用户服务中心

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

CN

RU CN DE EN ES FR IT JP KZ UZ PL BY ID
Close
服务
扫描仪
Dr.Web vxCube
试用
计算机病毒事件调查
病毒知识库
知识库

技术

术语

教育培训

误区

新闻

Trojan.Siggen19.13876

Added to the Dr.Web virus database: 2022-11-27

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKCU>\Software\Classes\ferdium\shell\open\command] '' = '"%LOCALAPPDATA%\Programs\ferdium\Ferdium.exe" "%1"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ferdium' = '"%LOCALAPPDATA%\Programs\ferdium\Ferdium.exe"'
Malicious functions
Injects code into
the following user processes:
  • ferdium.exe
Modifies file system
Creates the following files
  • %TEMP%\nsfb838.tmp\system.dll
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\coinbase.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\confluence.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\devdocs.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\devrant.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\dialpad.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\dingtalk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\discord.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\disqus.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\dockerhub.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\easy-redmine.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\feedly.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\element.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\epicgames.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\erepublik.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\evernote.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\facebook.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\facebookpages.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\fastmail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\featured.json
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\feedbin.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\clubhouse.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\dropbox.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\clockwise.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\bitwarden.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\anonaddy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\anydo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\asana.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\azure-devops.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\basecamp.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\bigbluebutton.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\binance.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\bip.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\bitbucket.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\box.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\cliq.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\buffer.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\campuswire.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\canvas.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\chatra.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\chatwoot.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\chatwork.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\circuit.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\ciscospark.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\clickup.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\clockify.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\glowing-bear.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\inoreader.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\flock.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gotomeeting.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\grammarly.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\grape.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\groupme.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\guilded.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\habitica.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hackmd.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hangouts.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hangoutschat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hey.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\fleep.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hipchat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\home-assistant.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hostnet.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\hubstaff.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\icloud-reminders.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\icloud.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\icq.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\idobata.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\infomaniak-mail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googlepodcasts.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\android-messages.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googlemeet.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gitter.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\flowdock.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\franz-custom-website.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\freshdesk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\freshrss.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gadugadu.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gaming-on-linux.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gitea.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\github.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gitlab.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\figma.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googledrive.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\gmail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\good-reads.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\google-contacts.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\google-duo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\google-news.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\google-translate.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\google-voice.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googlecalendar.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googleclassroom.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\googlekeep.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\harvest.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\amazon-work-mail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\sync.js
  • %LOCALAPPDATA%\programs\ferdium\locales\kn.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ko.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\lt.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\lv.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ml.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\mr.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ms.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\nb.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\nl.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\pt-br.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\te.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\pt-pt.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ro.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ru.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\sk.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\sl.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\sr.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\sv.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\sw.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ta.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ja.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\pl.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\it.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\es-419.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\bg.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\bn.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\ca.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\cs.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\da.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\de.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\el.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\en-gb.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\en-us.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\es.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\hu.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\et.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\fa.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\fi.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\fil.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\fr.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\gu.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\he.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\hi.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\hr.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\id.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-extrabolditalic.ttf
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\all.json
  • %LOCALAPPDATA%\programs\ferdium\locales\uk.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-alert.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\.prettierrc
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\.taprc
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\cli.js
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\get-sysinternals-du.js
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\index.js
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\license.md
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\os.js
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\package.json
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\ci.yml
