS\system32\perfmon.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-powershell-ise_31bf3856ad364e35_10.0.19041.1_none_1ed6cb15a1b51b10\Windows PowerShell ISE (x86).lnk
C:\WINDOWS\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-powershell-ise_31bf3856ad364e35_10.0.19041.1_none_1ed6cb15a1b51b10\Windows PowerShell ISE.lnk
C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-quickassist_31bf3856ad364e35_10.0.19041.3393_none_72bf191723f951a8\Quick Assist.lnk
C:\WINDOWS\system32\quickassist.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-quickassist_31bf3856ad364e35_10.0.19041.3570_none_72a7bd03240b09f9\Quick Assist.lnk
C:\WINDOWS\system32\quickassist.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-quickassist_31bf3856ad364e35_10.0.19041.3636_none_7298633f24175a54\Quick Assist.lnk
C:\WINDOWS\system32\quickassist.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-recoverydrive_31bf3856ad364e35_10.0.19041.3393_none_9d50fdad40e3e079\RecoveryDrive.lnk
C:\WINDOWS\system32\RecoveryDrive.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-recoverydrive_31bf3856ad364e35_10.0.19041.3570_none_9d39a19940f598ca\RecoveryDrive.lnk
C:\WINDOWS\system32\RecoveryDrive.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-recoverydrive_31bf3856ad364e35_10.0.19041.3636_none_9d2a47d54101e925\RecoveryDrive.lnk
C:\WINDOWS\system32\RecoveryDrive.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_10.0.19041.3570_none_68d5a5ec9120ca72\Registry Editor.lnk
C:\WINDOWS\regedit.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_10.0.19041.3636_none_68c64c28912d1acd\Registry Editor.lnk
C:\WINDOWS\regedit.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_10.0.19041.746_none_d22800313aa7eb5c\Registry Editor.lnk
C:\WINDOWS\regedit.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-s..ment-policytools-ex_31bf3856ad364e35_10.0.19041.1_none_0f506321e073254e\Security Configuration Management.lnk
C:\WINDOWS\system32\secpol.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.19041.1_none_8554f027e5186b5e\services.lnk
C:\WINDOWS\system32\services.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.19041.3271_none_0e8b4bb33ed2dd8b\Snipping Tool.lnk
C:\WINDOWS\system32\SnippingTool.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.19041.3570_none_0e6af2b73eeb17bd\Snipping Tool.lnk
C:\WINDOWS\system32\SnippingTool.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.19041.3636_none_0e5b98f33ef76818\Snipping Tool.lnk
C:\WINDOWS\system32\SnippingTool.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-speech-userexperience_31bf3856ad364e35_10.0.19041.3570_none_90b0e0930114c397\Speech Recognition.lnk
C:\WINDOWS\Speech\Common\sapisvr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-speech-userexperience_31bf3856ad364e35_10.0.19041.3636_none_90a186cf012113f2\Speech Recognition.lnk
C:\WINDOWS\Speech\Common\sapisvr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-speech-userexperience_31bf3856ad364e35_10.0.19041.746_none_fa033ad7aa9be481\Speech Recognition.lnk
C:\WINDOWS\Speech\Common\sapisvr.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..etpc-mathinputpanel_31bf3856ad364e35_10.0.19041.2193_none_3f756da60611a7f1\Math Input Panel.lnk
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..etpc-mathinputpanel_31bf3856ad364e35_10.0.19041.3570_none_3f4873a00633954b\Math Input Panel.lnk
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..etpc-mathinputpanel_31bf3856ad364e35_10.0.19041.3636_none_3f3919dc063fe5a6\Math Input Panel.lnk
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.19041.3155_none_c2ac0b50d641918c\Remote Desktop Connection.lnk
C:\WINDOWS\system32\mstsc.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.19041.3570_none_c2833e1cd65fb3d9\Remote Desktop Connection.lnk
C:\WINDOWS\system32\mstsc.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.19041.3636_none_c273e458d66c0434\Remote Desktop Connection.lnk
C:\WINDOWS\system32\mstsc.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-wordpad_31bf3856ad364e35_10.0.19041.3448_none_a268828922290dae\Wordpad.lnk
C:\PROGRA~2\WINDOW~3\ACCESS~1\wordpad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-wordpad_31bf3856ad364e35_10.0.19041.3570_none_a26169bb222da89c\Wordpad.lnk
C:\PROGRA~2\WINDOW~3\ACCESS~1\wordpad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft-windows-wordpad_31bf3856ad364e35_10.0.19041.3693_none_a258560b2234441e\Wordpad.lnk
C:\PROGRA~2\WINDOW~3\ACCESS~1\wordpad.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft.windows.powershell.common_31bf3856ad364e35_10.0.19041.1_none_e6d05ddbba96a35b\Windows PowerShell (x86).lnk
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_microsoft.windows.powershell.common_31bf3856ad364e35_10.0.19041.1_none_e6d05ddbba96a35b\Windows PowerShell.lnk
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_multipoint-logcollector_31bf3856ad364e35_10.0.19041.1_none_56138d203a7fc4cf\MultiPoint Log Collector.lnk
C:\Program Files (x86)\Windows MultiPoint Server\LogCollector.exe
C:\Program Files\Windows MultiPoint Server\LogCollector.exe
invalid shortcut
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_multipoint-wmsmanager_31bf3856ad364e35_10.0.19041.1_none_d1ffdc3927836528\MultiPoint Manager.lnk
C:\Program Files (x86)\Windows MultiPoint Server\WmsManager.exe
C:\Program Files\Windows MultiPoint Server\WmsManager.exe
invalid shortcut
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_networking-mpssvc-shortcut_31bf3856ad364e35_10.0.19041.1_none_3b48028dac22b3be\Windows Defender Firewall with Advanced Security.lnk
C:\WINDOWS\system32\WF.msc
*** dirs[i] + searchRec.Name:    C:\Windows\WinSxS\amd64_taskschedulersettings_31bf3856ad364e35_10.0.19041.1_none_00dc114da3ba6b01\Task Scheduler.lnk
C:\WINDOWS\system32\taskschd.msc
ScanCount: 125714
****************EndTime: 2023-11-15 15:12:17
