Navigate
User Related Registry Hives, LNK files, etc
73 paths
C:\NTUSER.DAT
C:\NTUSER.DAT.LOG*
C:\DEFAULT
C:\DEFAULT.LOG*
C:\UsrClass.dat
C:\UsrClass.dat.LOG*
C:\*.LNK
C:\Users\%user%\AppData\Roaming\Microsoft\Word\
C:\Users\%user%\AppData\Roaming\Microsoft\Excel\
C:\Users\%user%\AppData\Roaming\Microsoft\PowerPoint\
C:\Users\%user%\AppData\Roaming\Microsoft\Publisher\
C:\Users\%user%\AppData\Local\Microsoft\Office\*\OfficeFileCache\
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Bookmarks*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Cookies*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Current Session
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Current Tabs
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Download Metadata
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Extension Cookies
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Favicons*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\History*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Last Session
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Last Tabs
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Sessions\
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Login Data
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Media History*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Network Action Predictor
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Network Persistent State
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Preferences
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\QuotaManager
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Reporting and NEL
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Shortcuts*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Top Sites*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Trust Tokens*
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Sync Data\SyncData.sqlite3
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Visited Links
C:\Users\%user%\AppData\Local\Google\Chrome\User Data\*\Web Data*
C:\Users\%user%\AppData\Roaming\Microsoft\Protect\*\
Required for offline decryption
C:\Users\%user%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\
C:\Amcache.hve
C:\Amcache.hve.LOG*
C:\Users\%user%\AppData\Roaming\Microsoft\Windows\Recent\
C:\Users\%user%\AppData\Roaming\Microsoft\Office\Recent\