  • %LOCALAPPDATA%\programs\ferdium\locales\tr.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\release.yml
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du.exe
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64.exe
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64a.exe
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\eula.txt
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\node_modules\fast-folder-size\types\index.test-d.ts
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\air-droid.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\airmessage.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\airtable.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-9.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\amazon-web-services.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-8.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-extrabold.ttf
  • %LOCALAPPDATA%\programs\ferdium\locales\ur.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\vi.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\zh-cn.pak
  • %LOCALAPPDATA%\programs\ferdium\locales\zh-tw.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app-update.yml
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar
  • %LOCALAPPDATA%\programs\ferdium\resources\elevate.exe
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-bold.ttf
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-bolditalic.ttf
  • %LOCALAPPDATA%\programs\ferdium\locales\th.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-6.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-light.ttf
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\fonts\opensans-regular.ttf
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\display.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-1.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-10.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-2.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-3.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-4.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-5.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-7.ico
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\producthunt.tar.gz
  • %APPDATA%\ferdium\.updaterid
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\irccloud.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\wakatime.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\webex-teams.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\wechat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\weekplan.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\whatsapp.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\whereby.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\wire.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\withspectrum.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\workflowy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\wrike.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zammad.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\xing.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\xmpp.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\yahoo-mail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\yammer.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\yandex-mail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\youtrack.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\youtube.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\youtubemusic.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zalo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\voxer.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\workplace.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\vk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\todoist.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\teamwork-projects.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\telegram.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\thelounge.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\threema.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tick.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\ticktick.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tiktok.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tinder.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tixio.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\toggl.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\udemy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\trakt.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\trello.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tt-rss.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tutanota.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tweetdeck.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\twist.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\twitch.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\twitter-dm.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\twitter.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\unraid.tar.gz
  • %APPDATA%\ferdium\config\settings.json
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\intercom.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zeplin.tar.gz
  • %APPDATA%\ferdium\gpucache\data_3
  • %APPDATA%\ferdium\cache\cache_data\index
  • %APPDATA%\ferdium\cache\cache_data\data_0
  • %APPDATA%\ferdium\cache\cache_data\data_1
  • %APPDATA%\ferdium\cache\cache_data\data_2
  • %APPDATA%\ferdium\cache\cache_data\data_3
  • %APPDATA%\ferdium\dictionaries\en-us-10-1.bdic
  • %APPDATA%\ferdium\cache\cache_data\f_000001
  • %APPDATA%\ferdium\4ea4952f-0ac1-47c5-9475-d9de3d1a1937.tmp
  • %APPDATA%\ferdium\session storage\manifest-000001
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zenhub.tar.gz
  • %APPDATA%\ferdium\session storage\000001.dbtmp
  • %APPDATA%\ferdium\session storage\000003.log
  • %APPDATA%\ferdium\2559a113-7f7e-4291-a0c4-e17aa1b100bd.tmp
  • %APPDATA%\ferdium\network\72bcef47-e0e0-478b-bfce-4857933ac428.tmp
  • %APPDATA%\ferdium\network\cookies-journal
  • %APPDATA%\ferdium\network\cookies
  • %APPDATA%\ferdium\local storage\leveldb\000003.log
  • %APPDATA%\ferdium\network\974199c4-c4bf-45cb-bc2e-00ba8c930c82.tmp
  • %APPDATA%\ferdium\fontlookuptablecache\font_unique_name_table.pb
  • %APPDATA%\ferdium\gpucache\data_2
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\teamweek.tar.gz
  • %APPDATA%\ferdium\gpucache\data_1
  • %HOMEPATH%\desktop\ferdium.lnk
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zimbra.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zoho-projects.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zoho.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zoom.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zulip.tar.gz
  • %LOCALAPPDATA%\ferdium-updater\installer.exe
  • %LOCALAPPDATA%\programs\ferdium\uninstall ferdium.exe
  • %APPDATA%\microsoft\windows\start menu\programs\ferdium.lnk
  • %TEMP%\nsfb838.tmp\winshell.dll
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\zendesk.tar.gz
  • %APPDATA%\ferdium\gpucache\index
  • %APPDATA%\ferdium\config\proxy.json
  • %APPDATA%\ferdium\local storage\leveldb\log
  • %APPDATA%\ferdium\local storage\leveldb\manifest-000001
  • %APPDATA%\ferdium\code cache\js\index
  • %APPDATA%\ferdium\code cache\wasm\index
  • %APPDATA%\ferdium\local storage\leveldb\000001.dbtmp
  • %APPDATA%\ferdium\code cache\wasm\index-dir\temp-index
  • %APPDATA%\ferdium\code cache\js\index-dir\temp-index
  • %TEMP%\243d42fa-943f-4d7e-a567-a06e5ad8053b.tmp.ico
  • %APPDATA%\ferdium\gpucache\data_0
  • %LOCALAPPDATA%\programs\ferdium\locales\ar.pak
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\teamleader.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\slowly.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mstodo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mysms.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\netatmo-energy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\netlify.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\newsblur.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-calendar.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-carnet.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-cospend.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-news.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-tasks.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\onmail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextdoor.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\noisli.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nomadlist.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\notion.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\odoo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\odysee.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\office365-owa.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\onenote.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\msteams.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\nextcloud-talk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\moodle.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\lastpass.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\iris-messenger.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\jira.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\jitsi.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\jollor.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\kaizala.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\keybase.io.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\kimaicloud.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\kiwiirc.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\lark.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\linkedin.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\monday.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\magic-level.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mailbox.org.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mailfence.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mastodon.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mattermost.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\meetup.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\messenger.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\mewe.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\misskey.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\monicahq.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\instagram.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tawk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\paymo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\rocketchat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\roundcube.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\scribens.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\scrumpy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\sendtask.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\simplenote.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\skype.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\slack.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\slite.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\snapdrop.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\package.json
