1,C/windows/prefetch

2,C/windows/temp

3. C/windows/system32/download

4. C/windows/system32/logfiles

5.C:\Users\Administrator\xwechat_files\wxid_wwsz8i4ihifj21_9b2b\msg\file

6.C:\Windows\SoftwareDistribution\Download