MigDocUser *[*.library-ms] *[*.library-ms] Outlook Profiles and Data HKCU\Software\Microsoft\Office %CSIDL_APPDATA%\Microsoft\Outlook %CSIDL_LOCAL_APPDATA%\Microsoft\Outlook %CSIDL_APPDATA%\Microsoft\Signatures MigXmlHelper.DoesObjectExist("Registry","HKCU\Software\Microsoft\Office") MigXmlHelper.DoesObjectExist("File","%CSIDL_APPDATA%\Microsoft\Outlook") MigXmlHelper.DoesObjectExist("File","%CSIDL_LOCAL_APPDATA%\Microsoft\Outlook") MigXmlHelper.DoesObjectExist("File","%CSIDL_APPDATA%\Microsoft\Signatures") HKCU\Software\Microsoft\Office\16.0\Outlook\Profiles\* [*] HKCU\Software\Microsoft\Office\15.0\Outlook\Profiles\* [*] %CSIDL_APPDATA%\Microsoft\Outlook\* [*] %CSIDL_LOCAL_APPDATA%\Microsoft\Outlook\* [*] %CSIDL_APPDATA%\Microsoft\Signatures\* [*] iTunes Device Backups %CSIDL_APPDATA%\Apple Computer\MobileSync\Backup MigXmlHelper.DoesObjectExist("File","%CSIDL_APPDATA%\Apple Computer\MobileSync\Backup") %CSIDL_APPDATA%\Apple Computer\MobileSync\Backup\* [*] FileZilla Settings %CSIDL_APPDATA%\FileZilla MigXmlHelper.DoesObjectExist("File","%CSIDL_APPDATA%\FileZilla") %CSIDL_APPDATA%\FileZilla\* [*] Google Chrome Profiles and Data %CSIDL_LOCAL_APPDATA%\Google\Chrome\User Data\Default MigXmlHelper.DoesObjectExist("File","%CSIDL_LOCAL_APPDATA%\Google\Chrome\User Data\Default") taskkill.exe -IM chrome.exe /F %CSIDL_LOCAL_APPDATA%\Google\Chrome\User Data\* [*] %CSIDL_LOCAL_APPDATA%\Google\Chrome\User Data\Default\Cache\* [*] %CSIDL_LOCAL_APPDATA%\Google\Chrome\User Data\Default\* [Cookies*] Mozilla Firefox Profiles and Data %CSIDL_APPDATA%\Mozilla\Firefox\Profiles %CSIDL_LOCAL_APPDATA%\Mozilla\Firefox\Profiles MigXmlHelper.DoesObjectExist("File","%CSIDL_APPDATA%\Mozilla\Firefox\Profiles") MigXmlHelper.DoesObjectExist("File","%CSIDL_LOCAL_APPDATA%\Mozilla\Firefox\Profiles") taskkill.exe -IM firefox.exe /F %CSIDL_APPDATA%\Mozilla\Firefox\Profiles\* [*] %CSIDL_LOCAL_APPDATA%\Mozilla\Firefox\Profiles\* [*] %CSIDL_APPDATA%\Mozilla\Firefox\Profiles\* [*cookies.sqlite*] %CSIDL_APPDATA%\Mozilla\Firefox\Profiles\* [*webappsstore.sqlite*] PuTTY Settings and Data HKCU\Software\SimonTatham\PuTTY MigXmlHelper.DoesObjectExist("Registry","HKCU\Software\SimonTatham\PuTTY") HKCU\Software\SimonTatham\PuTTY\* [*] %CSIDL_APPDATA%\ [PUTTY.RND] WinSCP Settings and Data HKCU\Software\Martin Prikryl\WinSCP 2 MigXmlHelper.DoesObjectExist("Registry","HKCU\Software\Martin Prikryl\WinSCP 2") HKCU\Software\Martin Prikryl\WinSCP 2\* [*] %CSIDL_APPDATA%\ [winscp.rnd]