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\sococo.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\stackexchange.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\stackoverflow-chat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\stackoverflow.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\standardnotes.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\steamchat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\stride.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\superhuman.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\sync.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\ritetag.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\tchap.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\riseup.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pomodoro-tracker.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pinterest.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pipefy.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pivotal-tracker.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\plan.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\plek.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pleroma.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\plurk.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pocket.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\podio.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\ovhcloud.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\redditchat.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\proton-mail.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\protoncalendar.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\protondrive.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\protonet.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pulsesms.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pushbullet.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\pushover.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\rainloop.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\reddit.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\resources\app.asar.unpacked\recipes\ringcentral.tar.gz
  • %APPDATA%\ferdium\session storage\log
  • %LOCALAPPDATA%\programs\ferdium\locales\am.pak
  • %LOCALAPPDATA%\programs\ferdium\ffmpeg.dll
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatra.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatwoot.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatwork.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\circuit.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ciscospark.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clickup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\cliq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clockify.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clockwise.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\coinbase.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\easy-redmine.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\confluence.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\devdocs.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\devrant.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dialpad.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dingtalk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\discord.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\disqus.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dockerhub.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dropbox.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\canvas.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clubhouse.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\campuswire.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\android-messages.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\package.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\sync.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\types\index.test-d.ts
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\air-droid.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\airmessage.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\airtable.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\all.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\amazon-web-services.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\amazon-work-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\anonaddy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\box.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\anydo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\asana.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\azure-devops.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\basecamp.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bigbluebutton.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\binance.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bip.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bitbucket.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bitwarden.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\buffer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\flowdock.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hey.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\erepublik.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-duo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-news.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-translate.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-voice.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlecalendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googleclassroom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googledrive.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlekeep.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlemeet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gotomeeting.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\epicgames.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\grammarly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\grape.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\groupme.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\guilded.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\habitica.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hackmd.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hangouts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hangoutschat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\harvest.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-contacts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\os.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\good-reads.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\flock.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\evernote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\facebook.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\facebookpages.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\fastmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\featured.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\feedbin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\feedly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\figma.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\fleep.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\element.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\glowing-bear.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\franz-custom-website.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\freshdesk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\freshrss.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gadugadu.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gaming-on-linux.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitea.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\github.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitlab.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitter.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlepodcasts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\license.md
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-6.ico
  • %TEMP%\nsfb838.tmp\7z-out\locales\et.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fa.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fil.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\gu.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\he.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\id.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\nb.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\it.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ja.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\kn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ko.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\lt.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\lv.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ml.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\mr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ms.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\es.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hu.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\es-419.pak
