%win_dir%\windefender.exe
%user_profile%\appdata\local\ae239944-f015-3c0d-e2c4-87a13a1fb148\{291c5d92-ee14-74dc-d6c4-3f87011ed148}
%user_profile%\appdata\local\{c1c46f64-cda0-44f3-b198-d652f918e413}\{c1c46f64-cda0-44f3-b198-d652f918e413}z.exe