  • %TEMP%\nsfb838.tmp\7z-out\licenses.chromium.html
  • %TEMP%\nsfb838.tmp\stdutils.dll
  • %TEMP%\nsfb838.tmp\spiderbanner.dll
  • %TEMP%\nsfb838.tmp\nsexec.dll
  • %TEMP%\nsfb838.tmp\app-64.7z
  • %TEMP%\nsfb838.tmp\nsis7z.dll
  • %TEMP%\nsfb838.tmp\7z-out\chrome_100_percent.pak
  • %TEMP%\nsfb838.tmp\7z-out\chrome_200_percent.pak
  • %TEMP%\nsfb838.tmp\7z-out\icudtl.dat
  • %TEMP%\nsfb838.tmp\7z-out\license.electron.txt
  • %TEMP%\nsfb838.tmp\7z-out\locales\af.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\en-gb.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\am.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ar.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\bg.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\bn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ca.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\cs.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\da.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\de.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\el.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\en-us.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\th.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\get-sysinternals-du.js
  • %TEMP%\nsfb838.tmp\7z-out\locales\pt-br.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-light.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-regular.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\display.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-1.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-10.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-2.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-3.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-4.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-5.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-7.ico
  • %TEMP%\nsfb838.tmp\7z-out\locales\pl.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-8.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-9.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-alert.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\ci.yml
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\release.yml
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.prettierrc
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.taprc
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\eula.txt
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\cli.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-extrabolditalic.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\index.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-extrabold.ttf
  • %TEMP%\nsfb838.tmp\7z-out\locales\te.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\pt-pt.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ro.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ru.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sk.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sl.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sv.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sw.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ta.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\nl.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-bold.ttf
  • %TEMP%\nsfb838.tmp\7z-out\locales\tr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\uk.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ur.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\vi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\zh-cn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\zh-tw.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app-update.yml
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-bolditalic.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pinterest.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\vulkan-1.dll
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hostnet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tutanota.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tweetdeck.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitch.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitter-dm.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitter.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\udemy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\unraid.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\vk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wakatime.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wrike.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\webex-teams.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wechat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\weekplan.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\whatsapp.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\whereby.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wire.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\withspectrum.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\workflowy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\workplace.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tt-rss.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\voxer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\trello.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamweek.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackoverflow.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\standardnotes.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\steamchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stride.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\superhuman.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sync.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tawk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tchap.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamleader.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamwork-projects.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\toggl.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\telegram.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\thelounge.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\threema.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tick.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ticktick.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tiktok.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tinder.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tixio.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\todoist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\trakt.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zimbra.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\home-assistant.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yahoo-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64a.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\elevate.exe
  • %TEMP%\nsfb838.tmp\7z-out\vk_swiftshader.dll
  • %TEMP%\nsfb838.tmp\7z-out\vulkan-1.dll
  • %LOCALAPPDATA%\programs\ferdium\chrome_100_percent.pak
  • %LOCALAPPDATA%\programs\ferdium\chrome_200_percent.pak
  • %LOCALAPPDATA%\programs\ferdium\d3dcompiler_47.dll
  • %LOCALAPPDATA%\programs\ferdium\ferdium.exe
  • %LOCALAPPDATA%\programs\ferdium\icudtl.dat
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\xmpp.tar.gz
  • %LOCALAPPDATA%\programs\ferdium\libegl.dll
  • %LOCALAPPDATA%\programs\ferdium\libglesv2.dll
  • %LOCALAPPDATA%\programs\ferdium\license.electron.txt
  • %LOCALAPPDATA%\programs\ferdium\licenses.chromium.html
  • %LOCALAPPDATA%\programs\ferdium\resources.pak
  • %LOCALAPPDATA%\programs\ferdium\snapshot_blob.bin
  • %LOCALAPPDATA%\programs\ferdium\v8_context_snapshot.bin
  • %LOCALAPPDATA%\programs\ferdium\vk_swiftshader.dll
  • %LOCALAPPDATA%\programs\ferdium\vk_swiftshader_icd.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackoverflow-chat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\libglesv2.dll
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zeplin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yammer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yandex-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtrack.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtube.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtubemusic.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zalo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zammad.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zendesk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zenhub.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\xing.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\ffmpeg.dll
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoho-projects.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoho.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zulip.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\snapshot_blob.bin
  • %TEMP%\nsfb838.tmp\7z-out\v8_context_snapshot.bin
  • %TEMP%\nsfb838.tmp\7z-out\vk_swiftshader_icd.json
  • %TEMP%\nsfb838.tmp\7z-out\d3dcompiler_47.dll
  • %TEMP%\nsfb838.tmp\7z-out\ferdium.exe
  • %TEMP%\nsfb838.tmp\7z-out\libegl.dll
  • %LOCALAPPDATA%\programs\ferdium\locales\af.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackexchange.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ritetag.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mastodon.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mattermost.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\meetup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\messenger.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mewe.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\misskey.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\monday.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\monicahq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\moodle.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mstodo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-tasks.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mysms.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\netatmo-energy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\netlify.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\newsblur.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-calendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-carnet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-cospend.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-news.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-talk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mailfence.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\msteams.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mailbox.org.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\irccloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hubstaff.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icloud-reminders.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\idobata.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\infomaniak-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\inoreader.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\instagram.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\intercom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\iris-messenger.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\linkedin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jira.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jitsi.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jollor.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kaizala.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\keybase.io.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kimaicloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kiwiirc.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\lark.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\lastpass.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\magic-level.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hipchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\snapdrop.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\noisli.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protonet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pulsesms.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pushbullet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pushover.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\rainloop.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\reddit.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\redditchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ringcentral.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\riseup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\rocketchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextdoor.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\roundcube.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\scribens.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\scrumpy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sendtask.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\simplenote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\skype.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slack.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slite.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slowly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protondrive.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sococo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protoncalendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\paymo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nomadlist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\notion.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\odoo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\odysee.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\office365-owa.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\onenote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\onmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ovhcloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\package.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\producthunt.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pipefy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pivotal-tracker.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plan.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plek.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pleroma.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plurk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pocket.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\podio.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pomodoro-tracker.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\proton-mail.tar.gz
  • %APPDATA%\ferdium\9c74c213-acdf-498e-aaa4-2f1402d30c48.tmp
Deletes the following files
  • %TEMP%\nsfb838.tmp\7z-out\chrome_100_percent.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\package.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ovhcloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\onmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\onenote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\office365-owa.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\odysee.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\odoo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\notion.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nomadlist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\noisli.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextdoor.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-tasks.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-talk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-news.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-cospend.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-carnet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\nextcloud-calendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\newsblur.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\paymo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pipefy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\riseup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pivotal-tracker.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ringcentral.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\redditchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\reddit.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\rainloop.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pushover.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pushbullet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pulsesms.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protonet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protondrive.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\protoncalendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\proton-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\producthunt.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pomodoro-tracker.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\podio.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pocket.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plurk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pleroma.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plek.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\plan.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\netlify.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\pinterest.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\netatmo-energy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jitsi.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\iris-messenger.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\irccloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\intercom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\instagram.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\inoreader.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\infomaniak-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\idobata.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\icloud-reminders.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hubstaff.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hostnet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\home-assistant.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hipchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hey.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\harvest.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hangoutschat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hangouts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\hackmd.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jira.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\jollor.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mstodo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kaizala.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\msteams.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\moodle.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\monicahq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\monday.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\misskey.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mewe.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\messenger.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\meetup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mattermost.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mastodon.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mailfence.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mailbox.org.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\magic-level.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\linkedin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\lastpass.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\lark.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kiwiirc.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\kimaicloud.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\keybase.io.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\mysms.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ritetag.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\rocketchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\roundcube.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zammad.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zalo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtubemusic.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtube.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\youtrack.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yandex-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yammer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\yahoo-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\xmpp.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\xing.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wrike.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\workplace.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\workflowy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\withspectrum.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wire.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\whereby.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\whatsapp.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\weekplan.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wechat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\wakatime.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\webex-teams.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zendesk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zenhub.tar.gz
  • %TEMP%\nsfb838.tmp\winshell.dll
  • %TEMP%\nsfb838.tmp\system.dll
  • %TEMP%\nsfb838.tmp\stdutils.dll
  • %TEMP%\nsfb838.tmp\spiderbanner.dll
  • %TEMP%\nsfb838.tmp\nsis7z.dll
  • %TEMP%\nsfb838.tmp\nsexec.dll
  • %TEMP%\nsfb838.tmp\app-64.7z
  • %TEMP%\nsfb838.tmp\7z-out\vulkan-1.dll
  • %TEMP%\nsfb838.tmp\7z-out\vk_swiftshader_icd.json
  • %TEMP%\nsfb838.tmp\7z-out\v8_context_snapshot.bin
  • %APPDATA%\ferdium\preferences~rfe1d01.tmp
  • %TEMP%\nsfb838.tmp\7z-out\snapshot_blob.bin
  • %TEMP%\nsfb838.tmp\7z-out\resources.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\elevate.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zulip.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoho.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zoho-projects.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zimbra.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\zeplin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\voxer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\vk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\unraid.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sync.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\superhuman.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stride.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\steamchat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\standardnotes.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackoverflow.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackoverflow-chat.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\stackexchange.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sococo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\snapdrop.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slowly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slite.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\slack.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\skype.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\simplenote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\sendtask.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\scrumpy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\scribens.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tchap.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamleader.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tawk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamweek.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\udemy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\teamwork-projects.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitter.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitter-dm.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twitch.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\twist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tweetdeck.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tutanota.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tt-rss.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\trello.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\toggl.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\habitica.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\todoist.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tixio.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tinder.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tiktok.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ticktick.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\tick.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\threema.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\thelounge.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\telegram.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\trakt.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\vk_swiftshader.dll
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\guilded.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-translate.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app-update.yml
  • %TEMP%\nsfb838.tmp\7z-out\locales\zh-tw.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\zh-cn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\vi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ur.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\uk.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\tr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\th.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\te.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ta.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sw.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sv.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sl.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\sk.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ru.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ro.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\pt-pt.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\pt-br.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-bolditalic.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-extrabold.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.taprc
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.prettierrc
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\release.yml
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\.github\workflows\ci.yml
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-alert.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-9.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-8.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-7.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-6.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-5.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-4.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-3.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-2.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-10.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\taskbar-1.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\images\taskbar\win32\display.ico
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-regular.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-light.ttf
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-extrabolditalic.ttf
  • %TEMP%\nsfb838.tmp\7z-out\locales\pl.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\assets\fonts\opensans-bold.ttf
  • %TEMP%\nsfb838.tmp\7z-out\locales\nl.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\en-us.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\el.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\de.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\da.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\cs.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ca.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\bn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\bg.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ar.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\am.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\af.pak
  • %TEMP%\nsfb838.tmp\7z-out\licenses.chromium.html
  • %TEMP%\nsfb838.tmp\7z-out\license.electron.txt
  • %TEMP%\nsfb838.tmp\7z-out\libglesv2.dll
  • %TEMP%\nsfb838.tmp\7z-out\libegl.dll
  • %TEMP%\nsfb838.tmp\7z-out\icudtl.dat
  • %TEMP%\nsfb838.tmp\7z-out\ffmpeg.dll
  • %TEMP%\nsfb838.tmp\7z-out\ferdium.exe
  • %TEMP%\nsfb838.tmp\7z-out\d3dcompiler_47.dll
  • %TEMP%\nsfb838.tmp\7z-out\chrome_200_percent.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\en-gb.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\es-419.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ms.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\es.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\mr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ml.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\lv.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\lt.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ko.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\kn.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\ja.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\it.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\id.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hu.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\hi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\he.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\gu.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fr.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fil.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fi.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\fa.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\et.pak
  • %TEMP%\nsfb838.tmp\7z-out\locales\nb.pak
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\du64a.exe
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\bin\eula.txt
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\freshrss.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\freshdesk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\franz-custom-website.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\flowdock.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\flock.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\fleep.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\figma.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\feedly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\feedbin.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\featured.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\fastmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\facebookpages.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\facebook.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\evernote.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\erepublik.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\epicgames.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\element.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\easy-redmine.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dropbox.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\disqus.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dockerhub.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gadugadu.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gaming-on-linux.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\grammarly.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gotomeeting.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlepodcasts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlemeet.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlekeep.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googledrive.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googleclassroom.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\googlecalendar.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-voice.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-news.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\grape.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-duo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\google-contacts.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\good-reads.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gmail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\glowing-bear.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitter.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitlab.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\github.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\gitea.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\discord.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dingtalk.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\dialpad.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\asana.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\anydo.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\anonaddy.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\android-messages.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\amazon-work-mail.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\amazon-web-services.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\all.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\airtable.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\airmessage.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\air-droid.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\types\index.test-d.ts
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\sync.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\package.json
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\os.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\license.md
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\index.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\get-sysinternals-du.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\node_modules\fast-folder-size\cli.js
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\basecamp.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bigbluebutton.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\azure-devops.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\binance.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\devrant.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bip.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\devdocs.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\confluence.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\coinbase.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clubhouse.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clockwise.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clockify.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\cliq.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\clickup.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\circuit.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\groupme.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatwork.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatwoot.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\chatra.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\canvas.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\campuswire.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\buffer.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\box.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bitwarden.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\bitbucket.tar.gz
  • %TEMP%\nsfb838.tmp\7z-out\resources\app.asar.unpacked\recipes\ciscospark.tar.gz
  • %APPDATA%\ferdium\network\network persistent state~rfe7c7f.tmp
Moves the following files
  • from %APPDATA%\ferdium\local storage\leveldb\000001.dbtmp to %APPDATA%\ferdium\local storage\leveldb\current
  • from %APPDATA%\ferdium\code cache\wasm\index-dir\temp-index to %APPDATA%\ferdium\code cache\wasm\index-dir\the-real-index
  • from %APPDATA%\ferdium\code cache\js\index-dir\temp-index to %APPDATA%\ferdium\code cache\js\index-dir\the-real-index
  • from %APPDATA%\ferdium\4ea4952f-0ac1-47c5-9475-d9de3d1a1937.tmp to %APPDATA%\ferdium\local state
  • from %APPDATA%\ferdium\session storage\000001.dbtmp to %APPDATA%\ferdium\session storage\current
  • from %APPDATA%\ferdium\2559a113-7f7e-4291-a0c4-e17aa1b100bd.tmp to %APPDATA%\ferdium\preferences
  • from %APPDATA%\ferdium\network\72bcef47-e0e0-478b-bfce-4857933ac428.tmp to %APPDATA%\ferdium\network\network persistent state
  • from %APPDATA%\ferdium\network\974199c4-c4bf-45cb-bc2e-00ba8c930c82.tmp to %APPDATA%\ferdium\network\transportsecurity
  • from %APPDATA%\ferdium\preferences to %APPDATA%\ferdium\preferences~rfe1d01.tmp
  • from %APPDATA%\ferdium\network\network persistent state to %APPDATA%\ferdium\network\network persistent state~rfe7c7f.tmp
Substitutes the following files
  • %APPDATA%\ferdium\preferences
Network activity
Connects to
  • 'dn#.google':443
  • 're####ctor.gvt1.com':443
  • '2.##.59.67':443
  • 'microsoft.com':80
  • '14#.#2.121.3':443
  • '18#.#99.108.133':443
TCP
HTTP GET requests
  • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
Other
  • 'dn#.google':443
  • 're####ctor.gvt1.com':443
  • 'r1######pivhx-n8vl.gvt1.com':443
  • '2.##.59.67':443
  • '14#.#2.121.3':443
  • '18#.#99.108.133':443
UDP
  • DNS ASK dn#.google
  • DNS ASK re####ctor.gvt1.com
  • DNS ASK r1######pivhx-n8vl.gvt1.com
  • DNS ASK microsoft.com
  • 'r1######pivhx-n8vl.gvt1.com':443
  • 'dn#.google':443
Miscellaneous
Searches for the following windows
  • ClassName: '#32770' WindowName: ''
  • ClassName: 'SysListView32' WindowName: ''
  • ClassName: 'Chrome_MessageWindow' WindowName: '%APPDATA%\Ferdium'
Creates and executes the following
  • '%LOCALAPPDATA%\programs\ferdium\ferdium.exe'
  • '%LOCALAPPDATA%\programs\ferdium\ferdium.exe' --type=gpu-process --user-data-dir="%APPDATA%\Ferdium" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAA...
  • '%LOCALAPPDATA%\programs\ferdium\ferdium.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="%APPDATA%\Ferdium" --mojo-platform-channel-handle=1500 --field-trial-han...
  • '%LOCALAPPDATA%\programs\ferdium\ferdium.exe' --type=renderer --user-data-dir="%APPDATA%\Ferdium" --app-user-model-id=org.ferdium.ferdium-app --app-path="%LOCALAPPDATA%\Programs\ferdium\resources\app.asar" --no-sandbox --no-zygote --lang=e...
  • '%WINDIR%\syswow64\cmd.exe' /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Ferdium.exe" | <SYSTEM32>\find.exe "Ferdium.exe"' (with hidden window)
  • '<SYSTEM32>\reg.exe' QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Ferdium' (with hidden window)
  • '<SYSTEM32>\wbem\wmic.exe' os get Caption' (with hidden window)
  • '<SYSTEM32>\reg.exe' ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Ferdium /t REG_SZ /d "\"%LOCALAPPDATA%\Programs\ferdium\Ferdium.exe\"" /f' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Ferdium.exe" | <SYSTEM32>\find.exe "Ferdium.exe"
  • '%WINDIR%\syswow64\tasklist.exe' /FI "USERNAME eq user" /FI "IMAGENAME eq Ferdium.exe"
  • '%WINDIR%\syswow64\find.exe' "Ferdium.exe"
  • '<SYSTEM32>\reg.exe' QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Ferdium
  • '<SYSTEM32>\wbem\wmic.exe' os get Caption
  • '<SYSTEM32>\reg.exe' ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Ferdium /t REG_SZ /d "\"%LOCALAPPDATA%\Programs\ferdium\Ferdium.exe\"" /f

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play
Wechat